Uhm, that's not how you alert people of serious security flaws. Tell them they exist, demonstrate your hack, but do NOT reveal the flawed code to the public like that, as you basically create the situation you think needs to be prevented, even if it is temporary.
And this isn't a small security issue, this is huge.
I kind of think he should be arrested for this.