My understanding is that the person in the article used an IR blaster to get to menus on the system that aren't normally available to the guest. Since he had complete control over the IR signal, he was able to generate signals that the guest remote doesn't.
For example, he was able to reprogram the ID on the TV so it was identical to one in another room. He was then able to view that guest's portfolio.