Dailydave mailing list archives

Re: CTFs


From: "Kevin T. Neely" <ktneely () astroturfgarden com>
Date: Mon, 26 Nov 2018 22:39:03 -0800

If CTFs are both important AND they take away from the participants'
experience, why not have a day, or two, or even multiple half-days where
the CTF is the only thing going?  SANS does this with Netwars.  At other
events, I often find myself torn between either 1) talks, preparing and
presenting my own material, or, more commonly, after-hours events and 2)
the CTFs and contest-area content.  CTFs take a lot of time and
concentration, so why not promote participation by having them be the
exclusive non-hallway activity for some part of the time?

You could even have the track seating areas -slowly- walk through the
first, second, or even third (depending upon how many tracks, and how many
contests) problems to give first-timers an idea as to what a CTF is.

I say this as someone that is always trying to get my team to participate
in these types of events, but find that trepidation and unfamiliarity are
by far the biggest roadblocks.

K

On Tue, Nov 20, 2018 at 8:14 AM Jordan Wiens <jordan () psifertex com> wrote:

For more context for those that haven't seen it, here's the game we made
for the CTF:

https://sourcery.pwnadventure.com/

We're continuing our quest to make hacking a first-class video game
mechanic. Now, instead of hacking the game itself to win, you hack inside
the game using in-game elements.

On Mon, Nov 19, 2018 at 9:30 AM Dave Aitel <dave.aitel () gmail com> wrote:

So at CSAW a couple weeks ago there was a CTF, and like most conferences,
it worked out well. I mean part of it is Vector35 doing their magic and a
set of players who had both skills and focus. (Vector35 will be back with a
bigger class at INFILTRATE this year!)

Anyways, I both love and hate CTFs and security conferences. At DEFCON I
find they're the only thing I really watch. But for most conferences I feel
like the people who should MOST be watching the talks and "networking" are
instead playing a CTF, which frankly they could do anywhere over the
internet? I mean, the GRIMM CTF at INFILTRATE (which is ICS focused) has
lights and action happening, which is cool.

Anyways, one thing that's different about INFILTRATE is most people do
not bring laptops of any kind. So when we do the NOP test or when we have
CTFs available, then we supply a burner laptop.

My idea of the weekend was not to have a CTF, but to just have a THING
which people banged on collectively. Patched up Solaris 8, maybe, or a
metal detector. Something a bit less formal, perhaps. What do you think?

-dave

_______________________________________________
Dailydave mailing list
Dailydave () lists immunityinc com
https://lists.immunityinc.com/mailman/listinfo/dailydave

_______________________________________________
Dailydave mailing list
Dailydave () lists immunityinc com
https://lists.immunityinc.com/mailman/listinfo/dailydave



-- 
In Vino Veritas
_______________________________________________
Dailydave mailing list
Dailydave () lists immunityinc com
https://lists.immunityinc.com/mailman/listinfo/dailydave

Current thread: