Most tier 1 and 2 ISPs upgrade their code in a timely fashion. They're also on a mix of Cisco, Juniper, and Foundry (and I hear someone actually uses Extreme). Some third-rate companies or pretenders might have problems in a situation like this, but the effect has been greatly exaggerated.

The disclosure aspect is sad, but it's not like this is anything new. Might want to get the lawyer hooked up *after* you quit your job to release the paper, and *before* you head out to the conference. Don't expect any different behavior from companies until the next regime change...