Hey HN, here's a link to the tech details of the vuln: http://blog.includesecurity.com/2014/02/how-i-was-able-to-tr...

and a video demonstrating the app we made for exploiting this vuln: http://www.youtube.com/watch?v=3E2DwdS_PvQ&t=1m18s