Amature CTF

[Vyrus]

If memory servs me correctly there was a small atempt to set up an amature CTF contest for last year (dc12) that never made it off the ground. On behalf of DC949, i would like to set this up for real. The basic concept that we are thinking of useing is the intrusensec contest as a base "www.hackerplayground.com". basicly, we set up 3 systems, with 3 diffrent os's and teams or individuals simply walk up, plug in (or wifi in) and atempt to hack one of the 3 systems. once hacked the team or individual recives points, but the game is not over. Once inside the uesr must secure the box against any other rooters. Contestents will also recive points for the amount of time they are able to protect the box. The winner of course will be the contestent with the most points, prizes (if there are any :P) will be handed out on the last day. We at dc949 are willing to supply all of the personel and hardware for this contest if you all think it's a good one... please post here what you think

[xChris]

Wait isnt this similar to root fu? I thought that was the main CTF comp.

-chris.

[Tierra]

The amature CTF contest idea in general is a good one, just coming up with a good way to run it is the hard part. I'd be interested to see a group pull it off.

[che]

The amature CTF contest idea in general is a good one, just coming up with a good way to run it is the hard part. I'd be interested to see a group pull it off.

Amature CTF has been running for years... Don't believe me? Just hook your system to the network.... :evil:

[Tierra]

Amature CTF has been running for years... Don't believe me? Just hook your system to the network.... :evil:

Good point.

[astcell]

Maybe the scorers can offer one of the CTF teams additional points for every hour they let one newbie hang around and ask questions. It may be just enough of a distraction to warrant points, and an education.

[Vyrus]

so is that a yes ?

[highwizard]

so is that a yes ?

As Tierra said, it's a good concept in theory. But how would you go about pulling it off?

[Vyrus]

the same way as intrusionsec... "see above title post". basicly, we have 3 boxes... one mac one windows one linux. people hack them. then once there hacked there job is to defend the box from other atackers.. who ever holds any one box the longest wins :P. scoreing will be done just like the real ctf, we will check for a value on one of the servers.

[Kenderkin17]

Okay this sounds like a wonderful game... but I am such a newbie I could only sit there and watch my windoze system be infultrated... it's sad. I am just recently starting into this security field independently. God help me at DC lol. Ah well sadly I can't bring my box... no laptop, and I seriously doubt they want me to carry my desktop to DC13. lol.

[Voltage Spike]

I seriously doubt they want me to carry my desktop to DC13.

"They" don't care, but I'm telling you it would be a dumb idea. I do bring my laptop, but only because it is convenient. There really isn't much as many computer-related activities at Defcon as you might imagine.

[Kenderkin17]

Heh k thanks. The "they" I was talking about while considering the Hotel and such, was more the party I intend to travel with to DefCon. ^.^ I just got an interesting link from part of our forum so I have some back reading to do now. I'll go back to lurking and be silent until such a time that I can offer some relevent information.

[Vyrus]

well then since evrybody thinks it such a good idea... lol who do i talk to about getting "offical consent" to run the contest ?

[TheCotMan]

well then since evrybody thinks it such a good idea... lol who do i talk to about getting "offical consent" to run the contest ?

The obvious answer would be DT (http://forum.defcon.org/member.php?find=lastposter&t=5153).

[Vyrus]

lol guess ill try again since my previous message went un answered :P

[TheCotMan]

lol guess ill try again since my previous message went un answered :P

He is a very busy guy. Several years ago, a buddy and me had an idea for a presentation which used the hacker mentality to solve interresting problems that had nothing to do with computers. It would have been filled with entertainment, information and comedy....
However, a by-product of the presentation could have lead to a number of con attendees running around the con with homemade weapons hurting each other.

After about 3 weeks without a response, my buddy asked again about this and got a reply. DT wondered about the very problem stated above and the presentation never went anywhere.

Be patient. After about 1 to 3 weeks, if you get no reply, reply to your own message (so threading will work) and provide a reminder. If still no response wait much longer before sending another reminder. If after 3 reminders are sent or 3 months (whichever comes first) and you do not have a reply, assume a "pocket veto."

Lack of reply does not mean he does not care, it just means he is busy. :-)

Good luck.

