The answer is actually posted in full at the Android Root Source Code.

Below is just a sloppy paraphrase, but I hope it helps makes sense of the genius behind Mr. 7-4-3-C AT web d0t de's hack.
...