Using a specially crafted cookie, you can write data to /dev/null. Can you abuse the write and read the flag?