I think it's a fair guess that a security researcher like that knows how to post on hn without leaving their home address. It's not particularly difficult.
Unfortunately HN / Cloudflare / Google still block some Tor users with the privacy invasive software known as ReCAPTCHA. Not sure if they’ve switched to hcaptcha yet.