michael/blog
1
0
Fork 0
Code Issues 2 Pull requests Releases Packages 1 Wiki Activity

reformat easyctf post
All checks were successful
ci/woodpecker/push/woodpecker Pipeline was successful
Details

Browse source
This commit is contained in:
Michael Zhang 2024-10-07 23:37:18 -05:00
parent 096a7a1280
commit 478c26313f
2 changed files with 96 additions and 128 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

205
src/content/posts/2017-03-24_EasyCTF-2017-Wrap-up.md
View file

@ -4,124 +4,92 @@ date: 2017-03-24T11:36:40.681Z
tags: [medium-blog] tags: [medium-blog]
--- ---
<article class="h-entry"> EasyCTF just concluded this Monday!
<section data-field="body" class="e-content"> Looking back on the competition, I'd say that this year was our best year ever.
<section name="5ea1" class="section section--body section--first section--last"> Let's take a look at some of the stats.
<div class="section-content">
<div class="section-inner sectionLayout--insetColumn"> - **5,837** users registered this year, playing on **2,742** teams.
<p name="398b" id="398b" class="graf graf--p graf-after--h3">EasyCTF just concluded this Monday! Looking Of those teams, **1,938** teams scored points.
back on the competition, I’d say that this year was our best year ever. Let’s take a look at some of the - We had **63** challenges, which was close to our 68 last year.
stats.</p> - **10.7%** of all teams had 5 members — full teams! In fact, there were more 5-member teams than there were 4-, 3-, and 2-member teams.
<ul class="postList">
<li name="2082" id="2082" class="graf graf--li graf-after--p"><strong I'm really happy to see that so many people were willing to give us a week of their time to participate in our event and work through our challenges, despite the fact that we hadn’t promised any prizes ahead of time.
class="markup--strong markup--li-strong">5,837</strong> users registered this year, playing on <strong
class="markup--strong markup--li-strong">2,742</strong> teams. Of those teams, <strong I'd also like to give a shout-out to the entire dev team who helped monitor basically every point of contact that people had with us and creating amazing challenges.
class="markup--strong markup--li-strong">1,938</strong> teams scored points.</li>
<li name="0fe5" id="0fe5" class="graf graf--li graf-after--li">We had <strong ## Improvements for next year
class="markup--strong markup--li-strong">63</strong> challenges, which was close to our 68 last year.
</li> I still haven’t decided whether I’ll be completely involved in organizing this event again next year.
<li name="1105" id="1105" class="graf graf--li graf-after--li"><strong I hope that I’ll have some free time alongside my classes, but I’d also like some more cooperation from the rest of the organizers.
class="markup--strong markup--li-strong">10.7%</strong> of all teams had 5 members — full teams! In The biggest problem we had this year was basically not working on anything until the week before the competition.
fact, there were more 5-member teams than there were 4-, 3-, and 2-member teams.</li> By that time, it was already too late. Let’s take a closer look at what actually went wrong:
</ul>
<p name="9393" id="9393" class="graf graf--p graf-after--li">I’m really happy to see that so many people - **Lack of motivation.**
were willing to give us a week of their time to participate in our event and work through our challenges, I’m not sure people were actually busy during the entire year that we had planned to work, but there was definitely a lack of work put into organizing the competition.
despite the fact that we hadn’t promised any prizes ahead of time.</p> We had some big ideas at the beginning of the year, but as time passed, the chances of those ideas becoming reality looked rather slim as no one wanted to be the first one to start working.
<p name="a95a" id="a95a" class="graf graf--p graf-after--p">I’d also like to give a shout-out to the entire Somewhere in there I threw in a couple of deadlines, and we got a couple of problems written.
dev team who helped monitor basically every point of contact that people had with us and creating amazing Had I not done that, I fear we would have had much fewer problems than we actually did.
challenges.</p> - **No contact with sponsor companies.**
<h3 name="17c6" id="17c6" class="graf graf--h3 graf-after--p">Improvements for next year</h3> Contacting sponsors should have been one of the first things we did, since it takes a long time to sort out details and companies usually take at least two weeks to reply to emails anyway.
