I'm the author of the blog post - the exploit is so simple it kind of speaks for itself, but if anyone has any questions feel free.