{"tickets":[{"created_on":"2020-08-09T22:24:13Z","description":"hi, I cannot login to the service.\n\nsudo ssh -i team4.key team_04@bdooos.31337.ooo\nPTY allocation request failed on channel 0\nNcat: Invalid argument.","id":129,"messages":[{"created_on":"2020-08-09T22:24:40Z","id":379,"is_team_message":false,"message_text":"Checking your service.","ticket_id":129},{"created_on":"2020-08-09T22:25:32Z","id":380,"is_team_message":false,"message_text":"I restarted it, but in case you're trying to connect to it concurrently the console only supports one at a time.  PTY allocation is disabled, so you can get rid of that message using \"ssh -T ...\".","ticket_id":129},{"created_on":"2020-08-09T22:27:30Z","id":382,"is_team_message":true,"message_text":"ok, thanks","ticket_id":129}],"status":"CLOSED","subject":"bdoos","team_id":4,"team_name":"HITCON \u2694 Balsn"},{"created_on":"2020-08-09T21:59:52Z","description":"Hello - for gameboooy, it seems like the provided files have the log server running on port 8085 but the firewall rules say it's on 8086, so we can't talk to the log server at all.","id":128,"messages":[{"created_on":"2020-08-09T22:02:56Z","id":372,"is_team_message":false,"message_text":"looking into it will fix","ticket_id":128},{"created_on":"2020-08-09T22:04:24Z","id":373,"is_team_message":true,"message_text":"thanks!","ticket_id":128},{"created_on":"2020-08-09T22:08:15Z","id":374,"is_team_message":false,"message_text":"the containers are being pushed now.\r\n\r\nyou may apply this patch to your local setup.\r\n\r\n$ git show\r\ncommit 6ad5f4eb9f3076d9d55bdaf81805ddad0eb91026 (HEAD -> master, origin/master, origin/HEAD)\r\nAuthor: redacted <REDACTED@REDACTED>\r\nDate:   Sun Aug 9 18:04:29 2020 -0400\r\n\r\n    update firewall rules\r\n\r\ndiff --git a/service/src/firewall/logs.json b/service/src/firewall/logs.json\r\nindex 28b51f5..2ce9905 100644\r\n--- a/service/src/firewall/logs.json\r\n+++ b/service/src/firewall/logs.json\r\n@@ -1,7 +1,7 @@\r\n {\r\n        \"firewall\": \"logs_firewall.json\",\r\n        \"remote_host\": \"127.0.0.1\",\r\n-       \"remote_port\": 8086,\r\n+       \"remote_port\": 8085,\r\n        \"max_vals\": 0,\r\n        \"max_checks\": 0\r\n }","ticket_id":128},{"created_on":"2020-08-09T22:08:48Z","id":375,"is_team_message":false,"message_text":"announcing now","ticket_id":128},{"created_on":"2020-08-09T22:10:56Z","id":378,"is_team_message":true,"message_text":"thanks for being so prompt!","ticket_id":128}],"status":"CLOSED","subject":"gameboooy - log server has wrong port in config","team_id":10,"team_name":"PPP"},{"created_on":"2020-08-09T21:48:21Z","description":"Hi! Trying to upload a new patch for nooode, and I keep getting server errors back. I think the patch should be pretty mundane, do you guys know what could be causing this?","id":127,"messages":[{"created_on":"2020-08-09T21:49:04Z","id":363,"is_team_message":false,"message_text":"Investigating.","ticket_id":127},{"created_on":"2020-08-09T21:49:04Z","id":364,"is_team_message":false,"message_text":"Looking into it","ticket_id":127},{"created_on":"2020-08-09T21:49:27Z","id":365,"is_team_message":true,"message_text":"Thanks!","ticket_id":127},{"created_on":"2020-08-09T21:50:21Z","id":366,"is_team_message":false,"message_text":"Can you try again, we reset some things on our side.","ticket_id":127},{"created_on":"2020-08-09T21:50:53Z","id":367,"is_team_message":false,"message_text":"If it happens again can you send file to adamd on discord?","ticket_id":127},{"created_on":"2020-08-09T21:52:59Z","id":368,"is_team_message":true,"message_text":"No, dice. I'll do that now\n","ticket_id":127},{"created_on":"2020-08-09T21:53:11Z","id":369,"is_team_message":false,"message_text":"ok","ticket_id":127},{"created_on":"2020-08-09T21:57:07Z","id":370,"is_team_message":true,"message_text":"(resolved)","ticket_id":127},{"created_on":"2020-08-09T21:57:35Z","id":371,"is_team_message":false,"message_text":"patch was > 50 MB.","ticket_id":127}],"status":"CLOSED","subject":"500 Server Error when uploading patch","team_id":10,"team_name":"PPP"},{"created_on":"2020-08-09T21:19:25Z","description":"Is