Irresponsible?
Looking on the web, the conference was on the 1st-2nd September, the Times article on the 1st October. Whilst one can argue endlessly about 'responsible disclosure', blaming the Times for reporting on a vulnerability publicly disclosed a month earlier is a bit silly.