[spongie]

It is an honor to see that people would like to see our games at defcon. Linsys and I have thought about talking with dt about taking our network to con but haven't yet per we don't know if we are gonna be able to make it this year. We would like to stay in the loop of the progress of this and if this is still on the table for an option at this years con. At this time Intrusionsec has moved to a different location and are still working on getting it back up. We have to rebuild the monitor box and reload the os's. Please keep visiting to see the progress we have made.

[bascule]

so is that a yes ?

As long as those securing the system only get points so long as they can keep a particular service which is periodically polled up and running. Otherwise you could win by disabling all services and firewalling all network traffic except one incoming port (for say, a copy of ssh you built yourself), or even remotely reinstalling the entire operating system.

[TheCotMan]

As long as those securing the system only get points so long as they can keep a particular service which is periodically polled up and running. Otherwise you could win by disabling all services and firewalling all network traffic except one incoming port (for say, a copy of ssh you built yourself), or even remotely reinstalling the entire operating system.

Or trivial services such as "echo" and "chargen" :-D

[Vyrus]

It is an honor to see that people would like to see our games at defcon. Linsys and I have thought about talking with dt about taking our network to con but haven't yet per we don't know if we are gonna be able to make it this year. We would like to stay in the loop of the progress of this and if this is still on the table for an option at this years con. At this time Intrusionsec has moved to a different location and are still working on getting it back up. We have to rebuild the monitor box and reload the os's. Please keep visiting to see the progress we have made.
Reply With Quote

WOW :P, it is nice to see that

1) our group is not the only one promoting this event and

2) we have the intrest of the group we are trying to emulate :P

I would love to post more info on the setup's final prosses as defcon growes closer, however i have no info to give you :P. On a positive note though... i HAVE recived a response email from DT only he thought i was asking about THE CTF, to wich my response was "dude we arn't THAT l33t :P". So when he and i get on the same page and i get "Offical" permition to set up as an event then ill post the latest .

till then, check this thread :P

[Bounty]

I'm not sure how you're planning on keeping track of 'rooters' but it would be fun if securing it wasn't part of (or maybe after a certain point?) the game. That way the game is open to us lesser peons longer. Especially if over wireless, so we can sit by the pool and play. Perhaps you get points for each server or service owned. Reward variety of knowledge, instead of being the first to root it, then patch it. Also a wide variety of servers / services would show who knows more than one trick. This would require more boxes setup on the target network, but if many could access this game, I'm sure you could get some donated hardware... I would.

-Bounty

(also, any other boxes other than win/mac/*nix such as Cisco devices, printers etc. would be fun to play on.)

[Vyrus]

I'm not sure how you're planning on keeping track of 'rooters' but it would be fun if securing it wasn't part of (or maybe after a certain point?) the game. That way the game is open to us lesser peons longer. Especially if over wireless, so we can sit by the pool and play. Perhaps you get points for each server or service owned. Reward variety of knowledge, instead of being the first to root it, then patch it. Also a wide variety of servers / services would show who knows more than one trick.

yea, people will score points by the amount of time they are able to hold a service (ftp, ssh, etc...) so you will get points per service per hour of time


This would require more boxes setup on the target network, but if many could access this game, I'm sure you could get some donated hardware... I would.

-Bounty

(also, any other boxes other than win/mac/*nix such as Cisco devices, printers etc. would be fun to play on.)

lol well we are only brinning a box to be 0wn3d and the score keeper but more attack boxes was the original plan... email me if you have some to donate so that i can program scorekeeper to handel them and get on the network :P

[bascule]

I'm not sure how you're planning on keeping track of 'rooters'

A service running on a low numbered port would be the easiest solution. Have a scorekeeper system periodically poll this service to see who is in control of it.

but it would be fun if securing it wasn't part of (or maybe after a certain point?) the game.

It inherently has to be... whoever gets control of it needs to keep control for the longest.

But, of course, the system should have as many holes as possible in its default configuration.

[che]

One option would be to have either a few boxes with default installs of different OSes or a decent box running VMware (probably better, so you can go back to pre-0wned state). You could also set up a box that does nothing but sniff traffic and output it to a screen for all to see. You may want to talk to some of the folks doing "Hack or Halo" at Shmoocon.. they did a very nice job.

[Bounty]

I'm guessing we would also want this advertised pretty well. In the booklet and on the website etc. In the past when I've put up servers (very open systems) over wireless networks with SSID's like HACKME, nobody does. Hell, hardly anyone even associates to the AP, even with decent coverage. I'd really like to see this happen, but it's pointless to set all this up, not to have anyone do it.