<p name="80aa" id="80aa" class="graf graf--p graf-after--h3">I still haven’t decided whether I’ll be Towards the end, we did get an email from DigitalOcean saying they were willing to fund servers for our competition, but launch day came and we didn’t hear back from them again.
completely involved in organizing this event again next year. I hope that I’ll have some free time - **No coordination.**
alongside my classes, but I’d also like some more cooperation from the rest of the organizers. The biggest Some of the feedback I’ve been hearing about this year’s competition is a shortage of actually “easy” problems.
problem we had this year was basically not working on anything until the week before the competition. By We never really went through the competition and tried to lay out a “spectrum” of problems nor tackle it from the participants’ perspective.
that time, it was already too late. Let’s take a closer look at what actually went wrong:</p> Every problem was either just a “cool idea” someone had or “I feel like a CTF needs this.”
<ul class="postList"> The intermediate web section was completely missing.
<li name="09a8" id="09a8" class="graf graf--li graf-after--p"><strong - **Unbalanced team.**
class="markup--strong markup--li-strong">Lack of motivation.</strong> I’m not sure people were Our team comprised mainly of problem writers.
actually busy during the entire year that we had planned to work, but there was definitely a lack of That’s great and all, but when it comes to things like contacting sponsor companies, writing the website, planning some kind of game, we basically have no resources to do those.
work put into organizing the competition. We had some big ideas at the beginning of the year, but as I spent my entire time developing OpenCTF, the platform that powered the competition, and I know for sure that was a task too large for me to handle.
time passed, the chances of those ideas becoming reality looked rather slim as no one wanted to be the Getting more web designers or people with other skills would have helped out a lot.
first one to start working. Somewhere in there I threw in a couple of deadlines, and we got a couple of
problems written. Had I not done that, I fear we would have had much fewer problems than we actually I’ve also got a couple of points of reflection for prospective CTF organizers, so if you’re planning to run a CTF, this is for you.
did.</li>
<li name="6dea" id="6dea" class="graf graf--li graf-after--li"><strong - **Participant experience takes first priority.**
class="markup--strong markup--li-strong">No contact with sponsor companies.</strong> Contacting A lot of organizers think the hardest part of running a CTF is getting good challenges.
sponsors should have been one of the first things we did, since it takes a long time to sort out details And they’d be right.
and companies usually take at least two weeks to reply to emails anyway. Towards the end, we did get an But that’s not to say that preparing a solid game infrastructure for flag submission is going to be something you can do last-minute.
email from DigitalOcean saying they were willing to fund servers for our competition, but launch day When it comes to the participants’ experience, the first thing that they encounter is the website.
came and we didn’t hear back from them again.</li> Then a few initial challenges.
<li name="135a" id="135a" class="graf graf--li graf-after--li"><strong Then probably the chat.
class="markup--strong markup--li-strong">No coordination.</strong> Some of the feedback I’ve been Make sure you have those down well and people will probably have a better initial impression of your CTF.
hearing about this year’s competition is a shortage of actually “easy” problems. We never really went - **Some people are there to make you miserable.**
through the competition and tried to lay out a “spectrum” of problems nor tackle it from the As the one in control, you need to account for those people.
participants’ perspective. Every problem was either just a “cool idea” someone had or “I feel like a CTF We’re lucky that we only had relatively few encounters with such people but do keep in mind that you are still running an event and that takes first priority.
needs this.” The intermediate web section was completely missing.</li> During EasyCTF, there were a couple of people who thought it was funny to drop flags for hard challenges into the chat room.
