Facebook CTF Is Now Open Source

Huge props to Gulshan and Javier for launching. This is an incredibly cool platform, and the work they've been doing to introduce people to security through CTFs is hugely important: the only way we're going to build a more secure internet is by training all developers -- not just security engineers -- to understand exactly what it takes to attack an application.

I often meet people who wish they knew more about security, but they feel as though things like cryptography are beyond their grasp. Nothing could be further from the truth, and CTFs are evidence of this fact.

You can always find upcoming CTFs on CTF Time [0]. Give one a try sometime, and you might surprise yourself with how quickly you're able to pick things up. Even if you don't solve any problems, you'll have an absolute blast.

If you ever have questions about getting involved in CTF or you're looking for resources on learning security, don't be afraid to reach out to me. My contact info is on my profile.

[0] https://ctftime.org/

https://i.imgur.com/sx3trYK.png for those who can't open facebook.com for one reason or another

https://github.com/facebook/fbctf

> The Facebook CTF is a platform to host Jeopardy and “King of the Hill” style Capture the Flag competitions.

btw, I wonder if greater integration with lets encrypt is possible perhaps with a flag?

> Be ready to provide the path for your SSL certificate's CSR and key files.

You can read a short summary about what a CTF is here (https://ctftime.org/ctf-wtf/), but the best thing to do is to go out and start playing CTFs. https://ctftime.org/ is a great site that lists all upcoming CTFs. Note that a lot of these CTFs are meant for industry professionals, so don't feel discouraged if you find the problems tough. There are also some high school level and college level CTFs you can participate it.

Man, that is some nice looking UI.

Having participated in a few CTFs, they are a bit intimidating up front. Having this more visually like a 'game' (which CTF is, really) will garner a lot more attention to get people to dig in and learn.

Did you run it on HHVM? That class is implemented in HHVM https://docs.hhvm.com/hack/reference/class/AsyncMysqlConnect...