Live data from Hacker News

Stockfighter's Jailbreak CTF trainer is live

stockfighter.io

61–70 of 86 posts

Re: Stockfighter's Jailbreak CTF trainer is live

#61
post #53

You all have great timing. It's very likely that something will melt down soon, but I'm not going to notice, because I'll be in a chair getting my arm inked up. It's going to be a nine-fives kind of day! Mean feedback about the UI, especially if accompanied by an even meaner summary of what you'd rather the UI does instead, is most welcome. Later (Erin's Calcifer tattoo is taking longer than expected, so if you want…

I was actually going to say I like the UI quite a bit at first glance. I haven't bit in yet, but overall I really dug the layout.

Re: Stockfighter's Jailbreak CTF trainer is live

#62
post #46
post #38

Earlier quoted context omitted.

I haven't tried this, but https://github.com/ketchupsalt/debugger might be of interest to you. More generally, it's not actually sandboxed inside a web browser, you can interact with system through REST-ish API as well. see https://starfighter.readme.io/docs/retrieve-device-status for some documentation on that. It's obviously pretty inconvenient to get a full debugger type experience that way, but I don't really see…

This line seems like a bug to me (assigning the int 16 to a variable that should be of an enumerated type {I8, I16, I32, S, R}, though I don't know if Go has those): https://github.com/ketchupsalt/debugger/blob/master/commandl...

There are probably a zillion little bugs in that thing (I haven't used it in months) but if people really want it to work, I'm probably less than 4 concerted hours from making it workable.

Re: Stockfighter's Jailbreak CTF trainer is live

#63
post #61
post #53

You all have great timing. It's very likely that something will melt down soon, but I'm not going to notice, because I'll be in a chair getting my arm inked up. It's going to be a nine-fives kind of day! Mean feedback about the UI, especially if accompanied by an even meaner summary of what you'd rather the UI does instead, is most welcome. Later (Erin's Calcifer tattoo is taking longer than expected, so if you want…

I was actually going to say I like the UI quite a bit at first glance. I haven't bit in yet, but overall I really dug the layout.

There are things I want to do with this UI that we couldn't do in Microcorruption --- ways to make assembly a little more accessible to programmers who aren't already from security or game development, where the people who crushed Microcorruption came from --- because the assembly was a flat marked-up blob of text. But there are definitely ways in which it's a step back.

Re: Stockfighter's Jailbreak CTF trainer is live

#64
post #61
post #53

You all have great timing. It's very likely that something will melt down soon, but I'm not going to notice, because I'll be in a chair getting my arm inked up. It's going to be a nine-fives kind of day! Mean feedback about the UI, especially if accompanied by an even meaner summary of what you'd rather the UI does instead, is most welcome. Later (Erin's Calcifer tattoo is taking longer than expected, so if you want…

I was actually going to say I like the UI quite a bit at first glance. I haven't bit in yet, but overall I really dug the layout.

[deleted]

Re: Stockfighter's Jailbreak CTF trainer is live

#65
post #59
post #47

Earlier quoted context omitted.

Snif. My feels. Right in the feels! Try as hard as you like though, you cannot make comments like these unproductive! * You cannot "explore the filesystem". The "files" are really just bookmarks in case you want to switch between different C-like programs to deal with a level. I hate the UI more than you do, but suggestions very welcome. * You mean "compile" as in, the debugger command? What would you like it to prin…

Sorry for being rude. It seems strange that there are a set of names associated with blobs of data (source code) but the tools for managing that name->blobs map (querying which names are mapped, removing a mapping from the map, etc.) are incomplete. The source code editor allows views and updates, but I don't see how I would do garbage collection, and one can't perform views or updates from the debugger, but is expec…

If it keeps you generating feedback like that, be as mean as you like! I need stuff like this.

The source file thing is definitely strange. I could just lose it entirely; save your own files! That's how the termbox client works. It made slightly more sense when it was driven from the CLI.

"compile" in the debugger is vestigial, but if we think it makes sense to have it do something useful, let's have it do something useful. I'll have it do what the compile button does, and also print a summary of the generated program. It'll be immediately clear what it does. I'll make "load" do something sensible too.

I think more people want me to have a command line than want a completely streamlined interface, but I think I have some work to do on making the command line work better.

