HOPE Forums

The place to discuss all HOPE-related topics.

You are not logged in.

Announcement

Welcome to the HOPE Forums, also known as talk.hope.net. Since 1994 (the year of the first HOPE conference), we've had nine conferences. This is the place to come up with ideas, make suggestions, and welcome new people.

You'll find sections on just about anything of interest to HOPE attendees. If you think something is missing start a thread in the "General Questions" forum and/or ask people about it. Thanks for participating and see you at HOPE!

#1 2007-01-18 01:42:07

sTaIn
New Member
Registered: 2007-01-18
Posts: 9

Capture the flag arena

Set up a network for CTF.
Novice - continuous, skill development, multiple platforms.  Perhaps with mentors available.
Advanced - classic CTF, timed, increasing difficulty of flags.

Offline

 

#2 2007-01-18 07:02:24

arseny
Member
Registered: 2006-12-22
Posts: 55
Website

Re: Capture the flag arena

This was supposed to happen, but apparently the organizers didn't do a very good job or not enough people signed up or something. It's certainly a good idea, since it draws crowds. I think the "novice" difficulty should try to reach out to people who don't know what this "game" is. I thought it was a mod for Quake for the longest time!

Offline

 

#3 2007-01-18 16:55:01

lexicon
Mentor
From: NYC
Registered: 2007-01-17
Posts: 787
Website

Re: Capture the flag arena

The version I've seen is where a bunch of people try to remotely access a secure system, but the person trying to organize it for the past conference was saying that's only one quarter of the game and that another part was some osrt of robot maze. I wasn't really clear on the other two parts. It seemed very complicated.


the irrepressible wildman, lexicon, your friendly neighborhood Internet sandcastle sales executive

Offline

 

#4 2007-01-18 19:12:15

sTaIn
New Member
Registered: 2007-01-18
Posts: 9

Re: Capture the flag arena

Yeah, it would take some minimal effort, hardware, and planning, but it could definately be done.  Local computer clubs/2600 chapters could perhaps be encouraged to put them on, as they might have a built in resource base.  I agree with Arseny that it could be a 'general public' educational device as well.

Offline

 

#5 2007-01-18 21:09:14

lexicon
Mentor
From: NYC
Registered: 2007-01-17
Posts: 787
Website

Re: Capture the flag arena

Is there some standard for how it is carried out?


the irrepressible wildman, lexicon, your friendly neighborhood Internet sandcastle sales executive

Offline

 

#6 2007-01-19 03:41:43

sTaIn
New Member
Registered: 2007-01-18
Posts: 9

Re: Capture the flag arena

Not afaik, but there is lots of information out there, particularly at honeynet.org.  For the novices, it could be as simple as just putting old/vulnerable version of web apps and NOS's...could even do multiple virtual instances.  The more advanced levels would need more planning to make the flags both dependent on the previous flag and more difficult to obtain (i.e. firewall traversal to DMZ to internal network, to several layers of variously hardened machines, etc).

Offline

 

#7 2007-01-19 03:53:36

lexicon
Mentor
From: NYC
Registered: 2007-01-17
Posts: 787
Website

Re: Capture the flag arena

Okay, so you're describing the network honeypot game that most hackers mean when they say "CTF," not some expanded quadathalon affair with physical construction involved.


the irrepressible wildman, lexicon, your friendly neighborhood Internet sandcastle sales executive

Offline

 

#8 2007-01-20 02:13:58

sTaIn
New Member
Registered: 2007-01-18
Posts: 9

Re: Capture the flag arena

hehe....exactly!

Offline

 

#9 2007-01-20 16:02:07

s25
Addict
From: Rep.Ireland
Registered: 2007-01-18
Posts: 175
Website

Re: Capture the flag arena

Indeed it would be great to see! Make certain services that must be on machines and allow people to bring there own or donate allready running servers (which they can prove they own) to be used smile You could have a system where people are trying to get in and the owners are trying to keep them out smile Now that would be fun!!

Offline

 

#10 2007-01-25 21:21:38

sTaIn
New Member
Registered: 2007-01-18
Posts: 9

Re: Capture the flag arena

Good ideas....in that vein, we could setup IDS's to monitor what was happening and further the educational experience for the masses.

