you see a lot of people that find bugs, and even serious exploits that never bother going to the trouble to report them, or crow about them publicly.

Just because nobody said anything, doesn't mean that nobody knew.