but a chinese already found this bug in January : http://v.youku.com/v_show/id_XNTAzMDc4Mjgw.html
Video password is "wooyun"