What loophole? As they document over at Digital Inspiration, Pandora seems to skip the IP location check for requests coming in through HTTPS. You simply need to install an extension for your web browser that enforces HTTPS (such as HTTPS Everywhere for Firefox and HTTPS Everywhere for Chrome). Install them, open Pandora, and you’re in business.

Listen to Pandora Anywhere Without Using a Proxy [Digital Inspiration]