I know this technique is probably not going to be used for good purposes, and I'm sure we'll have to apply a new patch to fix that vulnerability in our (legal) code, but I still tip my hat to the clever hacks who came up with this attack.