3 ms·
If my understanding of the pwn2own event is correct, it's not a CTF event and the exploits are typically developed in advance, and then demonstrated during the
by auiya 8y ago
If my understanding of the pwn2own event is correct, it's not a CTF event and the exploits are typically developed in advance, and then demonstrated during the event? If there are 2 or more exploits which all work reliably, who is determined to be the "winner"?
- anotheryou 8y agoI found the tesla rules: you need to exploit as many systems as possible as hard as possible: https://static1.squarespace.com/static/5894c269e4fcb5e65a1ed623/t/5c36468c1ae6cfc9ce0a7a9f/1547060891346/01-Tesla_Table.png?format=750w https://static1.squarespace.com/static/5894c269e4fcb5e65a1ed... via https://www.zerodayinitiative.com/blog/2019/1/14/pwn2own-vancouver-2019-tesla-vmware-microsoft-and-more https://www.zerodayinitiative.com/blog/2019/1/14/pwn2own-van...
- jaybosamiya 8y agoAs per the full contest rules (https://www.zerodayinitiative.com/Pwn2Own2019Rules.html https://www.zerodayinitiative.com/Pwn2Own2019Rules.html): > If more than one contestant registers for a given category, the order of the contestants will be drawn at random. Based on the contestant order, the first contestant will be given an opportunity to attempt to compromise the selected target. If unsuccessful, the next randomly drawn contestant will be given an opportunity. This will continue until a contestant successfully compromises the target. The first contestant to successfully compromise a selected target will win the prize money for that target in that category. After a target has been compromised, the contest for that category is over and no other contestants will participate in the contest for that category (unless Sponsor has offered an additional winner option, which would be announced at the conference if applicable).