3 ms·
Ctfs need preparation and unconstrained internet, even if you block domains it’s possible to tunnel out
by hsbauauvhabzb 5mo ago
Ctfs need preparation and unconstrained internet, even if you block domains it’s possible to tunnel out
- belabartok39 5mo agoUse jumpbox to access CTF. Disable all wireless for the playing hall.
- hsbauauvhabzb 5mo agoI think you’re forgetting hotspots, or laptops with inbuilt 4/5g
- swiftcoder 5mo agoFaraday cages exist. Finally a use for all those damn SCIFs tech companies were building in the late 2010's...
- sheept 5mo agoPresumably if you block domains, you wouldn't be able to use AI to find a way around the block. So doing so demonstrates at least some human skill
- hsbauauvhabzb 5mo agoOr forethought, I’m sure you could ask an AI how to circumvent any blocks.
- ofjcihen 5mo agoProxy through an EC2. Ask me how I know.
- Retr0id 5mo agoUnconstrained internet is nice, but I don't think it's a hard requirement. Just tricky to enforce, even in-person.
- StrauXX 5mo agoIt is a hard requirement. Once you reach higher levels of challenges you spend most of your time reading through RFCs, web sepcs, Github issues, mailing lists, papers, random bugtrackers and library/framework code. There is no way to create a whitelist for that. Besides, a firewall won't stop good hackers.
- Retr0id 5mo agoNormal CTF workflows can involve a lot of research but that's not the point. You can design self-contained challenges with offline solving in mind, and bundle any truly necessary docs/src/etc. with the challenge download.