I also clicked through to an earlier article of theirs, about a dns issue. That was even harder to get through: I still don't understand the vulnerability exactly after reading the whole thing. It tries to explain every detail and somehow loses me in the weeds; I think a simple Python PoC would have been more clear than the long post. Compared to that, they're improving! This article is pretty clear about the mechanism once you get to it.
