You Can Have the Dinner
My dad bet me dinner that I couldn't hack a website while we were on holiday. The website was fine. The hospital PACS behind it was open to the internet with about 145,000 studies inside.
02 / writing
Notes from things I got too deep into.
Build logs, security writeups, and the useful parts I learned while making a mess.
Archive
5 entries / newest first
Security5 min
ChokerJoker, the Quarto bot that changes its mind
We built a Quarto bot for a university competition and got a little carried away. It chokes out safe moves, then switches over to a perfect endgame solver.
I bought ilia.beer on the train home
I bought ilia.beer on the train home because the domain made me laugh. A few weeks later it was running from a Raspberry Pi and people could actually use it to buy me beer.
The magic login link was in the response
My student housing portal returned the magic login link in its own API response. With nothing but an email address, that was enough to take over an account.
I wrote a PE loader to see what Windows does first
I wanted to know what Windows actually does with an EXE before it runs, so I wrote a small PE loader in C and pulled the whole process apart.