[nucleardog]

This was my first thought as well - either there's some major issue with SSL that allows MITM attacks which I'm unaware of, or this article isn't very accurate/precise.

[samman]

Perhaps one of the techniques discussed here: https://www.youtube.com/watch?v=MFol6IMbZ7Y ?

Or, as this was published a couple of days ago, it might have utilized POODLE, or even BEAST in unmitigated cases.

But yeah, I'd also believe user error in some cases.