-Bounty

[Salem]

I'm guessing we would also want this advertised pretty well. In the booklet and on the website etc. In the past when I've put up servers (very open systems) over wireless networks with SSID's like HACKME, nobody does. Hell, hardly anyone even associates to the AP, even with decent coverage. I'd really like to see this happen, but it's pointless to set all this up, not to have anyone do it.

-Bounty

Perhaps it would work better if you set the SSID to something along the lines of "plz d0nt h4x0r me lolz" or "j00 k4nt hax0r th1s"

Fucktards tend to get hit more than willing recipients, I've noticed

But, If you wanted it to be organized you would have to voice it, and do so loudly. If it was a somewhat structured ordeal, I'm positive that there are many who are new to hacking that would like to try it. Perhaps have some sort of spiffy award.

If it gets on its feet, this will acctually be a cool event. Give the new guys something more to do than drink and shoulder sufing the real Root-Fu/CTF guys.

[renderman]

One option would be to have either a few boxes with default installs of different OSes or a decent box running VMware (probably better, so you can go back to pre-0wned state). You could also set up a box that does nothing but sniff traffic and output it to a screen for all to see. You may want to talk to some of the folks doing "Hack or Halo" at Shmoocon.. they did a very nice job.


The hack or halo contest was very well thought out. Multiple vlans to images running under VMware. Everyone got different images each round keeping it from getting stale.

One thing though, to keep things fair, having everyone use auditor bootable CD's and making sure all the tools are there to do that hack would even the playing field.

Just my opinion

[Bounty]

Yeah, vmware with different images might make for some interesting options. Maybe set it up so that a different OS, or set of apps/holes gets loaded every few hours. That way it keeps things fresh, if some good admin has rooted and patched a machine well, it will allow new attempts to hack it.

I see the regular CTF playing out like a RTS. (Things build up for a while, strategies are executed, alliances are made, fortifications are built.) I think the ameture version would be kewl if it was more like a FPS, with servers/targets re-spawning every so often. Drive by hacking, a few campers, not quite as many rules etc. Otherwise they should just expand the normal CTF

If participants are smart enough to bring Auditor (and leave their HDD's at home), then good for them! Auditor is very nice. I don't think it should be restricted to only Auditor though. I know there are die hards out there who want to do it their way.

I know setting this up will be alot of work though, with the scoring system etc. If there is something we can do to help Vyrus, let us know.

[Vyrus]

Well because of resources and time (or rather lack there of), there will be only one victem box and one score keeper (but no worries we can always expand next year :P)



I know setting this up will be alot of work though, with the scoring system etc. If there is something we can do to help Vyrus, let us know.

well so far we are up an running for the most part... the score keeper is up and the victem is installed, only problem is because of the way score keeper runs, we needed server apps that dont require a login to display dynamic information (the info line on a ftp screen) and we could only come up with 2 of those

ftp
http

im working on samba (smbclient -L) and probobly telnet but other than that if you can come up with any other services that can be used and send me the name of the daemon app as well as an example of a session with a host of that type, it would be greatly apreciated...


ps... i know spelling :P

[Bounty]

You might setup a fairly secure ftp/web setup. That may force users to root other services that may require login/pass and then escalate their privlages until they can modify the ftp/web site.

[TheCotMan]

well then since evrybody thinks it such a good idea... lol who do i talk to about getting "offical consent" to run the contest ?

(DT)

lol guess ill try again since my previous message went un answered.

Have you been able to get consent for this to be a contest? Running an event is much easier when you have links from the main site for official and unofficial events.

[latency]

(DT)



Have you been able to get consent for this to be a contest? Running an event is much easier when you have links from the main site for official and unofficial events.


My guess is yes, as the e-mail forwarded on ISN regarding CTF at defcon includes notice of an "unofficial" amateur CTF run by Virus-X

So assuming "vyrus"=Virus-X..it looks like this has become a reality. Nice work. Looking forward to it.


COMPETE [unofficially]!

The "unofficial" Capture the Flag, Amateur Edition has been born.
Over the years CTF has evolved and matured, raising the bar on
participant's skill levels and increasing the difficulty to enter the
game. While this has resulted in impressive players and teams, it has
been increasingly difficult for the "average Joe hacker" to have some
fun and test their skills.

