Probably via growl, which can listen over a network (and presumably, forwarded ports via SSH). Not sure on details though.