Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror

Comment resources (Score 5, Informative) 102

(for some reason the first time I loaded this page there were no comments, so some of this is duplicate)

Excellent! Very glad to hear it. There are a /ton/ of helpful resources out there for you. Here's a brain-dump of some of the most popular:

* CTFTime : http://ctftime.org/ : Website that tracks team scores, upcoming events, and writeups for previous events.
* CapTF : http://captf.com/ : My CTF dump-site that includes a calendar, links to "practice" sites (aka Wargames), and many years worth of CTF events archived
* Field Guide : http://trailofbits.github.io/c... : Specifically covering the skills / approaches, the field guide is a good read for anyone getting into this world.
* Guide for Running a CTF : https://github.com/pwning/docs... : Written by PPP (CMU's ever-dominant CTF team) along with feedback from the broader CTF community, this guide is more relevant when making a CTF, but can aid in understanding how the good CTFs are designed.
* PicoCTF : https://picoctf.com/ : PicoCTF is designed for high school students, but had an awesome difficulty curve, getting up to some relatively advanced challenges by the end of it. It's also extremely well designed, runs for a longer period of time and is a
* CSAW : https://ctf.isis.poly.edu/ : One of the best events targeted specifically at College students, unfortunately the qualifier round just finished, and the participants already selected for the final round, but you can always check out the archives of previous challenges to get a feel for the difficulty. Note that the qualifier event is typically intended to be much easier than the in-person finals to better encourage new students to get into the sport.
* IRC : irc.freenode.net#pwning : There's a lively and active community in #pwning on freenode that would be happy to help you with questions/advice related to CTFs.
* YouTube : There's a couple of different presentations/talks on CTFs over the years. If your'e interested in learning more about attack-defense CTFs and in-particular DEF CON CTF, I gave an old talk that's mostly still relevant (https://www.youtube.com/watch?v=okPWY0FeUoU), though I'd recommend you not focus on A/D at first, but just get into the regular challenge based or jeopardy boards as they're sometimes called.

The best way to prepare for CTF is by... playing CTFs. There's no real magic formula, just go out there and start working on challenges. Old CTFs are great as learning exercises since you can usually cheat and read a writeup, but avoid the temptation as much as possible. If stuck, go off and try another problem first, and only if you're /really/ stuck should you check out a writeup.

Comment Re:It seems to me... (Score 1) 183

This is an important point. I'm no really sure what the GP means. In fact, long ago when I actually understood a very tiny bit about how these things worked I asked a similar question on sci.crypt and got the following responses:

http://groups.google.com/group/sci.crypt/browse_thread/thread/d096e5e93192f176/6e0e62f174f8a9e3
Wii

Submission + - Wii + Warp Pipe = Del.icio.us Tabbed Browsing

An anonymous reader writes: The folks at Warp Pipe have developed a simple yet useful tabbed browsing interface for the Wii with del.icio.us bookmark integration which makes browsing on the Wii more efficient until the fully realized Opera build hits later next year. The web application does not require registration, this video overviews the interface and feature set in this early release.
Music

Submission + - What Questions Should We Ask RIAA "Expert"

NewYorkCountryLawyer writes: "In UMG v. Lindor, the RIAA has submitted an "expert" report (pdf) and 26-page curriculum vitae (pdf), prepared by Dr. Doug Jacobson of Iowa State University who is the RIAA's expert witness in all of its cases against consumers, relating to alleged copyright infringement by means of a shared files folder on Kazaa, and (b) supposed analysis of the hard drive of a computer in Ms. Lindor's apartment. The RIAA's "experts" have been shut down in the Netherlands and Canada, having been shown by Prof. Sips and Dr. Pouwelse of Delft University's Parallel and Distributed Systems research group (pdf) to have failed to do their homework, but are still operating in the USA. The materials were submitted in connection with a motion to compel Ms. Lindor's son, who lives 4 miles away from her, to turn over his computer and music listening devices to the RIAA. Both Ms. Lindor's attorney (pdf) and Ms. Lindor's son's attorney (pdf) have objected to the introduction of these materials, but Dr. Jacobson's document production and deposition are scheduled for January and February, and we would love to get the tech community's ideas for questions to ask, and in general your reactions, thoughts, opinions, information, and any other input you can share with us. (In case you haven't guessed, we are the attorneys for Ms. Lindor.)"
Music

Journal Journal: Why your early adulthood music likely stays with you.

Unfortunately for my particular generation there may be a reason why songs like "Freebird" & "Fly Like An Eagle" stay with us.
Now if only someone can create a way to counter-act this phenomenon so one may actually enjoy hearing them again!

Link to Research.

Link to Graph.