the flag located at /flag as the problem description says? We were able to read /proc/self/status, but /flag doesn't seem to work..","id":126,"messages":[{"created_on":"2020-08-09T21:21:08Z","id":355,"is_team_message":false,"message_text":"Please read announcements.","ticket_id":126},{"created_on":"2020-08-09T21:24:54Z","id":359,"is_team_message":true,"message_text":"WAIT WHAT???????? Why wasn't this shared anywhere??????? No announcements in discord, no twitter,.. what? When was this even announced... wow.. ok.","ticket_id":126},{"created_on":"2020-08-09T21:30:49Z","id":361,"is_team_message":false,"message_text":"Please monitor the team interface announcements. Also, I would encourage you to adopt a more sportsmanlike tone. These tickets become public when the DB is released post-game.","ticket_id":126},{"created_on":"2020-08-09T21:34:47Z","id":362,"is_team_message":true,"message_text":"Sorry for the tone, I was/am very frustrated with the situation and some got out on text. But we are pretty sure that we were told that these announcements will come in all three channels (interface, discord, and twitter) but that wasn't the case and it cost us much time sink due to it. ","ticket_id":126}],"status":"CLOSED","subject":"bdooos flag location","team_id":10,"team_name":"PPP"},{"created_on":"2020-08-09T21:15:24Z","description":"While no one is connected to it, it still wouldn't let us in. Can you reset it again?","id":125,"messages":[{"created_on":"2020-08-09T21:16:17Z","id":351,"is_team_message":false,"message_text":"Try it again?","ticket_id":125},{"created_on":"2020-08-09T21:16:50Z","id":352,"is_team_message":true,"message_text":"got into it... it's so unreliable :((( ","ticket_id":125},{"created_on":"2020-08-09T21:17:05Z","id":353,"is_team_message":true,"message_text":"oh or was it your reset? either way, got in now.. thanks","ticket_id":125},{"created_on":"2020-08-09T21:18:40Z","id":354,"is_team_message":false,"message_text":"I'll keep this open, can you let me know if/when it happens again?  I want to make sure that you're not getting intentionally DoSed on your console.","ticket_id":125},{"created_on":"2020-08-09T21:23:46Z","id":357,"is_team_message":true,"message_text":"Can you reset it please? WE are locked out again.\n","ticket_id":125},{"created_on":"2020-08-09T21:23:59Z","id":358,"is_team_message":false,"message_text":"Ack","ticket_id":125},{"created_on":"2020-08-09T22:08:52Z","id":376,"is_team_message":true,"message_text":"locked out again...help","ticket_id":125},{"created_on":"2020-08-09T22:09:30Z","id":377,"is_team_message":false,"message_text":"Ack, reset","ticket_id":125},{"created_on":"2020-08-09T22:27:11Z","id":381,"is_team_message":true,"message_text":"The console is infinitely rebooting without us doing anything...","ticket_id":125},{"created_on":"2020-08-09T22:28:04Z","id":383,"is_team_message":false,"message_text":"Restarted.  Likely due to exploit gone awry.","ticket_id":125},{"created_on":"2020-08-09T22:29:37Z","id":384,"is_team_message":true,"message_text":"It's still rebooting constantly. Unusable state. Please help :'(","ticket_id":125},{"created_on":"2020-08-09T22:30:00Z","id":385,"is_team_message":false,"message_text":"Investigating","ticket_id":125},{"created_on":"2020-08-09T22:35:14Z","id":386,"is_team_message":false,"message_text":"Still experiencing this?","ticket_id":125},{"created_on":"2020-08-09T22:37:04Z","id":387,"is_team_message":true,"message_text":"Not rebooting anymore. Thanks.","ticket_id":125},{"created_on":"2020-08-09T22:51:02Z","id":388,"is_team_message":true,"message_text":"Were you able to track down the issue? Who/What was causing it to fail constantly? It's crashing again. We are trying to debug this ourselves too at this point, and we see shellcode being sent with exit syscalls (among other things.. depending on whose payload gets in first)","ticket_id":125},{"created_on":"2020-08-09T22:53:31Z","id":389,"is_team_message":false,"message_text":"Understood, seeing similar traffic here. Has it been more stable the last minute or