On a blog post for Tinfoil Security, it would be better to phrase this as "We also check for these types of vulnerabilities." Tinfoil Security clearly found this specific vulnerability using their own product.
That would make sense if he left the comment on Tinfoil's actual blog post. Here in HN i don't think it matters.