Sure, see the first part of the blog post, under "Responsible Disclosure"