Fri, 10 Aug. 2018, 17:00 UTC — Sun, 12 Aug. 2018, 21:00 UTC 

On-site

Las Vegas, NV

DEF CON CTF event.

Format: Attack-Defense Attack-Defense

Official URL: http://defcon.org/

This event's weight is subject of public voting!

Future weight: 72.50 

Rating weight: 68.75 

Event organizers 


Prizes

8 DEF CON black badges
8 DEF CON leather jackets

Redford – Aug. 18, 2018, 12:03 a.m.

Unfortunately I didn't enjoy this CTF much. Although the organizers had very nice ideas for the rules, the implementation of everything was really bad :(

Good things:
- Challenges were removed after some time (which is IMO good for A/D, you don't have to look at one challenge for the whole 48h).
- The organizers were nice and helpful.
- I liked the idea with testing user patches by the organizers before deployment.
- Music wasn't as loud as on previous DEF CON CTFs.
- The number of challenges was small, so non-US teams which couldn't afford sending 30 people to Vegas still had some change to win.

Bad things:
- Terrible Internet connection (but on the last day it was ok).
- There was no scoreboard available for the whole competition (excluding one projector, but it wasn't visible from our table).
- Challenge binaries weren't mirrored locally, so we needed to download them using the slow connection.
- Both CTF network and Internet connection shared the same throughput limit, so downloading anything could break your exploits.
- For the first few hours there was only one challenge available, so there wasn't too much to do, even for small teams.
- The music/videos in the CTF area were literally 10-20 different annoying videos run in a loop. Please play something less annoying or at least make the playlist longer.
- The rules weren't precisely defined, e.g. the normalization part was totally unclear to us.
- Patching system was totally broken for the whole first day, the organizers verified them by hand.
- No food or soft drinks provided :(
- No travel reimbursement + no team size limit - it's *much* harder for non-US teams to compete here.
- "pointless" challenge - I spent more than 20h reversing and analyzing the challenge binary only to not be able to connect to the server, because the organizers failed to host it properly.
- Hidden scoreboard on the last day - I really hate this idea, but it's probably very subjective ;)