Bruce Schneier already posit that hack-a-thing challenge is not a good test or proof of whether a thing is vulnerable. Back in the days when everyone was coming out with hash and cipher algo there were bounties offered as PR of how strong thingX was. Not everyone is going to take up a challenge, if I were a real criminal I would discover the vulnerability (if any) and keep it to myself because the exploit, especially a secret one, is worth more than the bounty, and has a longer pay period.
US Air Force Space Security Challenge 2020: Hack-a-Sat
71–80 of 93 posts
Re: US Air Force Space Security Challenge 2020: Hack-a-Sat
#72I hope there is a def con this year
Re: US Air Force Space Security Challenge 2020: Hack-a-Sat
#73Is it just me or is $50K is really low price to pay, almost like a slap in the face, for a satellite level vulnerability? If i remember correctly military satellites often carry civilian comm services: important business communications/financial networks etc.
What would be the black market price for something like this? It has to be at least 10x more at $500K as a low end. Realistically a million $+
Re: US Air Force Space Security Challenge 2020: Hack-a-Sat
#74Earlier quoted context omitted.
I'd bet they're most certainly doing this so smart kids are brainwashed and drink the kool-aid of warmongers.
> Anti-MIC comment Depends on where you draw your ethical boundaries? I mean it's a lucrative career in itself and you get to work in cutting edge tech that hopefully never gets proliferated to other countries (esp. the oppressive ones).
Saudi Arabia says Hi and thanks for the nuclear!
Re: US Air Force Space Security Challenge 2020: Hack-a-Sat
#75I'll bet that foreign intelligence people that actually know how to hack satellites are looking at each other and laughing.
I bet that American intelligence officials looking to snag naive foreign cyber operatives are looking at each other and laughing too.
Re: US Air Force Space Security Challenge 2020: Hack-a-Sat
#76>>Participants who successfully complete a set of qualification challenges on cybersecurity and space this spring will be invited to the ultimate challenge: to (ethically) hack a satellite. Lol. That is so military public affairs. You are allowed to hack a satellite after being vetted and approved by government. Are Canadians allowed to participate? How about Russians? What about crypto-anarchists who will never pass…
60GHz is covered in IEEE 802.11a - https://en.wikipedia.org/wiki/IEEE_802.11ad
Re: US Air Force Space Security Challenge 2020: Hack-a-Sat
#77>>Participants who successfully complete a set of qualification challenges on cybersecurity and space this spring will be invited to the ultimate challenge: to (ethically) hack a satellite. Lol. That is so military public affairs. You are allowed to hack a satellite after being vetted and approved by government. Are Canadians allowed to participate? How about Russians? What about crypto-anarchists who will never pass…
60GHz is covered in IEEE 802.11a - https://en.wikipedia.org/wiki/IEEE_802.11ad
On earth. Its use in space is another matter covered by different rules.
Re: US Air Force Space Security Challenge 2020: Hack-a-Sat
#78My work focuses primarily on consumer application development, however cybersecurity and CTF challenges like this have always been an interest. What specific technical skills are required to successfully complete challenges like this?
For starters, have you participated in a ctf before?
No, I haven't.
Re: US Air Force Space Security Challenge 2020: Hack-a-Sat
#79My work focuses primarily on consumer application development, however cybersecurity and CTF challenges like this have always been an interest. What specific technical skills are required to successfully complete challenges like this?
Have you ever had to debug a "blackbox" before, Application code or hardware that you had really nothing to do with and had to figure out how in the hell it works? or worked with embedded devices or embedded radios? Would love to help you out likewise anyway, hit me on up twitter @JRWR
> Have you ever had to debug a "blackbox" before, Application code or hardware that you had really nothing to do with and had to figure out how in the hell it works?
I suppose so, yes, but probably not to the extent required in some of these challenges.
I just read through https://cybersecurity.att.com/blogs/security-essentials/capt... and some of the accompanying write ups[0] on Github which was very insightful.
[0]: https://github.com/1337pwnie/ctf-writeups/tree/master/2017/U...
Re: US Air Force Space Security Challenge 2020: Hack-a-Sat
#80>>Participants who successfully complete a set of qualification challenges on cybersecurity and space this spring will be invited to the ultimate challenge: to (ethically) hack a satellite. Lol. That is so military public affairs. You are allowed to hack a satellite after being vetted and approved by government. Are Canadians allowed to participate? How about Russians? What about crypto-anarchists who will never pass…
Could ITAR have something to do with the need for a vetting process?
ITAR = International Traffic in Arms Regulations
https://www.pmddtc.state.gov/ddtc_public?id=ddtc_kb_article_...