There is utility, later on, in looking more carefully at the individual steps of getting a program to run, but there is not much utility to it in earlier levels. I can hide those commands earlier; I didn't because that'd be kind of a tell. Earlier on this year, I wanted this interface to capture more of the annoyance of figuring out a realistically complicated target (rather than it being immediately clear what your objective was), but I'm moving away from that now.

It's definitely very tricky to write documentation for this that makes sense to reversers or embedded devs and that works for the people who've never done any of this kind of stuff. Maybe I shouldn't be trying to accomplish both things in one set of documents!

My #1 takeaway from your original comment: I need to do an audit of all the command line commands and have them all be discoverable by running them and seeing what happens. That is definitely not the case right now, and it's a very easy gap for me to close.

There shouldn't really be anything you can do in the web interface that you can't do in the API.

Re: Stockfighter's Jailbreak CTF trainer is live

#66
post #60
post #57

Earlier quoted context omitted.

I want typing "load foo.cg" and hitting enter in the debugger to print _something_, almost anything. Ideally it would print different things depending on whether foo.cg actually exists and is a valid file to try to load or not. Just some sort of feedback indicating that the command actually did something would be great. I like the different load/flash/vmload/vmexec commands, I've certainly needed to stop at points in…

Oh. Yep, like "compile", that command is vestigial (the source editor used to live in a tab, and, ironically, the file saving stuff made more sense that way, driven from commands on the CLI). Yep, I can make "load" do that. Give me a few hours, though! It's an easy task, but I'm tethered through my iPhone right now.

I personally am in no rush for this, all my discretionary coding time is currently going to a work sample for an opportunity Starfighter found me at the moment.

Re: Stockfighter's Jailbreak CTF trainer is live

#67
I am a bit worried that stock fighter is the wrong approach. If Susie wants a better job inwould recommend my path:

- if you want to find a better paying job, take each lunchtime and call every job advert you qualify for that pays 20k more than you earn. Do this for three months. You will get the raise.

- even better is to supplement this with LinkedIN, blog posts, network maintenance (when did you last have call or have coffee with your previous boss?)

- do this for the next three jobs.

You are now at the pay ceiling for your skill set. Well done.

Now ... err ...

Start your own business, preferably selling something that scales (your time does not scale and you are selling it at pretty much the max - say 100-150k)

Re: Stockfighter's Jailbreak CTF trainer is live

#68
post #53

You all have great timing. It's very likely that something will melt down soon, but I'm not going to notice, because I'll be in a chair getting my arm inked up. It's going to be a nine-fives kind of day! Mean feedback about the UI, especially if accompanied by an even meaner summary of what you'd rather the UI does instead, is most welcome. Later (Erin's Calcifer tattoo is taking longer than expected, so if you want…

Can you make enter repeat the last command? s is kinda annoying. iirc microcorruption let you repeat the last command.

edit: also, the password reset link doesn't go anywhere.

Re: Stockfighter's Jailbreak CTF trainer is live

#69
I was lucky enough to beta test this so I've had time to clear the trainer levels. And let me just say, wow. The tricks and turns you have to navigate to get through this are some of the best fun I've had sitting in front of a computer.

I like that people are evaluating this against things like Overwatch, because for me, Stockfighter is a form of entertainment. I still play video games occasionally, but in my growing adult years, I'm not able capture that same rush from winning.

Not so with CTFs. Maybe it's because I'm a relative newbie, but the dopamine rush I get from winning a level is incomparable. There is something about a solve, when you get that brainfeel where you just understand completely what is going on, that is unique. Perhaps that's what black hat hackers feel when they p0wn a system. The closest recollection for me is when I smashed through that top level brick in World 1-2 of Super Mario Bros, and I could run across the roof to win the level.

Re: Stockfighter's Jailbreak CTF trainer is live

#70
post #18
post #14

Earlier quoted context omitted.

> because I don't have the desire right now to code all day and then code some more Tell me about it. Speaking only for myself, I have near-constant coder's guilt - a term I just made up to describe the nagging voice in my head that keeps telling me I should be coding more in my free time. It sounds something like this : "somewhere a rockstar wizard ninja is writing a C compiler in Haskell and here you are wasting yo…

Mine is even a little more annoying than yours. It doesn't like me doing productive things. "somewhere a rockstar wizard ninja is building a passive-income side project and here you are wasting your time tending a garden and working in your woodshop, you miserable idiot with stupid priorities."

> tending a garden and working in your woodshop

After doing tech for 15 years, that sounds glorious.

Post reply on HN