They didn't have an exploit: they showed how to get the private keys to sign anything. Much more valuable (for legitimate uses (and piracy)) than geohot's posting of one individual key.