so?","ticket_id":125},{"created_on":"2020-08-09T22:54:34Z","id":390,"is_team_message":true,"message_text":"How is such activity not ocnsidered to be DoS? As we mentioned earlier in a different thread, we were trying our best to recover the state so it doesn't crash and burn after our exploit... but I guess that's not the case for some teams? Also, now that many teams are throwing at each other, it seems like getting onto target box first lets you just block all other attacks -- so it's become more of timing/luck issue?","ticket_id":125},{"created_on":"2020-08-09T22:55:19Z","id":391,"is_team_message":true,"message_text":"It was for a little bit till it rebooted again, but once it did, it's now ok for now (for a couple minutes thus far)","ticket_id":125},{"created_on":"2020-08-09T22:57:34Z","id":392,"is_team_message":false,"message_text":"Good to know. Some teams have decided to DoS at the end of the game.  All traffic is being recorded and if we identify who is responsible there will be consequences.","ticket_id":125},{"created_on":"2020-08-09T23:02:23Z","id":393,"is_team_message":false,"message_text":"Good game guys.","ticket_id":125}],"status":"CLOSED","subject":"Can't ssh into bdooos","team_id":10,"team_name":"PPP"},{"created_on":"2020-08-09T21:09:46Z","description":"will it stay submitted for the rest of the game or go SLA_FAIL all of a sudden","id":124,"messages":[{"created_on":"2020-08-09T21:12:55Z","id":349,"is_team_message":false,"message_text":"The description says that for bdooos \"Patches should not be uploaded here\".\n\nDon't submit patches on the team interface for bdooos.","ticket_id":124},{"created_on":"2020-08-09T21:13:24Z","id":350,"is_team_message":true,"message_text":"ah yes thanks","ticket_id":124}],"status":"CLOSED","subject":">bdooos status SUBMITTED.","team_id":5,"team_name":"koreanbadass"},{"created_on":"2020-08-09T20:42:53Z","description":"Either someone is DoSing (like team 1, who doesn't have stuff exposed). Or something really strange is going on.","id":123,"messages":[{"created_on":"2020-08-09T20:46:19Z","id":343,"is_team_message":false,"message_text":"We've looked into it and this is not a DoS.","ticket_id":123},{"created_on":"2020-08-09T20:47:00Z","id":344,"is_team_message":true,"message_text":"Then why is everyone down?","ticket_id":123},{"created_on":"2020-08-09T20:53:51Z","id":347,"is_team_message":false,"message_text":"If you have an exploit that leaks the flag and then crashes the service, you should use it. If you don't use it with extreme frequency, the service will recover between attempts.","ticket_id":123},{"created_on":"2020-08-09T21:23:39Z","id":356,"is_team_message":true,"message_text":"Can you reset it please? WE are locked out again.","ticket_id":123},{"created_on":"2020-08-09T21:29:05Z","id":360,"is_team_message":false,"message_text":"Closing this, watching the other ticket.","ticket_id":123}],"status":"CLOSED","subject":"Almost all teams have flags exposed for bdooos","team_id":10,"team_name":"PPP"},{"created_on":"2020-08-09T20:31:48Z","description":"hi i think i accidentally dos'd the npc bot\n\nsorry about that :|\n\n(fwiw it's a trivial dos that I could leverage against other teams or myself, but for obvious reasons we won't do that)","id":122,"messages":[{"created_on":"2020-08-09T20:34:41Z","id":338,"is_team_message":false,"message_text":"Thanks for letting us know. Please don't do it again.","ticket_id":122},{"created_on":"2020-08-09T20:43:57Z","id":340,"is_team_message":true,"message_text":"I guess to clarify further, what's the policy on going down this exploitation path. I think this might be exploitable, but it's a bit of a minefield because on misstep and it can bring down large portions of the service.","ticket_id":122},{"created_on":"2020-08-09T20:52:48Z","id":346,"is_team_message":false,"message_text":"You are running on isolated instances, any nooode that you bring down will only hurt you.","ticket_id":122},{"created_on":"2020-08-09T20:54:21Z","id":348,"is_team_message":true,"message_text":"hmm, ok. thanks!","ticket_id":122}],"status":"CLOSED","subject":"nooode dos","team_id":10,"team_name":"PPP"},{"created_on":"2020-08-09T20:22:39Z","description":"Most of the teams now have their flags disclosed on their website, but the new one that showed up a few minutes ago still says \"TOO OLD\". How old was this flag? It literally just showed up on the website..?