Offline

 

#11 2007-02-05 23:08:49

soup
New Member
Registered: 2007-01-17
Posts: 3

Re: Capture the flag arena

I just keep thinking laser tag.

and laser tag sounds like a great idea.

Offline

 

#12 2007-02-06 02:50:12

number-301
Addict
From: New York, NY
Registered: 2007-01-17
Posts: 253
Website

Re: Capture the flag arena

Lazer tag, Lazer tag... I'm in smile


**** "Just because you can do something doesn't mean you should wink"
Email: thurmanjamison@gmail.com
Twitter: http://twitter.com/Number301
Blog: http://randomthoughtstj.wordpress.com/

Offline

 

#13 2007-02-06 17:22:30

bunni3burn
Forum Administrator
From: St. Louis
Registered: 2007-01-16
Posts: 726
Website

Re: Capture the flag arena

i'm all up for either CTF or laser tag. smile


*hop*

Offline

 

#14 2007-02-06 17:24:05

RadioC1ash
Addict
From: Boxen
Registered: 2007-01-18
Posts: 278
Website

Re: Capture the flag arena

soup wrote:

I just keep thinking laser tag.

and laser tag sounds like a great idea.

We could use real lasers! Everybody build your own laser gun!


<!-- There are no hidden messages in the HTML source of this page. -->

Offline

 

#15 2007-02-06 17:44:49

bunni3burn
Forum Administrator
From: St. Louis
Registered: 2007-01-16
Posts: 726
Website

Re: Capture the flag arena

RadioC1ash wrote:

We could use real lasers! Everybody build your own laser gun!

i could just imagine how much effort some people would put into that, and how BIG some of the laser guns would end up being!


*hop*

Offline

 

#16 2007-04-03 21:41:42

C4bl3Fl4m3
Addict
From: Takoma Park MD
Registered: 2007-04-03
Posts: 300
Website

Re: Capture the flag arena

arseny wrote:

This was supposed to happen, but apparently the organizers didn't do a very good job or not enough people signed up or something. It's certainly a good idea, since it draws crowds. I think the "novice" difficulty should try to reach out to people who don't know what this "game" is. I thought it was a mod for Quake for the longest time!

Mod for quake? Nah.

CTF via HalfLife. (Does HL2 have it?)

Or perhaps Counterstrike (or, my all time favorite, Team Fortress)


09-f9-11-02-9d-74-e3-5b-d8-41-56-c5-63-56-88-c0

Offline

 

#17 2007-04-03 21:46:48

C4bl3Fl4m3
Addict
From: Takoma Park MD
Registered: 2007-04-03
Posts: 300
Website

Re: Capture the flag arena

soup wrote:

I just keep thinking laser tag.

and laser tag sounds like a great idea.

Even better... laser tag w/ Segways. ;-D

But, no, I think laser tag would be a blast. I'd play.


09-f9-11-02-9d-74-e3-5b-d8-41-56-c5-63-56-88-c0

Offline

 

#18 2007-05-13 07:16:04

The Doctor
Member
From: I am everywhere.
Registered: 2007-01-18
Posts: 22
Website

Re: Capture the flag arena

soup wrote:

I just keep thinking laser tag.

and laser tag sounds like a great idea.

Or perhaps Capture the Flag With Stuff.


"Discard regret, that in this debt a better world is made / That children of a newer day might remember, and avoid our fate."
--The Cruxshadows, Winterborn

Offline

 

#19 2007-07-12 01:42:05

SgtJonson
New Member
Registered: 2007-07-12
Posts: 3

Re: Capture the flag arena

How about a network CTF where the terminals had to be fought for and protected with people with lazers? I.E. people would have to get hackers to the proper terminals to get the virtual flag.

Offline

 

#20 2007-07-12 16:11:08

C4bl3Fl4m3
Addict
From: Takoma Park MD
Registered: 2007-04-03
Posts: 300
Website

Re: Capture the flag arena

SgtJonson wrote:

How about a network CTF where the terminals had to be fought for and protected with people with lazers? I.E. people would have to get hackers to the proper terminals to get the virtual flag.

