Rating:
The flag is stored in a custom storage service. The service only adds new data to its disk if it is not already contained in it. We can abuse the exposed statistics to know if data has been written to disk. We can thus brute force the flag one byte at a time.