\n\n00067B5FB0D52F3024827BEC34A610C4282F1BFF51D52EED","id":121,"messages":[{"created_on":"2020-08-09T20:27:08Z","id":334,"is_team_message":false,"message_text":"Just fixed a stale flag issue with the service. Should be good going forward.","ticket_id":121},{"created_on":"2020-08-09T20:27:29Z","id":335,"is_team_message":false,"message_text":"Please notify us if you see another new stale flag.","ticket_id":121},{"created_on":"2020-08-09T20:31:33Z","id":337,"is_team_message":true,"message_text":"Thanks. But I don't know why we have our flag shown on our website. We haven't touched it since you reset it for us last time.","ticket_id":121}],"status":"CLOSED","subject":"bdooos flag question ","team_id":10,"team_name":"PPP"},{"created_on":"2020-08-09T20:16:49Z","description":"To make it clear: there is definitely a difference in \"backdoor\" function that is written from kernel to usermode in __sys_socket, secret key there is different.","id":120,"messages":[{"created_on":"2020-08-09T20:17:39Z","id":331,"is_team_message":false,"message_text":"Understood!  You should use the original file.","ticket_id":120}],"status":"CLOSED","subject":"Re: Re: Re: Bdooos file change","team_id":7,"team_name":"More Bush Smoked Whackers"},{"created_on":"2020-08-09T20:13:22Z","description":"Even though we have no one connected to the bdooos box, we can't seem to ssh in. It says Ncat invalid argument.","id":119,"messages":[{"created_on":"2020-08-09T20:14:32Z","id":327,"is_team_message":false,"message_text":"Can you try to connect again?","ticket_id":119},{"created_on":"2020-08-09T20:14:45Z","id":328,"is_team_message":true,"message_text":"Oh, error just went away. thanks!","ticket_id":119}],"status":"CLOSED","subject":"Can't ssh into our bdooos box","team_id":10,"team_name":"PPP"},{"created_on":"2020-08-09T20:11:01Z","description":"We successfuly get the flags in the network traffic. But it always says too old.","id":118,"messages":[{"created_on":"2020-08-09T20:12:40Z","id":325,"is_team_message":false,"message_text":"Can you give more details of how you are obtaining flags?","ticket_id":118},{"created_on":"2020-08-09T20:13:22Z","id":326,"is_team_message":false,"message_text":"And, can you paste an example flag here?","ticket_id":118},{"created_on":"2020-08-09T20:15:42Z","id":329,"is_team_message":true,"message_text":"We inject the shellcode into the system and the shellcode filters all the traffic that contains flags and send them back to us.","ticket_id":118},{"created_on":"2020-08-09T20:17:29Z","id":330,"is_team_message":true,"message_text":"00067B5FB0D52F3024827BEC34A610C4282F1BFF51D52EED","ticket_id":118},{"created_on":"2020-08-09T20:17:46Z","id":332,"is_team_message":true,"message_text":"We submitted this one and it says too old","ticket_id":118},{"created_on":"2020-08-09T20:18:44Z","id":333,"is_team_message":false,"message_text":"OK, investigating","ticket_id":118},{"created_on":"2020-08-09T20:30:23Z","id":336,"is_team_message":false,"message_text":"There was a stale flag issue with this service.  Are you seeing new flags now?","ticket_id":118},{"created_on":"2020-08-09T20:35:38Z","id":339,"is_team_message":false,"message_text":"Can you confirm that you captured a flag via your shellcode instead of via SLA violation?","ticket_id":118},{"created_on":"2020-08-09T20:45:02Z","id":341,"is_team_message":true,"message_text":"just replied to zardus on the discord. yes, the shell code is get via shellcode, which works well on our own hosted machines, but seems having pretty severe troubles (and lead to flag leaking....). Our team members are trying to deploy new patches....","ticket_id":118},{"created_on":"2020-08-09T20:45:26Z","id":342,"is_team_message":true,"message_text":"btw, seems we do got new flags. thanks a lot!","ticket_id":118},{"created_on":"2020-08-09T20:47:13Z","id":345,"is_team_message":false,"message_text":"Awesome!","ticket_id":118}],"status":"CLOSED","subject":"bdooos flag issue","team_id":1,"team_name":"A*0*E"},{"created_on":"2020-08-09T20:07:34Z","description":"\"just use what you pulled down yesterday\" So you are saying that current file link is the wrong one? Why such vague announcement then?","id":117,"messages":[{"created_on":"2020-08-09T20:11:51Z","id":324,"is_team_message":false,"message_text":"Different files were mistakenly uploaded, and there /might/ be an issue with the file distribution for this service that we don't have the bandwidth to resolve right now.  