Music

iTunes Sales 'Collapsing' 651

Alien54 writes to tell us The Register is reporting that based on reported revenues this year iTunes sales are plummetting. From the article: "Secretive Apple doesn't break out revenues from iTunes, but Forrester conducted an analysis of credit card transactions over a 27-month period. And this year's numbers aren't good. While the iTunes service saw healthy growth for much of the period, since January the monthly revenue has fallen by 65 per cent, with the average transaction size falling 17 per cent. The previous spring's rebound wasn't repeated this year."

HP's Dunn Stepping Down 301

XJHardware writes "Yahoo news is reporting that Patricia Dunn is stepping down from the chair of HP." From the article: "Hurd will retain his existing positions as chief executive and president and Dunn will remain as a director after she relinquishes the chair on Jan. 18. 'I am taking action to ensure that inappropriate investigative techniques will not be employed again. They have no place in HP,' Hurd said in a statement. Dunn apologized for the techniques used in the company's probe, which included 'pretexting' in which private investigators impersonated board members and journalists to acquire their phone records."

Subliminal Spam Using an Animated GIF 216

JohnGrahamCumming writes "Everyone's noticed the recent flood of image spam (including the SpamAssassin developers who are working on an OCR-extension to beat it), but take a look at this spam containing a subliminal message flashed every 17 seconds to try to entice you to buy the stock being pumped. Does this work? Warning: link shows the actual spam; don't blame me if you lose money on this stock!"

Lessig Defends Free Culture in Keynote 179

lisah writes "Professor Larry Lessig, a keynote speaker at this week's Linux World Expo, took issue with current copyright laws and their effect on a free read-write culture. Lessig says that, by today's standards, the simple act of creating a video mashup renders its creator a 'pirate' and argued for sweeping changes that would embrace a fair use culture. Lessig asked the audience to consider sharing works under a Creative Commons license and redirect money they would spend on restricted content to organizations that support a fair use and free culture. He says that opponents of a free read-write culture have strong financial and political backing so unified community support is crucial. 'If the debate is controlled by lawyers and lobbyists...," says Lessig, 'this debate will be lost.'"

New 'No Military Use' GPL For GPU 1109

Tina Gasperson writes "GPU is a Gnutella client that creates ad-hoc supercomputers by allowing individual PCs on the network to share CPU resources with each other. That's intriguing enough, but the really interesting thing about GPU is the license its developers have given it. They call it a 'no military use' modified version of the GNU General Public License (GPL). The developers told Newsforge why they did it, with commentary from OSI and FSF." Newsforge is also owned by OSTG, Slashdot's parent company.

Why the Light Has Gone Out on LAMP 443

menion writes to tell us that Cliff Wells has an editorial calling into focus some of the perceived problems with LAMP. Wells calls PHP and MySQL this generation's BASIC citing the Free Online Dictionary of Computing: "BASIC has become the leading cause of brain-damage in proto-hackers. This is another case (like Pascal) of the cascading lossage that happens when a language deliberately designed as an educational toy gets taken too seriously. A novice can write short BASIC programs (on the order of 10-20 lines) very easily; writing anything longer is (a) very painful, and (b) encourages bad habits that will make it harder to use more powerful languages well. This wouldn't be so bad if historical accidents hadn't made BASIC so common on low-end micros. As it is, it ruins thousands of potential wizards a year."

2006 OpenBSD Hackathon Well Underway 71

An anonymous reader writes "KernelTrap is running a two part who's who at the 2006 OpenBSD Hackathon. Starting on the 27th and running for a full week, developers get together and concentrate on communication rather than just development. Project leader Theo de Raadt was quoted as saying 'I don't think anybody else does this, developers suspend their lives for a week to focus entirely on just development.'"

New Congressional Bill Makes DMCA Look Tame 895

An anonymous reader writes "Representative Lamar Smith is sponsoring the Intellectual Property Protection Act. The new bill is designed to give the Justice Department 'tools to combat IP crime' which which are used to 'quite frankly, fund terrorism activities,' according to Attorney General Alberto Gonzales. Among the provisions is lowering the standards for 'willful copyright violation' and increasing the corresponding prison term to 10 years." More information is also available at publicknowledge.org.

Comment Good idea (Score 1) 684

That's really a good idea. Technically, I don't think it would be that hard (digitize the audio as it comes in, burn a single master at the end of the show and then let the CD replicators churn), and I have a feeling that Clear Channel is paying the RIAA their piece, too, so there shouldn't be any legal problems.

Of course, after the $5 beers and $35 t-shirts, most concert-goers are dead broke by the end of the show...

Slashdot Top Deals

Recent research has tended to show that the Abominable No-Man is being replaced by the Prohibitive Procrastinator. -- C.N. Parkinson

Working...