<li name="f9eb" id="f9eb" class="graf graf--li graf-after--li"><strong When we tried to get them to stop, they would come back under different aliases in order to annoy us.
class="markup--strong markup--li-strong">Unbalanced team.</strong> Our team comprised mainly of At that point we just shut down the entire chat room; the competition had to go on.
problem writers. That’s great and all, but when it comes to things like contacting sponsor companies, - **Ignore unconstructive negative feedback.**
writing the website, planning some kind of game, we basically have no resources to do those. I spent my Don’t take it to heart, solve the problems, and move on.
entire time developing OpenCTF, the platform that powered the competition, and I know for sure that was Who cares if some random kid in IRC says your CTF is garbage?
a task too large for me to handle. Getting more web designers or people with other skills would have Ask them what issues they’re having, fix them, and they’ll be happy.
helped out a lot.</li> It’s really not that complicated.
</ul> - **Docker.**
<p name="e77f" id="e77f" class="graf graf--p graf-after--li">I’ve also got a couple of points of reflection Is probably a good idea.
for prospective CTF organizers, so if you’re planning to run a CTF, this is for you.</p> The learning curve is not bad and it’s a great way to create disposable containers that can restart easily.
<ul class="postList"> Not only should you use Docker for your main competition website, you should also use it for all of the challenges that involve communicating with a server.
<li name="f14f" id="f14f" class="graf graf--li graf-after--p"><strong
class="markup--strong markup--li-strong">Participant experience takes first priority.</strong> A lot Here’s something else I definitely have to share.
of organizers think the hardest part of running a CTF is getting good challenges. And they’d be right. We had this autogen system that created different flags for different teams in order to discourage flag sharing.
But that’s not to say that preparing a solid game infrastructure for flag submission is going to be Some people came up to us reporting that their flag wasn’t working, when they clearly just took some other team’s flag.
something you can do last-minute. When it comes to the participants’ experience, the first thing that I didn’t really do anything about it, but just thought it was pretty funny that they had the nerve to report it to us even though they were cheating.
they encounter is the website. Then a few initial challenges. Then probably the chat. Make sure you have
those down well and people will probably have a better initial impression of your CTF.</li> So, what’s the future for EasyCTF?
<li name="f87b" id="f87b" class="graf graf--li graf-after--li"><strong
class="markup--strong markup--li-strong">Some people are there to make you miserable.</strong> As the - I’m seeing OpenCTF as a more permanent solution to our main platform.
one in control, you need to account for those people. We’re lucky that we only had relatively few It’s a very complex piece of software and it would be insane to try to rewrite it from scratch.
encounters with such people but do keep in mind that you are still running an event and that takes first I’m in the process of creating an open-source version of it and making it customizable (for example, turning off features that you don’t need like the programming judge) for CTF organizers.
priority. During EasyCTF, there were a couple of people who thought it was funny to drop flags for hard - We had this project going on a while back for a CTF calendar that also hosted tasks.
challenges into the chat room. When we tried to get them to stop, they would come back under different I was also hoping that it would be able to replay entire competitions but that seems a bit too hopeful at this point.
aliases in order to annoy us. At that point we just shut down the entire chat room; the competition had It would be nice to just get the calendar revived.
to go on.</li> - WeebCTF is happening again this summer, dates still yet to be decided.
<li name="dd6b" id="dd6b" class="graf graf--li graf-after--li"><strong If you’re into anime (or even if you’re not), come check it out!
class="markup--strong markup--li-strong">Ignore unconstructive negative feedback.</strong> You’re - Applications for joining the organizing team for the next EasyCTF will open soon.
always going to have haters. Don’t take it to heart, solve the problems, and move on. Who cares if some If there was something you didn’t like about EasyCTF, and you think you could have done better, by all means, join the team!
random kid in IRC says your CTF is garbage? Ask them what issues they’re having, fix them, and they’ll We’d like to hear your ideas.
be happy. It’s really not that complicated.</li>
<li name="2add" id="2add" class="graf graf--li graf-after--li"><strong Thanks for reading, and I hope I’ll be seeing you at the next CTF!
