Comment by octocode

I'm a bit confused, this blog post is written as if it's an exploit, but it looks like it's the intended functionality? Am I missing something?