TL;DR (the harder way):
1. notice that s = 0 actually pass2. attack assuming that s = 03. profit!
TL;DR (referenced from rbtree god):
1. hash your command and send it with your public key2. ??3. profit!