
You Can Have the Dinner
My dad bet me dinner that I couldn't hack a website while we were on holiday. The website was fine. The hospital PACS behind it was open to the internet with about 145,000 studies inside.

Systems, security, and projects that got a little out of hand.
newest first · 5 entries

My dad bet me dinner that I couldn't hack a website while we were on holiday. The website was fine. The hospital PACS behind it was open to the internet with about 145,000 studies inside.

We built a Quarto bot for a university competition and got a little carried away. It chokes out safe moves, then switches over to a perfect endgame solver.

I bought ilia.beer on the train home because the domain made me laugh. A few weeks later it was running from a Raspberry Pi and people could actually use it to buy me beer.

My student housing portal returned the magic login link in its own API response. With nothing but an email address, that was enough to take over an account.

I wanted to know what Windows actually does with an EXE before it runs, so I wrote a small PE loader in C and pulled the whole process apart.