6 ms·
You could make it offline and with provided laptops only, just like with the competitive CS2 scene.
by kevinsimper 5mo ago
You could make it offline and with provided laptops only, just like with the competitive CS2 scene.
- eastbound 5mo agoSince real-life situations involve AI, banning AI would make CTFs just a simple game, not a demonstration of capabilities and talent.
- hsbauauvhabzb 5mo agoCtfs need preparation and unconstrained internet, even if you block domains it’s possible to tunnel out
- belabartok39 5mo agoUse jumpbox to access CTF. Disable all wireless for the playing hall.
- hsbauauvhabzb 5mo agoI think you’re forgetting hotspots, or laptops with inbuilt 4/5g
- swiftcoder 5mo agoFaraday cages exist. Finally a use for all those damn SCIFs tech companies were building in the late 2010's...
- sheept 5mo agoPresumably if you block domains, you wouldn't be able to use AI to find a way around the block. So doing so demonstrates at least some human skill
- hsbauauvhabzb 5mo agoOr forethought, I’m sure you could ask an AI how to circumvent any blocks.
- ofjcihen 5mo agoProxy through an EC2. Ask me how I know.
- Retr0id 5mo agoUnconstrained internet is nice, but I don't think it's a hard requirement. Just tricky to enforce, even in-person.
- StrauXX 5mo agoIt is a hard requirement. Once you reach higher levels of challenges you spend most of your time reading through RFCs, web sepcs, Github issues, mailing lists, papers, random bugtrackers and library/framework code. There is no way to create a whitelist for that. Besides, a firewall won't stop good hackers.
- Retr0id 5mo agoNormal CTF workflows can involve a lot of research but that's not the point. You can design self-contained challenges with offline solving in mind, and bundle any truly necessary docs/src/etc. with the challenge download.
- sheept 5mo agoOffline CTFs could also incorporate physical security challenges, like lockpicking
- tylerchilds 5mo agoI do like the idea of escape the room games becoming the cybersecurity employable competition meta
- deleted 5mo ago[deleted]
- Retr0id 5mo agoThey often do
- hofiflo 5mo agoThe recent LakeCTF onsite finals had exactly that. LLM usage was forbidden (but players still used their own devices) and there were real-life challenges such as lockpicking as well. I’m part of the organizer team and what we’ve heard so far from participants was that it was really enjoyable not to have any LLM help because suddenly the actual skill and thrill when solving a challenge mattered again. I think what helped in this case as well was that the prizes weren’t high-value enough to incentivize cheating but that participating in the event itself and the social aspect around it are the main point.