Well, I found the same by pure chance before reading this article, and I suspect many more in the HN crowd did.
If already half a dozen people on HN report they’ve found it and emailed the person about it, it’s likely it’s too late for responsible disclosure.