I later wrote an article explaining how I computed that: https://www.da.vidbuchanan.co.uk/blog/colliding-secure-hashe...

(Doing it the "obvious" way would involve infeasible amounts of storage space)