5 ms·
>it's a different kind of competition than the players expected CTFs are (usually) hacking competitions for hackers, what else would you expect?
by prvit 4y ago
>it's a different kind of competition than the players expected
CTFs are (usually) hacking competitions for hackers, what else would you expect?
- PeterisP 4y agoIt's like saying in biathlon (skiing+shooting) how can you arrive at the finish second if you have a working gun? Rules are rules, there's a clearly defined scope of where the fighting happens and where it does not.
- prvit 4y ago> It's like saying in biathlon (skiing+shooting) how can you arrive at the finish second if you have a working gun? It’s really not.
- saagarjha 4y agoCTFs are not free-for-all competitions, they are clearly time-bounded and designed for enjoyment. Having a team show up with a zero day chain for Linux that they designed for a year spoils the enjoyment of everyone else.
- prvit 4y agorming the CTF infra spoils the enjoyment of everyone else, winning because you’re the best and showed up with a cool exploit chain isn’t spoiling anything for anyone.
- saagarjha 4y agoRight, so my point is that hacking everyone playing the CTF or the infrastructure is similar to running rm. Using a zero day on a challenge to get a flag is often allowed and even seen as amusing.
- prvit 4y ago> Right, so my point is that hacking everyone playing the CTF or the infrastructure is similar to running rm. It’s really not. rm is destructive, hacking competitors or infra to collect flags isn’t.
- saagarjha 4y agoIf you hack the infra to get all the flags it's really pretty close to just nuking the competition then and there isn't it? What's the point for everyone else to continue after that?
- prvit 4y agoWinning is not the same as nuking the competition. > What's the point for everyone else to continue after that? Fun? Second, third, fourth … place? I’d imagine most CTF teams don’t go in expecting to win. And how are the other teams supposed to know anyway?