Re: The long tail of vulnerable operating systems

[Chris Eagle <cseagle () redshift com>]

Dave aitel wrote:
> But old operating systems will continue to live forever in CTF, I assume.

Defcon CTF has used FreeBSD5.4 in 2005, Solaris 10 in 2006, and
FreeBSD6.2 this year as the basis for the game.  In each year, it has
been all about the applications and not the O/S.  Since it is spread
over three days, they can do primarily binary apps.  The 6-8 hour
university CTFs that go on these days tend to be primarily web apps with
an occasional binary thrown in.  These have used Debian, Gentoo, and
Ubuntu though they either forget or choose not to disable things like
ASLR.  The two day long Defcon qualifier that is run like a Jeopardy
board is one of the more interesting challenges out there theses days.
They used OSX for one of their remotes this year.

Chris
_______________________________________________
Dailydave mailing list
Dailydave () lists immunitysec com
http://lists.immunitysec.com/mailman/listinfo/dailydave