There is no relevant semantic difference in what was pushed, but to avoid any confusion we are trying to confirm to teams that they should be using the original files.","ticket_id":117}],"status":"CLOSED","subject":"Re: Re: Bdooos file change","team_id":7,"team_name":"More Bush Smoked Whackers"},{"created_on":"2020-08-09T20:04:10Z","description":"Did the flag location change or was the location on the team interface wrong?? Also, the most recent update says that the files haven't changed, but we have two different hashes and bindiffs. The changes are small, but we assume it's semantically the same?","id":116,"messages":[{"created_on":"2020-08-09T20:06:28Z","id":323,"is_team_message":false,"message_text":"Cannot comment on flag location other than to say it is not at /flag and that it has not changed.  The running files have not changed.","ticket_id":116}],"status":"CLOSED","subject":"BDOOOS Questions","team_id":14,"team_name":"Shellphish"},{"created_on":"2020-08-09T20:00:35Z","description":"we got some flags from bdos service but it says too old.\ndoes the service work properly?","id":115,"messages":[{"created_on":"2020-08-09T20:05:32Z","id":322,"is_team_message":false,"message_text":"The service appears to be working correctly.  New announcement posted.","ticket_id":115}],"status":"CLOSED","subject":"bdos flag too old","team_id":1,"team_name":"A*0*E"},{"created_on":"2020-08-09T19:41:03Z","description":"Hi. Our communication to BDoooos 34.86.149.186 seems having some issues. Something in our path returned ICMP Port unreachable. Could you please check it out?","id":114,"messages":[{"created_on":"2020-08-09T19:42:37Z","id":314,"is_team_message":false,"message_text":"Could you give me more information about what caused the port unreachable response?","ticket_id":114},{"created_on":"2020-08-09T19:45:36Z","id":316,"is_team_message":true,"message_text":"Not sure. Our wireshark shows an UDP packet from <localhost>:54485 -> 34.86.149.186:10106 is rejected by ICMP Reachable: Port Unreachable. TTL returned is 57. If we ping the host, the echo reply is correctly returned, with TTL returned 58. Seems there is something wrong after the UDP port reached destination host?","ticket_id":114},{"created_on":"2020-08-09T19:55:50Z","id":318,"is_team_message":true,"message_text":"update: we tried several different servers located in Tokyo, Japan; Koowlong, Hongkong and SV, US. None of them could connect to the service, and all connections are returning ICMP type 3 code 3: PORT UNREACHABLE. Any update?","ticket_id":114},{"created_on":"2020-08-09T20:03:57Z","id":321,"is_team_message":false,"message_text":"This behavior appears to be as intended.","ticket_id":114}],"status":"CLOSED","subject":"Bdooos ICMP port unreachable","team_id":1,"team_name":"A*0*E"},{"created_on":"2020-08-09T19:35:36Z","description":"I don't know if you are alerted about responses to closed tickets or not, so: will you change the link or make an announcement about broken link?","id":113,"messages":[{"created_on":"2020-08-09T19:44:41Z","id":315,"is_team_message":false,"message_text":"Thanks, missed the comment on the closed ticket.  An announcement is incoming.","ticket_id":113},{"created_on":"2020-08-09T19:58:11Z","id":319,"is_team_message":true,"message_text":"Thanks!\r\n\r\nInitially we downloaded cf5591ea5b7419f4fa8a737049c7bdc314927c33a61b756cd1e1e2938ed8eb6f.tar.gz, and now 5b23107dfb296c64c154c41a1ab66d231aa5207596188d9cc0fa7e8e3883fc82.tar.gz is attached. Which one is the right one? And what is deployed on the server?","ticket_id":113},{"created_on":"2020-08-09T20:02:22Z","id":320,"is_team_message":false,"message_text":"Don't have the public bundle in front of me, you should just use what you pulled down yesterday.  