I'm a total neophyte when it comes to the Linux kernel development process, but couldn't they just, y'know, use a Gmail address or something? Couldn't the original researchers have done the same?
> But they can't then use that type of "hiding" to get away with claiming it was done for a University research project as that's even more unethical than what they are doing now.
And one of the most reasonable "stories" behind a patch is "I'm working at a university and found a bug", probably right behind "I'm working at a company and we found a bug".
Banning U of M won't solve everything, but it is dropping a source of known bad patches.