class="markup--strong markup--li-strong">Docker.</strong> Is probably a good idea. The learning curve
is not bad and it’s a great way to create disposable containers that can restart easily. Not only should
you use Docker for your main competition website, you should also use it for all of the challenges that
involve communicating with a server.</li>
</ul>
<p name="56ba" id="56ba" class="graf graf--p graf-after--li">Here’s something else I definitely have to
share. We had this autogen system that created different flags for different teams in order to discourage
flag sharing. Some people came up to us reporting that their flag wasn’t working, when they clearly just
took some other team’s flag. I didn’t really do anything about it, but just thought it was pretty funny
that they had the nerve to report it to us even though they were cheating.</p>
<p name="683f" id="683f" class="graf graf--p graf-after--p">So, what’s the future for EasyCTF?</p>
<ul class="postList">
<li name="7263" id="7263" class="graf graf--li graf-after--p">I’m seeing OpenCTF as a more permanent
solution to our main platform. It’s a very complex piece of software and it would be insane to try to
rewrite it from scratch. I’m in the process of creating an open-source version of it and making it
customizable (for example, turning off features that you don’t need like the programming judge) for CTF
organizers.</li>
<li name="b2ec" id="b2ec" class="graf graf--li graf-after--li">We had this project going on a while back
for a CTF calendar that also hosted tasks. I was also hoping that it would be able to replay entire
competitions but that seems a bit too hopeful at this point. It would be nice to just get the calendar
revived.</li>
<li name="bc5e" id="bc5e" class="graf graf--li graf-after--li">WeebCTF is happening again this summer,
dates still yet to be decided. If you’re into anime (or even if you’re not), come check it out!</li>
<li name="ff8a" id="ff8a" class="graf graf--li graf-after--li">Applications for joining the organizing
team for the next EasyCTF will open soon. If there was something you didn’t like about EasyCTF, and you
think you could have done better, by all means, join the team! We’d like to hear your ideas.</li>
</ul>
<p name="ef5b" id="ef5b" class="graf graf--p graf-after--li graf--trailing">Thanks for reading, and I hope
I’ll be seeing you at the next CTF!</p>
</div>
</div>
</section>
</section>
<footer> <footer>
<p>By <a href="https://medium.com/@failedxyz" class="p-author h-card">Michael Zhang</a> on <a <p>By <a href="https://medium.com/@failedxyz" class="p-author h-card">Michael Zhang</a> on <a
href="https://medium.com/p/4bbd1ca68877"><time class="dt-published" datetime="2017-03-24T11:36:40.681Z">March href="https://medium.com/p/4bbd1ca68877"><time class="dt-published" datetime="2017-03-24T11:36:40.681Z">March
@ -130,4 +98,3 @@ tags: [medium-blog]
link</a></p> link</a></p>
<p>Exported from <a href="https://medium.com">Medium</a> on October 8, 2024.</p> <p>Exported from <a href="https://medium.com">Medium</a> on October 8, 2024.</p>
</footer> </footer>
</article>

3
src/content/posts/2024-10-07-old-blog-posts.md
View file

@ -8,8 +8,9 @@ Just re-discovered an [old blog][1] I had written over at Medium from back aroun
[1]: https://medium.com/michaels-blog [1]: https://medium.com/michaels-blog
For completeness' sake I migrated them over to this blog, while still keeping links to the originals. Some of the oldest post dates back to 2014.
This means I've been blogging for almost 10 years in total! This means I've been blogging for almost 10 years in total!
For completeness' sake I migrated them over to this blog, while still keeping links to the originals.
I'm grateful that Medium was able to keep this around for all this time. I'm grateful that Medium was able to keep this around for all this time.
Even though some of it is quite embarassing to look back at, it's kind of like peering into a time capsule and seeing what I was up to in the past. Even though some of it is quite embarassing to look back at, it's kind of like peering into a time capsule and seeing what I was up to in the past.