@Scriptmonkey said:
Fun box, completely blasted past the user flag without even thinking, didn’t realise I had it all along until just before I popped the root flag.Really annoying though battling the password changers. A situation made all the more complicated given the way the second stage plays out, there were folk requesting password resets when the rig was working 100% fine then folk changing the password and locking everyone out. Twice the downtime, twice the attraction to VIP
People also do it on VIP - yesterday I gave up after I was logged out the umpteenth time and decided to wait some time until the password changers are done. Or until there are so many comments here in the forum that people notice you need not change the password.
If using a password change feature is so ‘tempting’ a box should maybe come with a warning - e.g. like the brute-force disclaimer a certain creator always has on his boxes.