Live data from Hacker News

Google CTF 2019

capturetheflag.withgoogle.com

71–80 of 140 posts

Re: Google CTF 2019

#71
post #60

Earlier quoted context omitted.

To be fair, the challenges are impossible to solve on a mobile phone so I am not sure why they should invest time and effort to make it mobile friendly.

It's not that hard to write a decent mobile page. It's often the result of over engineering.

But you can't use a mobile to play CTF in the first place. It would be over engineering if they made the page usable on a mobile for absolutely no reason.

Some of the stages in the CTF require you to download zip files and mount DMG/NTFS files. How do you propose to do that on a mobile?

Re: Google CTF 2019

#72
post #59
post #48

Dig at Apple from the third stage of the beginners' quest; "Your first thought is "Why does the display stand need to announce its price? And exactly how much does 999 dollars convert to in Xenonivian Bucklets?"

Stuck on this one, can see readme.flag but not sure how to proceed

Ended up using makemime which showed the data in base64. Good enough! Interestingly enough though the ORME.flag showed permission denied... I'll have to go back to that one later.

Re: Google CTF 2019

#73

Earlier quoted context omitted.

It's not that hard to write a decent mobile page. It's often the result of over engineering.

But you can't use a mobile to play CTF in the first place. It would be over engineering if they made the page usable on a mobile for absolutely no reason. Some of the stages in the CTF require you to download zip files and mount DMG/NTFS files. How do you propose to do that on a mobile?

No one is arguing for CTF to be playable on mobile, just that the page should be easily readable.

And it’s not hard to do that.

Re: Google CTF 2019

#74
post #29

Earlier quoted context omitted.

Yeah that's a good way to make everyone just skip your whole province. Just like how all the big headquarter offices moved to Toronto from Montreal in the 1970s, Quebec keeps shooting themselves in the foot. This chart shows everything you need to know: http://www.newgeography.com/files/cox-toronto-evolve-1.png By all means they should be the dominant city in Canada instead of Toronto, or at least equal. But they are…

And yet, housing prices in Montreal are much more affordable. And it has much better transportation options (separated bike lanes) despite significantly harsher winters. And Montreal is significantly happier [1] than Toronto or Vancouver. In other words, population growth (or money, or property values, whatever) isn't everything. [1] https://www.theglobeandmail.com/investing/personal-finance/a...

I tried living in Montreal and the long punishing winter trumps all of the other great benefits of Montreal over Toronto. It goes on far longer and the snow fall is far, far worse. But yes it's also a far prettier city than Toronto with a better music and cultural scene with super cheap rent.

But I now see it as a far better tourist destination than somewhere to build a life/business. Unless you're an artist or student who can't afford rent in a big city but still want to live in a big city (which is what 99% of the young people I met seemed to be doing, a whole lot of creative but unmotivated individuals).

I also found the stereotypes of the francophone Quebecois I heard my whole life growing up in Ontario to be surprisingly accurate (I went in highly skeptical as I'm a bit of a snob myself). The francophone parts of town were often both rude and hostile to someone still learning the language, while local laws force every worker to start every interaction in french. I was basically forced to start every interaction in every cafe/convenience store apologizing that I don't speak french well and continuing in English, missing every opportunity to learn. I also witnessed multiple protests over companies like JC Penny and not french-ifying their brand names (which sounds crazy to me), which I thought was ridiculous and unsurprising that business was slow there.

I spent a year living in MTL then came back multiple times over the last decade and very few new buildings or businesses changed. Meanwhile Toronto build about 100 new skyscrapers and new companies in the same time period.

Re: Google CTF 2019

#75

Earlier quoted context omitted.

Same. As far as I can tell, none of the usual restricted shell escape tricks work, so you just have to search through all the binaries on the system until you find one you can abuse to print the file contents, and that seems like more of a time sink than it's worth.

Use iconv.

shuf also works (its in /usr/bin) -- this took me a ~long~ time to figure out

Re: Google CTF 2019

#76
post #59

Earlier quoted context omitted.

Stuck on this one, can see readme.flag but not sure how to proceed

Same. As far as I can tell, none of the usual restricted shell escape tricks work, so you just have to search through all the binaries on the system until you find one you can abuse to print the file contents, and that seems like more of a time sink than it's worth.

env /bin/busybox strings README.flag

Re: Google CTF 2019

#77

Earlier quoted context omitted.

Scroll down

I did. Its not a big page. There's nothing there. Now I'm not a (total) idiot, obviously I can debug it if i have to (and if other people are telling me "there's stuff there, you just can't see it"). If i open it in chrome with extensions turned off or a default mobile browser, stuff now appears, so yeah, its got to do with script permissions and the like. But again, why not just include actual text in the "what is g…

If your having this much issue with figuring out what a ctf is its probably not for you. Googles ctf is pretty damn hard

Re: Google CTF 2019

#80
post #31

Does someone do in-depth posts/videos/talks about any of these (Google or FB) CTF challenges by breaking up what is happening, what, why and how they tried per challenege and how did they finally come to the solution step-by-step? These things have always intimidated me and I'd love to know more.

Check out MurmusCTF. [1]

1. https://m.youtube.com/MurmusCTF?uid=UB9vOGEUpw7IKJRoR4PK-A

Post reply on HN