[Dailydave] CTFs

[Kevin T. Neely]

If CTFs are both important AND they take away from the participants'
experience, why not have a day, or two, or even multiple half-days where
the CTF is the only thing going?  SANS does this with Netwars.  At other
events, I often find myself torn between either 1) talks, preparing and
presenting my own material, or, more commonly, after-hours events and 2)
the CTFs and contest-area content.  CTFs take a lot of time and
concentration, so why not promote participation by having them be the
exclusive non-hallway activity for some part of the time?

You could even have the track seating areas -slowly- walk through the
first, second, or even third (depending upon how many tracks, and how many
contests) problems to give first-timers an idea as to what a CTF is.

I say this as someone that is always trying to get my team to participate
in these types of events, but find that trepidation and unfamiliarity are
by far the biggest roadblocks.

K

On Tue, Nov 20, 2018 at 8:14 AM Jordan Wiens <jordan at psifertex.com> wrote:

> For more context for those that haven't seen it, here's the game we made
> for the CTF:
>
> https://sourcery.pwnadventure.com/
>
> We're continuing our quest to make hacking a first-class video game
> mechanic. Now, instead of hacking the game itself to win, you hack inside
> the game using in-game elements.
>
> On Mon, Nov 19, 2018 at 9:30 AM Dave Aitel <dave.aitel at gmail.com> wrote:
>
>> So at CSAW a couple weeks ago there was a CTF, and like most conferences,
>> it worked out well. I mean part of it is Vector35 doing their magic and a
>> set of players who had both skills and focus. (Vector35 will be back with a
>> bigger class at INFILTRATE this year!)
>>
>> Anyways, I both love and hate CTFs and security conferences. At DEFCON I
>> find they're the only thing I really watch. But for most conferences I feel
>> like the people who should MOST be watching the talks and "networking" are
>> instead playing a CTF, which frankly they could do anywhere over the
>> internet? I mean, the GRIMM CTF at INFILTRATE (which is ICS focused) has
>> lights and action happening, which is cool.
>>
>> Anyways, one thing that's different about INFILTRATE is most people do
>> not bring laptops of any kind. So when we do the NOP test or when we have
>> CTFs available, then we supply a burner laptop.
>>
>> My idea of the weekend was not to have a CTF, but to just have a THING
>> which people banged on collectively. Patched up Solaris 8, maybe, or a
>> metal detector. Something a bit less formal, perhaps. What do you think?
>>
>> -dave
>>
>> _______________________________________________
>> Dailydave mailing list
>> Dailydave at lists.immunityinc.com
>> https://lists.immunityinc.com/mailman/listinfo/dailydave
>>
> _______________________________________________
> Dailydave mailing list
> Dailydave at lists.immunityinc.com
> https://lists.immunityinc.com/mailman/listinfo/dailydave
>


-- 
In Vino Veritas
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.immunityinc.com/pipermail/dailydave/attachments/20181127/78ca92d4/attachment.html>