Amateur CTF will be open to all participants in a format that closer
resembles early DEFCON CTF games. There will be no official teams, so
make sure that you bring extra caffeine the only thing keeping you
from winning is sleep and skill. Virus-X will be your host.

[Bounty]

Just wondering if this is still real, I haven't noticed anything on the defcon.org site. Other contests look like they're posted etc.

-Bounty

[TheCotMan]

Just wondering if this is still real, I haven't noticed anything on the defcon.org site. Other contests look like they're posted etc.

Putting things together, here is what I have been able to find.
DC949 is mentioned in the first post here by Virus.
A search on google for 'defcon "amature CTF"' provides only 4 links and one is to:
http://dc949.diseasedmind.com/forum/
Right now that forum's links "contain no data" (maybe doing a backup or offline)
The google cache shows there is a forum session called Amature CTF (http://dc949.diseasedmind.com/forum/viewforum.php?f=4&sid=fd0a4ad46d6c2cdf59427d20bc8e7841), but that is also not available ATM. "Contains no data."

An official webpage with rules would be a good idea. Bothering DT to get a link to it (like other unofficial events) would be good to see, and soon.

Then there is this story about their site being down from January of 2004 (http://forum.defcon.org/showthread.php?t=3058)

[Vyrus]

Putting things together, here is what I have been able to find.
DC949 is mentioned in the first post here by Virus.
A search on google for 'defcon "amature CTF"' provides only 4 links and one is to:
http://dc949.diseasedmind.com/forum/
Right now that forum's links "contain no data" (maybe doing a backup or offline)
The google cache shows there is a forum session called Amature CTF (http://dc949.diseasedmind.com/forum/viewforum.php?f=4&sid=fd0a4ad46d6c2cdf59427d20bc8e7841), but that is also not available ATM. "Contains no data."

An official webpage with rules would be a good idea. Bothering DT to get a link to it (like other unofficial events) would be good to see, and soon.

Then there is this story about their site being down from January of 2004 (http://forum.defcon.org/showthread.php?t=3058)


1st, the "offical site" you speek of will be posted as soon as i finilise my defcon arrangements (rooms and rides and such)

2nd the forms got hacked lol (some kiddy with a phpbb sploit crashed the damn thing), but we salvaged the site and fixed the problem... so yea try that google search now :P

3rd) adam and i (mostly adam on the public faze) are now running dc949, blackwave is MIA and has been for some time, so we took it over :P

[TheCotMan]

1st, the "offical site" you speek of will be posted as soon as i finilise my defcon arrangements (rooms and rides and such)
Excellent.

2nd the forms got hacked lol (some kiddy with a phpbb sploit crashed the damn thing), but we salvaged the site and fixed the problem... so yea try that google search now :P
If it was fixed before, it looks like it might be broken again. :-/ (checked at around 11:20pm PDT today)

3rd) adam and i (mostly adam on the public faze) are now running dc949, blackwave is MIA and has been for some time, so we took it over :P
That explains the change in the site name.

Only advice to offer: There are only about 2 months before the con... "Getting the word out" is something best done sooner rather than later, or you may not have a very big turn-out. (This is peer pressure. ;-)

[Bounty]

1st, the "offical site" you speek of will be posted as soon as i finilise my defcon arrangements (rooms and rides and such)

2nd the forms got hacked lol (some kiddy with a phpbb sploit crashed the damn thing), but we salvaged the site and fixed the problem... so yea try that google search now :P

3rd) adam and i (mostly adam on the public faze) are now running dc949, blackwave is MIA and has been for some time, so we took it over :P


With about a month and a half to go, I was wondering how it's going? I see that you have some info in your forums about rules etc. Are you still planning on running an Ameture CTF? If so it might be a good idea to post some of the info you had in your forums here. Then everyone can chip in 2 cents... and bring this thread back to life?

-Bounty

[dYn4mic]

I'd also like to see this happen and I'm hoping to see some good info/updates soon.....

