Hardest part of this one was figuring out wth was going on at first. Also the hardest part was getting a stable user shell (maybe not strictly needed but makes life so much easier). I got the root flag before the user flag. It will be interesting to see the writeups.