It seems like there exists a simple temporary fix for servers—to not use minecraft authentication, which seems like a very viable temporary solution while this exploit gets the proper attention. (such as x-auth that the author mentions or the server immediately asking the user to enter a password when connected via console)