Slashdot Mirror


A New Challenge from Honeynet

cjpez writes: "The people at the Honeynet have issued another challenge on the Bugtraq mailing list. Instead of hacking into a box, though, this time your goal is to submit the best analysis of a binary file they'll post on Monday, May 6th. Think you're good at reverse engineering? Then try it out! They're even offering actual prizes, so you can get something besides the feeling of personal fulfillment for your trouble. The post hasn't quite made it to SecurityFocus' Bugtraq Archive yet, but I did find it at another Bugtraq archive in Germany (slashdottings abound!). The URL included in the email, http://project.honeynet.org/reverse/, doesn't seem to be active yet, so presumably we can assume it'll go up on Monday. The post fails to address other concerns, though: will the winner be in violation of the DMCA? :P The challenge was also issued, obviously enough, on SecurityFocus' Honeypot mailing list."" In a later note, he points out that the announcement has finally made it to the Bugtraq archive page." (And that URL is active now.)

10 of 117 comments (clear)

  1. Tricky. by Anti-Microsoft+Troll · · Score: 1, Funny

    Actually, Microsoft is bankrolling this competition. It's their way of getting clever programmers to self-register.

    This way, when it finishes buying up the U.S. Government and moves the nation's capital to Redmond, all potential [h|cr]ackers can be rounded up and interred in camps. Security holes in Windows will then be a thing of the past.

  2. That's easy... by C60 · · Score: 2, Funny


    It's "ntldr" ... And boy is MS gunna be pissed.

    --
    Karma: 0 (But I wield a mean +10 Vorpal Apathy)
  3. Here's the binary, see if you can analyse it by Salsaman · · Score: 4, Funny

    ! seineew era sreenigne tfosorciM

  4. A file of ... by joe_bruin · · Score: 4, Funny

    a file of what? what's in it, random data? how do i know when i found it?

    i hope they dont use my method of hiding data:
    tar files
    bzip2 tar file
    xor it with my social security number
    hexdump to ascii file
    generate gif of the hex in the ascii file
    gpg encrypt gif
    gzip the gpg text (twice!)
    divide file into ints, swap endien-ness, reform
    uuencode the file
    hide contents in id3v2 tag of my "nofx" mp3s

  5. The reverse engineered source.... by Anonymous Coward · · Score: 4, Funny

    printf("B"); printf("E"); printf(" "); printf("S"); printf("U"); printf("R"); printf("E"); printf(" "); printf("T"); printf("O"); printf(" "); printf("D"); printf("R"); printf("I"); printf("N"); printf("K"); printf(" "); printf("Y"); printf("O"); printf("U"); printf("R"); printf("O"); printf(" "); printf("O"); printf("V"); printf("A"); printf("L"); printf("T"); printf("I"); printf("N"); printf("E"); printf("/n");

  6. Easy by Anonymous Coward · · Score: 1, Funny

    If you look hard enough it occurs somewhere in the digits of Pi written in base 256.

  7. Fastest way. by JonWan · · Score: 4, Funny

    Just open the file in Outlook. That will narrow down the possibilites.

  8. Finals Week by fuzz6y · · Score: 4, Funny

    Releasing such a challenge on Monday of finals week is pure, unmitigated evil. So much for my grades. . .

    --
    If you're going to be elitist, it would help to be elite.
  9. Anyone else find this funny? by dimator · · Score: 4, Funny

    Rule #6: The person who hacked the box is NOT eligible

    --
    python -c "x='python -c %sx=%s; print x%%(chr(34),repr(x),chr(34))%s'; print x%(chr(34),repr(x),chr(34))"
  10. Bar too high... by vovin · · Score: 2, Funny
    # Only one entry per household, please. Must be sentient to enter. Sorry, no Ginsu Knives come with this offer!

    Guess I need not waste my time ;->