That hash didn't really hurt anyone. E.g., it wouldn't allow one to impersonate the OP in a comment on TFA, since Blogger has its own auth cookies. (That would be an embarrassing vuln for a security blogger.)