Those are what are running.","ticket_id":113}],"status":"CLOSED","subject":"Re: Bdooos file change","team_id":7,"team_name":"More Bush Smoked Whackers"},{"created_on":"2020-08-09T19:19:11Z","description":"We've just noticed that current Bdooos files differ from ones we downloaded when task started. There was no announcement about it. Was it done on purpose?","id":112,"messages":[{"created_on":"2020-08-09T19:20:40Z","id":307,"is_team_message":false,"message_text":"No.  Please continue to use the original files from yesterday.","ticket_id":112},{"created_on":"2020-08-09T19:27:05Z","id":311,"is_team_message":true,"message_text":"Will you change the link or make an announcement about this?","ticket_id":112}],"status":"CLOSED","subject":"Bdooos file change","team_id":7,"team_name":"More Bush Smoked Whackers"},{"created_on":"2020-08-09T19:17:00Z","description":"Hey um, can we get some feedback on why sloootmachine patch 5250a436110398c82a0105a11ea085483225a7e579bfb94d8dd174bd9545ece0 fails SLA check?\ngenerator:\n\u2212 accepts both --flag --key and -f -k arguments\n\u2212 takes a 16-byte file in --flag and outputs a 1MB file in --key\ncryptor:\n\u2212 accepts --help --output --input --key and -h -o -i -k\n\u2212 outputs the original help on --help / -h\n\u2212 outputs the original status messages on encryption\n\u2212 encrypts multiple-block input, with aes-ecb, pkcs7 padding\n\u2212 yields the very same output as vanilla cryptor (checked by reversing the whitebox stuff into original AES key)\n\nBut somehow it still fails SLA. Why?..","id":111,"messages":[{"created_on":"2020-08-09T19:24:54Z","id":309,"is_team_message":true,"message_text":"Ok nvm, sloootmachine retired :)","ticket_id":111},{"created_on":"2020-08-09T19:27:07Z","id":312,"is_team_message":false,"message_text":"I can speak now since it's retired. :) It's PKCS5 instead of PKCS7.","ticket_id":111},{"created_on":"2020-08-09T19:55:26Z","id":317,"is_team_message":true,"message_text":"Hmm, but PKCS5 is the same as PKCS7 \ud83e\udd14 It's chr(N)*N","ticket_id":111}],"status":"CLOSED","subject":"Can we get SLA feedback?","team_id":7,"team_name":"More Bush Smoked Whackers"},{"created_on":"2020-08-09T19:14:46Z","description":"Is http://10.13.37.<team_id>:1337/flag a part of challenge?","id":110,"messages":[{"created_on":"2020-08-09T19:15:07Z","id":304,"is_team_message":false,"message_text":"Not from your perspective, no.","ticket_id":110}],"status":"CLOSED","subject":"bdooos","team_id":4,"team_name":"HITCON \u2694 Balsn"},{"created_on":"2020-08-09T19:03:31Z","description":"We've submitted a few \"disclosed\" flags to the submission, but it just returns with \"already submitted\" but no points have been added. Is this correct behavior?","id":109,"messages":[{"created_on":"2020-08-09T19:03:56Z","id":296,"is_team_message":false,"message_text":"If the flag has already expired, then yes.","ticket_id":109},{"created_on":"2020-08-09T19:05:41Z","id":298,"is_team_message":true,"message_text":"We submitted the one that recently showed up on one of the teams' page.. How long does a flag last? (We thought it was ~3 rounds?)","ticket_id":109},{"created_on":"2020-08-09T19:14:25Z","id":302,"is_team_message":false,"message_text":"Yes, flags expire after three rounds.  Could you paste that flag here?","ticket_id":109},{"created_on":"2020-08-09T19:20:09Z","id":306,"is_team_message":true,"message_text":"They are now all stale (> 3 rounds ago), but here are some: 0009DEFB1B9E89EFE5162137D55CC98FB79D12F46973717C, 00074D3B09D7E04BFF89770F43D484FFD7791D8D34E7DFF2, 000124201C1F0910AA6646DB9ADD9B5DFA1C0E60F30A3CC9","ticket_id":109},{"created_on":"2020-08-09T19:22:17Z","id":308,"is_team_message":false,"message_text":"Thanks, double-checking...","ticket_id":109},{"created_on":"2020-08-09T19:25:57Z","id":310,"is_team_message":false,"message_text":"Those flags are very stale (hours old).  