The paper, which is linked from the article, demonstrates a browser "fingerprinting" attack, which is to say, stealing pixels from one iframe using another iframe (which is quite clearly a violation of the safety properties the browser is supposed to provide).
It's unfortunate that this article is poor, but the paper itself is clear and readable.
It's unfortunate that this article is poor, but the paper itself is clear and readable.