Previous article had to sniff the NFC password when the handle connected to the head. New article has a convenient form to generate password.
How did they reverse the brush head password algorithm?
https://youtu.be/EPytrn8i8sc "Hacking the Phillips Sonicare NFC Password" (buried three links deep)