[Bounty]

Hey, with only 2.5 weeks to go or so, is this dead? Should we start trying to make some alternate thing we can do/play with? Even if it's not scored etc. I'd love to play in some sandboxes that people have setup. At this point I'm planning on bringing a box that can quickly load up some different configs of windoze and linux etc. for anyone to play with. Anyone else planning on doing something similar? Any other ideas... ? Maybe we should all put our stuff up on the wireless with "Ameture CTF" as the SSID etc. Obviously wireless coverage would be only be in certain areas based on which room you end up with, but if enough people do this, then there should be a ACTF box neaby to play with.

Anyways... enough rambling... thoughts commets etc would be kewl... maybe in a new thread?

[skroo]

Maybe we should all put our stuff up on the wireless with "Ameture CTF" as the SSID etc. Obviously wireless coverage would be only be in certain areas based on which room you end up with, but if enough people do this, then there should be a ACTF box neaby to play with.

Ehh... You probably want to go wired for this one, and preferably with no connectivity back to the main network. Bear in mind that anything spewing RF or connected to an ethernet port is fair game.

Anyways... enough rambling... thoughts commets etc would be kewl... maybe in a new thread?

It'd be a great way to backdoor the ridiculously trusting... "Here, hack this box! It's a distraction! Now, don't pay any attention while I install this rootkit..."

[Bounty]

Ehh... You probably want to go wired for this one, and preferably with no connectivity back to the main network. Bear in mind that anything spewing RF or connected to an ethernet port is fair game.

I'm still thinking wireless is the way to go with an option for 802.3 connections. I agree, it doesn't have to connect to another network.... With wireless you get easy access and some anonimity... (server and client) you don't have to have a physical box sitting in the hallways outside your room. You don't necessarily have people staring at you as you fumble around. If someone takes down your wireless, kewl.... they can probably take down your ethernet too.

It'd be a great way to backdoor the ridiculously trusting... "Here, hack this box! It's a distraction! Now, don't pay any attention while I install this rootkit..."

You should pay attention to *ANY* network you connect to (at DC), so any computer network based contest is going to have that issue. And trusting people probably shouldn't be there :>

[TheCotMan]

You should pay attention to *ANY* network you connect to (at DC), so any computer network based contest is going to have that issue. And trusting people probably shouldn't be there :>

Why to not have it just wireless:
* Interfere with existing wireless networks (range/use/interference)
* Risk for DoS is higher
* Risk for remote attacks (out of sight, and more difficult to locate)
* Risk for peer-based MiM attacks as demonstrated last year, or the year before with web browsing.

Advantages to having it just wired:
* You can track nodes on your network easier than 802.11*
* You can choose to have your network be at decreased risk for DoS by "outsiders" of the game.
* You can choose to not have this connected to the rest of the network if necessary (should people be upset with loss of network conttectivity traced to users in this game)

Is conveinience the only reason to go wireless?

I visited the links I provided in an earlier post that direct you to the organizer's forum for this contest, and I do not see any new posts there.
If you check vyrus' info [on that forum], you see that he/she listed MSN Messenger ID "Vyrus0001" [And his/her AIM ID and YIM ID are in his profile here]
Last post there by him (http://dc949.diseasedmind.com/forum/viewtopic.php?p=165&highlight=#165) was on "Sun Jun 05, 2005 2:25 pm" which is more recent than his activity here.
A website is listed in his/her profile on the other forums in his/her profile, but not much there but a DocumentRoot with one file in it, and that file has a date/timestamp of Jun 29, 2005 (assuming this is even his/hers.)

These bits of info suggest he/she has been around, but has not read the forums here in a while.

I would suggest posting your questions here (http://dc949.diseasedmind.com/forum/viewforum.php?f=4&sid=fd0a4ad46d6c2cdf59427d20bc8e7841) if you want them answered-- activity there is much more recent than here.

[Vyrus]

ok well it seems that due to my lack of poasting, many people have assumed that amiture CTF had died... this is FALSE :P, we are alive an kicking and the contest is still on. for details see http://dc949.diseasedmind.com/forum/viewtopic.php?t=34

[skroo]

You should pay attention to *ANY* network you connect to (at DC), so any computer network based contest is going to have that issue.

I think you may have missed my point a bit in saying that wireless should be avoided for connectivity back to the main CTF network - cotman's pretty much made them for me, so I'll skip reiterating them. The main thing to consider here is that if you can't control the environment, you can't control the game, and it's hard to send deauth frames to a wired switch that'll take it down.

