Join Neil S Primmer and Benji Vesterby as they share their experience organizing Capture the Flag at GopherCon 2023. They discuss the thrilling scavenger hunt-like competition where teams collect digital flags, with the highest score winning. Topics include the importance of themes, misunderstandings in challenges, building and improving the challenge series, unpopular opinions, benefits of contributing to open source, and community support.
Go for Con CTF focused on challenges that tested participants' coding and problem-solving skills rather than specific security knowledge, making it accessible to a wider audience.
Participants were encouraged to familiarize themselves with concepts related to Capture the Flag events and problem-solving in software engineering, and to seek guidance from experienced participants and resources to enhance their learning experience.
The success of the Go for Con CTF event was evident through its high participation rate, positive feedback, and the resonation of its challenges with the first-time attendees, confirming its approachability and impact.
Deep dives
Overview of Go Capture the Flag
Go Capture the Flag is a dynamic competition where teams compete to gather digital flags and submit them to the competition organizers. Participants strive to amass the highest number of points through coding or hacking challenges. The event was organized by experienced professionals in the cybersecurity and software consulting industry, who brought the concept of Capture the Flag to Go for Con. The objective was to provide a fun and engaging gaming experience for attendees, while also promoting learning and skill development. The challenges included a variety of tasks, ranging from solving math problems to exploiting vulnerabilities in third-party packages. The organizers aimed to strike a balance by offering challenges that were accessible to individuals with no coding knowledge, as well as more advanced tasks for seasoned practitioners. The event fostered a supportive and inclusive community, encouraging participants to learn and grow together in a collaborative environment.
Differences from Traditional Capture the Flags
Go for Con CTF distinguished itself from traditional Capture the Flag events by focusing on challenges that did not require specific security knowledge, but rather tested participants' coding and problem-solving skills. The aim was to make the event accessible to a wider audience by removing the barrier of specialized expertise. The challenges were designed to incorporate various aspects of Go and software engineering, offering participants an opportunity to learn new skills. The organizers prioritized creating a diverse range of challenges, from fun mini-games to complex coding puzzles, ensuring there was something for everyone regardless of their background. The event also adopted a jeopardy-style format, where teams tackled individual challenges independently, rather than an attack-defend approach common in traditional CTFs.
Preparing for Go Capture the Flag
To prepare for Go for Con CTF, participants are encouraged to familiarize themselves with concepts related to Capture the Flag events and problem-solving in software engineering. Resources such as the Red Team Field Manual and ctf101.org offer valuable insights into the mindset and techniques employed in CTF challenges. Familiarity with tools like Kali Linux and practicing with platforms like Hack the Box can also help build relevant skills. Additionally, engaging with the Go community and seeking guidance from experienced participants can provide valuable support and enhance the learning experience. It is worth noting that efforts were made to include challenges suitable for participants without coding experience, allowing newcomers to join in the fun and take their first steps in software engineering.
Successful Go for Con Event
The recent Go for Con event exceeded expectations with a high participation rate and positive feedback. Nearly 20% of attendees registered for the event, and 72% of those who registered actively participated. The feedback forum also received a good response rate of over 15%. Most of the participants were first-time attendees of Go for Con, and many of them had never participated in a capture the flag activity before. The event's approachability and the challenges resonated well with the participants, confirming the event's success.
Importance of Themes in Challenge Series
The podcast episode discusses the significance of having a theme that ties the challenges together in the Challenge Series event. The theme not only enhances engagement and cohesion among challenges but also adds an element of fun for both participants and organizers. Hiding Easter eggs and creating a through line based on the theme allows for a more enjoyable and immersive experience. While the challenges in the event were themed around Fallout, the attendees did not require specific knowledge of the game to solve the challenges. The podcast also mentions that the upcoming Challenge Series event will feature new themes and exciting additions.
Angelica is joined by Neil S Primmer & Benji Vesterby to share their experience organizing “Capture the Flag” at GopherCon 2023. CTF events involve teams vying for supremacy as they strive to gather digital flags (presented as strings) and successfully submit them to the competition organizers. In essence, it’s a thrilling “scavenger hunt for nerds.” Join us as we unravel the intricacies and excitement of this unique gaming experience!
Changelog++ members save 1 minute on this episode because they made the ads disappear. Join today!
Sponsors:
Fly.io – The home of Changelog.com — Deploy your apps and databases close to your users. In minutes you can run your Ruby, Go, Node, Deno, Python, or Elixir app (and databases!) all over the world. No ops required. Learn more at fly.io/changelog and check out the speedrun in their docs.