If a team fails SLA but later recovers, old leaked flags continue to be presented which may explain this.","ticket_id":109},{"created_on":"2020-08-09T19:29:58Z","id":313,"is_team_message":true,"message_text":"Oh, ok. Thanks.","ticket_id":109}],"status":"CLOSED","subject":"Flag submissions for bdooos","team_id":10,"team_name":"PPP"},{"created_on":"2020-08-09T19:00:28Z","description":"Should we try to read http://10.13.37.<team_id>:1337/flag ?","id":108,"messages":[{"created_on":"2020-08-09T19:01:00Z","id":295,"is_team_message":false,"message_text":"Nope.","ticket_id":108}],"status":"CLOSED","subject":"bdooos","team_id":4,"team_name":"HITCON \u2694 Balsn"},{"created_on":"2020-08-09T18:49:34Z","description":"We were submitting a bunch of really straightforward patches for noode by tar-ing the contents of `service`, but none of them were succeeding.\n\nWe then tried uploading the raw download from the site, and that went through. The issue is, that is a tar that includes the file we're supposed to patch. Did the patch format change when the old patches were revoked?","id":107,"messages":[{"created_on":"2020-08-09T18:55:48Z","id":294,"is_team_message":false,"message_text":"Sorry for the delay, we are rousing the correct person to look into it.","ticket_id":107},{"created_on":"2020-08-09T19:04:25Z","id":297,"is_team_message":false,"message_text":"Did you notice the announcement earlier about nooode? We are 100% sure that deployment is correct, the error is on your side for all of your submissions, please recheck things on your end from the start.","ticket_id":107},{"created_on":"2020-08-09T19:06:39Z","id":299,"is_team_message":true,"message_text":"This is the only announcement we see about nooode.\n\n> On Sun @ 2:03 PM: ATTENTION TEAMS! Now that nooode has been extensively vetted by the best hackers on the planet, the Order has begun to use it in earnest! All patches have been reset. Public files remain the same.","ticket_id":107},{"created_on":"2020-08-09T19:06:58Z","id":300,"is_team_message":false,"message_text":"Yeap, that one.\r\n","ticket_id":107},{"created_on":"2020-08-09T19:13:10Z","id":301,"is_team_message":true,"message_text":"wait so if we are supposed to be submitting the inner one, why does a bogus tar pass SLA?","ticket_id":107},{"created_on":"2020-08-09T19:14:54Z","id":303,"is_team_message":false,"message_text":"Nothing changed in the patching process of nooode from the start of the service's release.","ticket_id":107},{"created_on":"2020-08-09T19:19:40Z","id":305,"is_team_message":true,"message_text":"ok, thanks","ticket_id":107}],"status":"CLOSED","subject":"Change to patch format for nooode","team_id":10,"team_name":"PPP"},{"created_on":"2020-08-09T18:44:43Z","description":"Does flag locate at \"/flag\"?","id":106,"messages":[{"created_on":"2020-08-09T18:46:52Z","id":293,"is_team_message":false,"message_text":"We will make an announcement.","ticket_id":106}],"status":"CLOSED","subject":"bdooos flag location","team_id":1,"team_name":"A*0*E"},{"created_on":"2020-08-09T18:23:20Z","description":"bdooos is alive I guess","id":105,"messages":[{"created_on":"2020-08-09T18:25:21Z","id":291,"is_team_message":false,"message_text":"Your instance is alive, yes.","ticket_id":105},{"created_on":"2020-08-09T18:26:47Z","id":292,"is_team_message":true,"message_text":"stupid me, it indeed is","ticket_id":105}],"status":"CLOSED","subject":"bdooos dead?","team_id":5,"team_name":"koreanbadass"},{"created_on":"2020-08-09T18:03:16Z","description":"Are there any restrictions on sending UDP packets from bdooos VM (192.168.111.107) to the Internet?","id":104,"messages":[{"created_on":"2020-08-09T18:03:51Z","id":287,"is_team_message":false,"message_text":"Nope, no restrictions.","ticket_id":104}],"status":"CLOSED","subject":"Bdooos backconnects","team_id":7,"team_name":"More Bush Smoked Whackers"},{"created_on":"2020-08-09T17:40:46Z","description":"So we can use our shellcode execution to crash other team's bdooos boxes which would allow us to get flags.\r\nThis is not allowed, correct?