Rating:

### Summary
1. `scanf("%s")`
2. Using + or - when calling scanf results in an `uninitialized variable`. (canary leak)

Original writeup (https://blog.jsec.xyz/ctf-write-up/2021/03/08/zer0pts-CTF-2021-stopwatch-write-up.html).