And trusting people probably shouldn't be there :>

For three days out of the year, Defcon hosts what is probably the single most hostile network envrionment on the planet. If you're dumb enough to plug into it, you pretty much deserve what you get.

[russ]

Where can people sign up for ACTF once they are onsite? <wink wink nudge nudge>

ok well it seems that due to my lack of poasting, many people have assumed that amiture CTF had died... this is FALSE :P, we are alive an kicking and the contest is still on. for details see http://dc949.diseasedmind.com/forum/viewtopic.php?t=34

[TheCotMan]

I think you may have missed my point a bit in saying that wireless should be avoided ... The main thing to consider here is that if you can't control the environment,

It looks like they are addressing networking concerns mentioned here, on their forums:
http://dc949.diseasedmind.com/forum/viewtopic.php?t=34

I understand the concerns that people have with using wifi connectivity. We should have been more clear when describing the setup. Wifi was chosen partially for convience, and partially for availablty. It's a lot easier to connect (which is good and bad), and we don't have to worry about having enough gear for everyone to plug in.

The setup will be two computers connected to a wifi access point. The victim and the scorekeeper will be wired together. I'm not suggesting that they'll be any safer, but I don't think the setup was described clearly earlier.

And we could always make it a wired contest at the last second, provided we have the gear handy. It's not like anything is written in stone.

So, I guess, they want to deal with this contest entirely on their forums.

[skroo]

It looks like they are addressing networking concerns mentioned here, on their forums:
http://dc949.diseasedmind.com/forum/viewtopic.php?t=34

DoS by Panasonic 2.4GHz cordless phone. Done.

[Bounty]

I still think ease of use wins here...

[TheCotMan]

DoS by Panasonic 2.4GHz cordless phone. Done.

I still think ease of use wins here...

Heh-heh, heh-heh,(*ring* *ring*) umm. {picks up 2.4GHz cordless phone}
Um. Hello?
(garbled response on phone.)
No way fartknocker! I am not a "Reality Chick." I am a dude.
(garbled response on phone.)
"Check?" No way bunghole! You check! I'm Beavis, BEEE VUS! (*click*)

I am not saying there will be problems if this contest is just wireless, but if there are, there will be no sympathy from me. Actually, there will be laughter, and maybe even an "i told you so."

[skroo]

I am not saying there will be problems if this contest is just wireless, but if there are, there will be no sympathy from me. Actually, there will be laughter, and maybe even an "i told you so."

See, I was thinking a Gigarange phone base in a backpack complete with 12V lantern batteries to power it could be tons o' fun. Just have someone walking 50' or so away from you with the handset on, maybe using the intercom to really get the FHSS going, and watch the signal swampage...

[TheCotMan]

See, I was thinking a Gigarange phone base in a backpack complete with 12V lantern batteries to power it could be tons o' fun. Just have someone walking 50' or so away from you with the handset on, maybe using the intercom to really get the FHSS going, and watch the signal swampage...

Nice. :-) I was envisioning a WiFi network that was not switched where people, who were amatures in the game, ran full port scans-- DoS by players. Your idea is much better. It is too bad they are not using the offered "Reality Check."

[skroo]

Nice. :-) I was envisioning a WiFi network that was not switched where people, who were amatures in the game, ran full port scans-- DoS by players. Your idea is much better.

Thank you :) Actually, I think most of the consumer-grade hardware now switches its traffic rather than broadcasting it, but, yeah, get enough people on there all running nmap at the same time and it's gonna go tits-up.

It is too bad they are not using the offered "Reality Check."

I had similar concerns until it dawned on me that nobody is under any obligation to listen to or act on any advice given, no matter how much sense it may make.

[Bounty]

Is this event running during certain hours, or 24 hrs?

Where do you guys think would be a good place to put the switch and servers if there was an ethernet connection?

[dataworm]

Maybe we should all put our stuff up on the wireless with "Ameture CTF" as the SSID etc. Obviously wireless coverage would be only be in certain areas based on which room you end up with, but if enough people do this, then there should be a ACTF box neaby to play with.

Interesting, so you would be hacking box based on the SSID :shock:

What if some evil motherfucker would bridge defcon wireless network and your "Ameture CTF" wireless network :evil:

Just my 2c... I would't know anyone evil enought to do that...

[TheCotMan]

Is this event running during certain hours, or 24 hrs?

