3 ms·
I question the metric used in these contests. Reports always makes it sound like someone just walks up completely unprepared and hacks a machine. ”We had to do
by adsr 16y ago
I question the metric used in these contests. Reports always makes it sound like someone just walks up completely unprepared and hacks a machine.
”We had to do everything from scratch. We had to create a debugging tool, create the shellcode and create the ROP (return oriented programming) technique,”
Obviously there is a fair bit of preparation involved.
- trotsky 16y agoThey're all prepared in advance. I don't really understand what you mean about the reporting though, as you point out the discussion makes it clear none of this is off the cuff.
- adsr 16y agoYeah that is my point, then why is there a focus on who is first?
- trotsky 16y agoEach day the rules get looser making the compromise easier. I can't find the 2011 rules easily but here they are from 2009: Day 1: Default install no additional plugins. User goes to link. Day 2: flash, java, .net, quicktime. User goes to link. Day 3: popular apps such as acrobat reader ... User goes to link iirc it's only the last year or two that most of them have been falling on day 1