Installing an OS when Microsoft doesn't want you to is the exploit. The legitimate user is the "attacker," Microsoft (or their policy) is the "target."

(I'm not sure if that's what the Register was trying to say, because they're kind of screechy and incoherent at the best of times, but that's how I personally read it.)