Stop Doing CTFs

STOP DOING CTF • SECURITY WAS NOT MEANT FOR COMPETITIONS • YEARS of CTFs yet NO REAL-WORLD CVEs FOUND • You want to HACK SOMETHING? DONT USE ctftime USE THIS • “I’m trying to find a gadget that lets me POP EAX so I can control the register to do a PLT overwrite” - Statements dreamed up by the utterly deranged LOOK at what CTF players have been demanding your RESPECT for all this time, with all the mitigations we built for them (This is REAL CTF, done by REAL CTF PLAYERS) ????? ????????? ?????????? They have played us for absolute fools

Мем высмеивает участников соревнований по кибербезопасности CTF, которые годами решают искусственные задачи и требуют уважения, хотя эти навыки якобы не приводят к реальным CVE. Внизу показаны псевдосложные фрагменты эксплойтов и абсурдная схема, после чего следует саркастический вывод, что игроков «разыграли как полных дураков». EN: The meme mocks cybersecurity CTF competitors who spend years solving artificial challenges and demanding respect, even though these skills supposedly do not lead to real-world CVEs. The bottom shows pseudo-complex exploit fragments and an absurd diagram, followed by the sarcastic conclusion that the players have been “played for absolute fools.”

• @gentoomemes / 4664 2023-05-21