Does anyone have an idea on how this exploit could have worked? If only the hacker(s) would write a blog article or make a LiveOverflow-style video about it. It would be quite entertaining. I'd be so curious/intrigued to know more about this specific exploit, it's a shame it wasn't a responsible disclosure from a white-hat.