I can’t speak directly about how they do it for The NY Times, but at least in the past there were a few methods.

On some websites the paywall is only client-side. By capturing the contents of the page and removing the client-side banner, you can access content.

There are also some that allow specific user agents, such as those used by search engine crawlers, so that the entire contents becomes indexed.