That sounds like HELLA fun. And they'd have to do a simple hack on the terminal to actually get the flag. So there's cracking stuff for the computer hackers and CtF stuff for people who specialize in other types of hacking. Perhaps throw some social engineering in somehow?


09-f9-11-02-9d-74-e3-5b-d8-41-56-c5-63-56-88-c0

Offline

 

#21 2007-07-12 17:30:27

s25
Addict
From: Rep.Ireland
Registered: 2007-01-18
Posts: 175
Website

Re: Capture the flag arena

What about live cd's available set up to run a CTF game so you could try and defend your own box with out much risk (i dunno how you would get around people mounting your hd, Maybe disable commands like that?) or you can just reboot minus the cd and attack boxes?

Offline

 

#22 2007-07-18 15:32:36

C4bl3Fl4m3
Addict
From: Takoma Park MD
Registered: 2007-04-03
Posts: 300
Website

Re: Capture the flag arena

s25 wrote:

What about live cd's available set up to run a CTF game so you could try and defend your own box with out much risk (i dunno how you would get around people mounting your hd, Maybe disable commands like that?) or you can just reboot minus the cd and attack boxes?

I like the other ideas that had a physical real world element to it. Not everyone knows how to do box security nor is interested in it, so having one that had a physical element to it would get more people playing and into it than would play otherwise.

(It's one of the main issues I've always had with Hack or Halo at Shmoocon. However, people are very encouraging to people who haven't played before to get them playing. [I had never played Halo before the last HoH at Shmoocon. Word of that got around and I had people whom I had never met congratulating me on my first Halo frag ever after my turn on the game.] And last HoH they let you have teams working on a single computer at hack [as long as only one person was sitting at the keyboard and typing] and I know that Renderman and Grey were teaching someone who had never hacked before what to do.)


09-f9-11-02-9d-74-e3-5b-d8-41-56-c5-63-56-88-c0

Offline

 

#23 2007-07-18 17:05:45

techDarko
Forum Moderator
From: NNJ/NYC
Registered: 2007-04-06
Posts: 154

Re: Capture the flag arena

For the real world element - hackers with frickin laser beams attached to their heads!

I think we would be able to draw people in if we did a round or two that was more informative than competitive - think attendees vs. staff who are guiding them rather than a free for all. And not attendees vs. NOC staff - lol.

Offline

 

#24 2007-07-19 17:20:33

s25
Addict
From: Rep.Ireland
Registered: 2007-01-18
Posts: 175
Website

Re: Capture the flag arena

I don't see how you would incorporate real word aspects... And I personally think that lazers would get messy! I don't like the idea of people running and jumping around some machines.
What if you put a lock on the machine that you had to pick? I mean if you want a lazer wars type set up then why not just hire one of those things for it? And with regards of box security and people not knowing I certainly do not know it all but I think it would be fun to just be around and learn with other people...

Ok I see I sound rather angry there but I am not (must be lack of food tongue) But I am just getting the feeling of well... A camel is a horse designed by a committee. I think it is going away from what is a very good idea, Sure the RealWorld aspects are good and some of the suggestions where great but I think allot of them would be hard to implement and some of them take away from the original idea,

Also we could set it up so there are four boxes there that are being used by people you can see what they are doing on a screen, That way people could watch and stuff and the idea of staff against some of the con goers is brilliant.

I think it would attract people if not only just to watch. And as long as people were encouraging it would be a great grounding for some, Fuck have someone talk there way through getting past a service and play it on a loop at a monitor smile

Offline

 

#25 2007-08-12 06:28:56

I-baLL
Member
From: New York
Registered: 2007-02-02
Posts: 63
Website

Re: Capture the flag arena

Wasn't there some sort of CTF tournament organized not too long ago where the nyc2600 crowd squared off against a local university? That seemed to be a success and can probably be carried over for the conf.

Also, if somebody wants to do a physical CTF then they should go right ahead but I think that mixing the 2 into 1 tournament is a bad idea.  Running around playing laser tag won't be conductive to the exploratory aspect of the hacking CTF challenge.

Also, having laser tag inside Hotel Penn will probably not be a good idea unless you want to have a dozen people running and jumping around sensitive equipment.

Offline

 

Board footer

Powered by PunBB
© Copyright 2002–2008 PunBB