SWFAddress uses javascript top.location.hash to change the displayed URL - it doesn't redirect, just changes what is displayed.

At least that's how I think it works - the javascript is so optimized it's pretty much indecipherable.

Still it's an interesting approach - google SWFAddress if you want to dig any deeper.