[taumhn]

If I understand correctly, what's described in the article indeed uses a collision attack. The "trusted app" is one the hacker manufactures himself.

[ryan-c]

Yes, that was what the article says, but the person I was responding to misunderstood.