@D3C4FF CTF? Guys completed 8/20 challenges and made it to 18th place out of 115 teams that completed at least one challenge. I'd say that's a pretty good result. :)
@D3C4FF same here... I really wanted to do that minesweeper 3D since I already have that client from the previous CTF I could use... and the "bloat" challenge with the search for a backdoor in a web app also sounds like my kind of thing... but I didn't have enough time for any :(
Let's participate in the SIGINT CTF 2013 as team Sec.SE.
During this years SIGINT in Cologne the CCCAC will hold it's second CTF.
The competition is open to everyone and can be played online. Challenges will be online from July 5, 18:00 CEST until July 7, 18:00 CEST (48h).
As always...
@D3C4FF - Wow, I've just read it. The most disturbing to me is the pace at which they were changing underlying crypto, which clearly shows they didn't really know what they were doing (and the research shows it glaringly obvious). Cryptocat 2 is still a lot more secure though, so the analysis presented here still stands. It is far from perfect, which is a lot to expect from a host based security as it is, but at least they started acknowledging urge to implement crypto better, if they still don't quite get it spot on. :? — TildalWave1 min ago
> UFO CTF 2013: July 19, 2013, 2 p.m. — July 21, 2013, 2 p.m., Format: Jeopardy
> Warning! Our planet is in great danger, 19.07.13 18.00 UTC + 4 The Earth will be subjected to invasion of alien races. The people have been fighting between each other for a long time, but now is time to unite our forces. The main weapon of the militant aliens is their mind, any human weapon has no power against it. The people have no choice, we will have to play by the aliens' rules.
> The only thing we can try to defend our home planet is to counterattack them with united power of human mind. Take your part in the stand against the alien civilization!
so it's an Independence Day CTF... "It ain't over till the fat lady sings" :)) LOL
@HamZa yup I'm the vampy... usually happens when I can't see myself out of work I hate and get all inventive in postponing it as much as possible, then need to hurry :)
NSFW but Google returns some nice images when searching for "vampy bit me" :)
You know what would be nice? A shared linux box that we can all ssh into and collaborate on. I was thinking of providing this, but I wasn't sure how to do this in a safe way :P
@lynks You can do it, just be sure to mention that you have registered in the chatroom. Or ping me/Gilles to privateify the room and then post the details
@ManishEarth I agree we need much better collaboration. Coming from a competitive gaming background, nothing beats voice comms. But also a workspace for files et al. I agree.
The thing is that person X will be working on something, drop it halfway and go to sleep
Another idea would be a shared Google Doc that lists details on the progress in each challenge (so you can just pick up where other people left off), and links to unlisted pastebins of any codes.
@TerryChia No, you give them a new password-management system that has a backdoor built in. Heck, you can even give them a modified version of that mail program from the CTF :P
From the precise moment of establishing an internetworking connection what's the minimum time your machine could get infected, if a hacker was waiting? one second, 10 seconds???
@RohanDurve-Decode141 UPDATE TABLE users SET password=MD5('salt'+password);, and then modify your login code to test against the salted hash. Hopefully
Okay, so, would "All OSs have in-built backdoors. Governments are spying on us all. Aliens have already infected all of our computers." be an acceptable answer to that question?
We never really gave you a proper thread this past year, so your previous thread was exceedingly stale for a while. As such, here comes a brand new, shiny thread for y'all! Community Promotion Ads, let's go~
What are Community Promotion Ads?
Community Promotion Ads are community-vetted advertis...
@RohanDurve-Decode141 Do you know what the subst command does on Windows? You can have a lot of fun with it by using it to prove the existence of PRISM
@Polynomial Yep. I have a batch file that creates 20-odd drives with subst, and then I claim, that "whenever you buy a hard drive, you only get 5% of the capacity. The remaining is hidden away and reserved for logging all your activities, including a constant video from the built in webcam. This program frees up that space and makes it useful"
@TerryChia It's linux. Anything is possible. The correct question is "How much work do I need to put in to make a different wallpaper per workspace on GNOME"?
I took like 4 hours yesterday to figure out how to override my HDMI port from nVidia and softwire it to the Intel Gfx Card (without which I can't have 2 displays on Linux).
I find it funny that many Windows users say that "you need to use the terminal in linux if you want to make changes or do anything", when none of those things are at all possible on Windows
The solution involved configuring prop nVidia drivers, Bumblebee, X11 X Window Manager and then like assigning a separate DM for each screen, because lightdm (from Ubuntu),etc can only run one instance.
@RohanDurve-Decode141 I'm pretty sure Microsoft will disagree with you. I don't think they copied that hideous abomination called Windows 8 from anyone.
@RohanDurve-Decode141 Been there, done that. On a netbook. An XP netbook which I was using when my main comp died out. Was going home, but I wanted to finish something up so I coded on the train
@Simon No, but I need to make the file look complicated, yet someone who knows computers but isn't familiar with bat (i.e. will immediately realize what goto does, but won't know that some random command I use is made up). So I need to have a bunch of crap that doesn't get executed -- but a reader won't know that it's obvious
@lynks by "the section in the theme park", you mean the bit where he takes the photo and they look like ghosts? I think the point there is that they're not real, and he's dreaming them being there. The kid is dead and the mother is still alive, but she still doesn't know who killed her son
@lynks and I dunno about the prison bit at the end. Not sure what you're referencing.
but as far as I understood it, the only dead person was the kid. everyone else lived. the bald guy never existed and was just there to torment his psyche.
@Polynomial Im more referring to the horror ride, which mirrors the whole film. The severed hand, the prostitute, the hit and run, and the tunnel and the accident that kills him. After the hit and run he goes through a tunnel, in the ride there is a red car and a body bag. He looks dead throughout the whole film, he is constantly hanging around an airport (purgatory, waiting to go to heaven)
and the prison at the end, when he finally comes to terms with what he did and hands himself in, is completely painted white.
@Polynomial yeah its an awesome film. i think my favourite scene is when he's talking to the bald guy for the first time, when there is a storm in the sky.
@Gilles Yup will do in about an hour. If you don't mind (and won't update till then) I'll also edit your last announcement for SIGINT to include results (stats really) and change the title that it's over and writeups available. ;)
Let's participate in the SIGINT CTF 2013 as team Sec.SE.
During this years SIGINT in Cologne the CCCAC will hold it's second CTF.
The competition is open to everyone and can be played online. Challenges will be online from July 5, 18:00 CEST until July 7, 18:00 CEST (48h).
As always...
From the precise moment of establishing an internetworking connection what's the minimum time your machine could get infected, if a hacker was waiting? one second, 10 seconds???
