My experience with product-security@apple.com was that they sat on my report without doing anything for several months, then finally put together a fix after I

My experience with product-security@apple.com was that they sat on my report without doing anything for several months, then finally put together a fix after I threatened to go public. It sounds like this guy may have skipped the threatening step and just went public.