Where do you guys think would be a good place to put the switch and servers if there was an ethernet connection?

Since this was announced earlier as a DefCon Contest, the organizers should be able to request space. Most likely places would be near the original CTF contest, in the "chill-out" space, or the contest room.

Organizers could contact a DefCon goon, like one that manages the space desired.
Just my 2c... I would't know anyone evil enought to do that...
Maybe you will have success in being more convincing. :-)

[Vyrus]

well im sure at this point you are all quite mad at me for not getting on the public faze of this (defcon form) sooner but hay, im a bussy guy and some things had to be done last minute but rest asured... we will be there and functional (i hope lol).

also i should anounce that when it comes to skillz and us runing the contest, we are all quite n00bs when it comes to defcon vets (im the only one whos actuly BEEN to defcon before in our group :P), so take it easy on us, i know there are a LOT of wholes in this setup and im quite sure that we will suffer manny small (but managable) desasters but that is how we learn. " i mean defcon is about learning about the hacker world yes :P".

now to answer some of the more pertrudeing questions that have poped up here (NOTE, these questions are answered on our site, this is just where the acitn is so i figured i should say somthing late better than never).

1) where to sighn up

well acording to the goons, they gave us a table in the event hall "where the robot warez contest was last year i think" and we will hold sighnups the first day and you will know us by a "BIG ORANGE AND BLACK SIGN, that sais "dc949" on it"

2) why wifi

well because it's fast and we dont have to setup a station for people to plug in while ther ecompeating, all i have to do is show up for the day and turn on the router and the 2 systems :P. issues i know but hay, better than nothing :P

[Hardware]

As part of Dc 949 I can say this. next years will be much better and wired. We are already planning for next year right NOW! You will NOT be disappointed

[TheCotMan]

As part of Dc 949 I can say this. next years will be much better and wired. We are already planning for next year right NOW! You will NOT be disappointed

I wasn't there, but wanted to know how did the wireless worked out? Any loss in service?

[Mr_T]

Thursday, I got a chance to stop by the vending area. I noticed wardrivingworld.com was selling classic gold orinoco cards. I took this as a sighn to play some Amature CTF. I got to the Amature CTF area in all excitemt, to sign up, finding out that the target OS was mandrake. This was great, because I use mandrake. I went back to my hotel with cantenna in one hand and rest of the stuff in the other. Got back to the Amature CTF area, all ready to put my skills to the test. No luck, they were having problems with the wifi network, but they had it working before. As for me, I din't have a verry good experience :frown:

The guys that were hosting the Amature CTF were really nice and informative.
I'm sure next year, you guys will have better luck.
But if you want some help, I have a couple of boxes that I can punch some holes in to make it easyer. Next year, I think you should have a projector that will display the results like the non-Amature CTF. I can make the script or something more visual appealing then the non-Amature results, but I don't know if I can supply the projector.
That's if you want me to help :wink:

[John D]

[QUOTE=Mr_T]Thursday, I got a chance to stop by the vending area. I noticed wardrivingworld.com was selling classic gold orinoco cards. I took this as a sighn to play some Amature CTF. I got to the Amature CTF area in all excitemt, to sign up, finding out that the target OS was mandrake. This was great, because I use mandrake. I went back to my hotel with cantenna in one hand and rest of the stuff in the other. Got back to the Amature CTF area, all ready to put my skills to the test. No luck, they were having problems with the wifi network, but they had it working before. As for me, I din't have a verry good experience :frown:


The problem was that the new wireless network DT bought (Aruba) was so good it attacked the amature CTF wireless network (thinking it was an unauthorized AP). Next year they will make sure the network goons know about it ahead of time so they can let it exist.

-John

[Vyrus]

well we actuly had a score bord that was potsted from the scorekeeper ip that we gave evrybody.. as for a projector.. yea it might be cool to put it on the wall as aposed to just makeing a web damon next year... as long as we can get the projector, as for code, we had a scorekeeper application.. and it worked the whole time :P

[Hardware]

I wasn't there, but wanted to know how did the wireless worked out? Any loss in service?
we started out fine then we have some issues with a spoffer but after some hunting around with a wifi snipper (cantenna) that we barrowed from on of our contendents it was stoped. we have some connection problems later on too. some people connected fine yet others were having problems.

Next year will be wired and we hope you will be there