Theoretical proof of concept attack. I kept waiting for them to tell me about the actual attack, but then it ends with a link to an identical post by somebody else (previously submitted too).