You all have great timing. It's very likely that something will melt down soon, but I'm not going to notice, because I'll be in a chair getting my arm inked up. It's going to be a nine-fives kind of day! Mean feedback about the UI, especially if accompanied by an even meaner summary of what you'd rather the UI does instead, is most welcome. Later (Erin's Calcifer tattoo is taking longer than expected, so if you want…
Stockfighter's Jailbreak CTF trainer is live
61–70 of 86 posts
Re: Stockfighter's Jailbreak CTF trainer is live
#62Earlier quoted context omitted.
I haven't tried this, but https://github.com/ketchupsalt/debugger might be of interest to you. More generally, it's not actually sandboxed inside a web browser, you can interact with system through REST-ish API as well. see https://starfighter.readme.io/docs/retrieve-device-status for some documentation on that. It's obviously pretty inconvenient to get a full debugger type experience that way, but I don't really see…
This line seems like a bug to me (assigning the int 16 to a variable that should be of an enumerated type {I8, I16, I32, S, R}, though I don't know if Go has those): https://github.com/ketchupsalt/debugger/blob/master/commandl...
Re: Stockfighter's Jailbreak CTF trainer is live
#63You all have great timing. It's very likely that something will melt down soon, but I'm not going to notice, because I'll be in a chair getting my arm inked up. It's going to be a nine-fives kind of day! Mean feedback about the UI, especially if accompanied by an even meaner summary of what you'd rather the UI does instead, is most welcome. Later (Erin's Calcifer tattoo is taking longer than expected, so if you want…
I was actually going to say I like the UI quite a bit at first glance. I haven't bit in yet, but overall I really dug the layout.
Re: Stockfighter's Jailbreak CTF trainer is live
#64You all have great timing. It's very likely that something will melt down soon, but I'm not going to notice, because I'll be in a chair getting my arm inked up. It's going to be a nine-fives kind of day! Mean feedback about the UI, especially if accompanied by an even meaner summary of what you'd rather the UI does instead, is most welcome. Later (Erin's Calcifer tattoo is taking longer than expected, so if you want…
I was actually going to say I like the UI quite a bit at first glance. I haven't bit in yet, but overall I really dug the layout.
Re: Stockfighter's Jailbreak CTF trainer is live
#65Earlier quoted context omitted.
Snif. My feels. Right in the feels! Try as hard as you like though, you cannot make comments like these unproductive! * You cannot "explore the filesystem". The "files" are really just bookmarks in case you want to switch between different C-like programs to deal with a level. I hate the UI more than you do, but suggestions very welcome. * You mean "compile" as in, the debugger command? What would you like it to prin…
Sorry for being rude. It seems strange that there are a set of names associated with blobs of data (source code) but the tools for managing that name->blobs map (querying which names are mapped, removing a mapping from the map, etc.) are incomplete. The source code editor allows views and updates, but I don't see how I would do garbage collection, and one can't perform views or updates from the debugger, but is expec…
The source file thing is definitely strange. I could just lose it entirely; save your own files! That's how the termbox client works. It made slightly more sense when it was driven from the CLI.
"compile" in the debugger is vestigial, but if we think it makes sense to have it do something useful, let's have it do something useful. I'll have it do what the compile button does, and also print a summary of the generated program. It'll be immediately clear what it does. I'll make "load" do something sensible too.
I think more people want me to have a command line than want a completely streamlined interface, but I think I have some work to do on making the command line work better.
There is utility, later on, in looking more carefully at the individual steps of getting a program to run, but there is not much utility to it in earlier levels. I can hide those commands earlier; I didn't because that'd be kind of a tell. Earlier on this year, I wanted this interface to capture more of the annoyance of figuring out a realistically complicated target (rather than it being immediately clear what your objective was), but I'm moving away from that now.
It's definitely very tricky to write documentation for this that makes sense to reversers or embedded devs and that works for the people who've never done any of this kind of stuff. Maybe I shouldn't be trying to accomplish both things in one set of documents!
My #1 takeaway from your original comment: I need to do an audit of all the command line commands and have them all be discoverable by running them and seeing what happens. That is definitely not the case right now, and it's a very easy gap for me to close.
There shouldn't really be anything you can do in the web interface that you can't do in the API.
Re: Stockfighter's Jailbreak CTF trainer is live
#66Earlier quoted context omitted.
I want typing "load foo.cg" and hitting enter in the debugger to print _something_, almost anything. Ideally it would print different things depending on whether foo.cg actually exists and is a valid file to try to load or not. Just some sort of feedback indicating that the command actually did something would be great. I like the different load/flash/vmload/vmexec commands, I've certainly needed to stop at points in…
Oh. Yep, like "compile", that command is vestigial (the source editor used to live in a tab, and, ironically, the file saving stuff made more sense that way, driven from commands on the CLI). Yep, I can make "load" do that. Give me a few hours, though! It's an easy task, but I'm tethered through my iPhone right now.
Re: Stockfighter's Jailbreak CTF trainer is live
#67- if you want to find a better paying job, take each lunchtime and call every job advert you qualify for that pays 20k more than you earn. Do this for three months. You will get the raise.
- even better is to supplement this with LinkedIN, blog posts, network maintenance (when did you last have call or have coffee with your previous boss?)
- do this for the next three jobs.
You are now at the pay ceiling for your skill set. Well done.
Now ... err ...
Start your own business, preferably selling something that scales (your time does not scale and you are selling it at pretty much the max - say 100-150k)
Re: Stockfighter's Jailbreak CTF trainer is live
#68You all have great timing. It's very likely that something will melt down soon, but I'm not going to notice, because I'll be in a chair getting my arm inked up. It's going to be a nine-fives kind of day! Mean feedback about the UI, especially if accompanied by an even meaner summary of what you'd rather the UI does instead, is most welcome. Later (Erin's Calcifer tattoo is taking longer than expected, so if you want…
edit: also, the password reset link doesn't go anywhere.
Re: Stockfighter's Jailbreak CTF trainer is live
#69I like that people are evaluating this against things like Overwatch, because for me, Stockfighter is a form of entertainment. I still play video games occasionally, but in my growing adult years, I'm not able capture that same rush from winning.
Not so with CTFs. Maybe it's because I'm a relative newbie, but the dopamine rush I get from winning a level is incomparable. There is something about a solve, when you get that brainfeel where you just understand completely what is going on, that is unique. Perhaps that's what black hat hackers feel when they p0wn a system. The closest recollection for me is when I smashed through that top level brick in World 1-2 of Super Mario Bros, and I could run across the roof to win the level.
Re: Stockfighter's Jailbreak CTF trainer is live
#70Earlier quoted context omitted.
> because I don't have the desire right now to code all day and then code some more Tell me about it. Speaking only for myself, I have near-constant coder's guilt - a term I just made up to describe the nagging voice in my head that keeps telling me I should be coding more in my free time. It sounds something like this : "somewhere a rockstar wizard ninja is writing a C compiler in Haskell and here you are wasting yo…
Mine is even a little more annoying than yours. It doesn't like me doing productive things. "somewhere a rockstar wizard ninja is building a passive-income side project and here you are wasting your time tending a garden and working in your woodshop, you miserable idiot with stupid priorities."
After doing tech for 15 years, that sounds glorious.