Obviously you cannot do so any longer as the bug has been fixed, but that seems like a good description of the exploit as shown in the video.