Responsible disclosure matters and this is not the way to do it… I have already PMed @bumi. While there is urgency for people to change their emails to a throwaway, you should not be disclosing how/why it works. We don’t need 1000 people with access to the e-mails instead of 1. Attackers are usually faster than users/devs too.