This idea has been around for a long time; see e.g. Zalewski's paper from 2003: http://lcamtuf.coredump.cx/juggling_with_packets.txt

Cool to see an implementation though!