\r\n\r\nThe seccomp filter in the thread blocks us from calling open() on the flag file, and crashing does get the flag... so just trying to understand the directions here","id":103,"messages":[{"created_on":"2020-08-09T17:44:03Z","id":283,"is_team_message":false,"message_text":"Your understanding of those directions is correct.","ticket_id":103}],"status":"CLOSED","subject":"clarification for bdooos","team_id":10,"team_name":"PPP"},{"created_on":"2020-08-09T17:35:11Z","description":"Double checking that the section the Detector jumps to is supposed to be non-executable and crash :)","id":102,"messages":[{"created_on":"2020-08-09T17:35:32Z","id":281,"is_team_message":false,"message_text":"Correct!","ticket_id":102},{"created_on":"2020-08-09T17:37:01Z","id":282,"is_team_message":true,"message_text":"ty <3","ticket_id":102}],"status":"CLOSED","subject":"BDOOOS Detector exec","team_id":14,"team_name":"Shellphish"},{"created_on":"2020-08-09T17:34:44Z","description":"hi, you said \"Your patched file should not be obfuscated.\", but Tea Deliverers run shellcode with mprotect in cryptor. I think it should be called \"obfuscated\".","id":101,"messages":[{"created_on":"2020-08-09T17:35:10Z","id":280,"is_team_message":false,"message_text":"Looking into it.","ticket_id":101},{"created_on":"2020-08-09T17:44:43Z","id":284,"is_team_message":false,"message_text":"We have handled the issue. Thanks for reporting!","ticket_id":101}],"status":"CLOSED","subject":"patch of sloootmachine","team_id":4,"team_name":"HITCON \u2694 Balsn"},{"created_on":"2020-08-09T17:24:26Z","description":"we modified source, repackaged into tar.gz, and submitted. dashboard shows \"ACCEPTED\" but the service seems unchanged.","id":100,"messages":[{"created_on":"2020-08-09T17:26:13Z","id":277,"is_team_message":true,"message_text":"oh i don't know why but the patch seems working right now","ticket_id":100},{"created_on":"2020-08-09T17:26:34Z","id":278,"is_team_message":false,"message_text":"Deployment takes a bit of time, yeah.","ticket_id":100}],"status":"CLOSED","subject":"what is the patch format of nooode","team_id":11,"team_name":"r3kapig"},{"created_on":"2020-08-09T17:10:04Z","description":"hi, you said \"Your patched file should not be obfuscated.\", but A0E strips all symbols in cryptor.","id":99,"messages":[{"created_on":"2020-08-09T17:12:34Z","id":266,"is_team_message":false,"message_text":"Stripping is acceptable","ticket_id":99}],"status":"CLOSED","subject":"patch of sloootmachine","team_id":4,"team_name":"HITCON \u2694 Balsn"},{"created_on":"2020-08-09T17:04:09Z","description":"hello, we are patching nooode now,\nand we got \"accepted\" after patch upload, but why patch is not applied?\nnooode chall has patch issue again?","id":98,"messages":[{"created_on":"2020-08-09T17:07:50Z","id":264,"is_team_message":false,"message_text":"It was propagating. Should be live now.","ticket_id":98},{"created_on":"2020-08-09T17:13:06Z","id":268,"is_team_message":true,"message_text":"could you check one more plz? from our check, patch doesn't applied","ticket_id":98},{"created_on":"2020-08-09T17:16:27Z","id":270,"is_team_message":false,"message_text":"what is the patch id?","ticket_id":98},{"created_on":"2020-08-09T17:19:20Z","id":273,"is_team_message":true,"message_text":"Patch #603 for service nooode uploaded hash a23ab1a0a31e7f09251eb2ce27340cccb7dd01fffc5c298eeb91ef613f414a1d status ACCEPTED.\nPatch #599 for service nooode uploaded hash 0926e74b2570265ecde977e9da1e6c05be6127f3985bbc554c5170f29d68c345 status ACCEPTED.\nPatch #591 for service nooode uploaded hash 9bd3747e186f7d37feed836b65e6b965a5484467728273fb8cb70021cf06a7b1 status ACCEPTED.\nPatch #580 for service nooode uploaded hash 7fb2fc1d19212b1f9f00635597bdd5c6801453a5477dc7e06abef6ce631a0aff status ACCEPTED.\nPatch #575 for service nooode uploaded hash 28d10e9cc93119b88e80241e2a4d0e199b7cc7f33eeef828ab1a10e0e41949d3 status ACCEPTED.\nPatch #564 for service nooode uploaded hash 56ab5730d85e16701edbafd9b7654aaa3cc3dd5fbdb19d3299f37840563484d1 status ACCEPTED.","ticket_id":98},{"created_on":"2020-08-09T17:19:29Z","id":274,"is_team_message":true,"message_text":"all patch.","ticket_id":98},{"created_on":"2020-08-09T17:20:57Z","id":276,"is_team_message":false,"message_text":"ok thanks, we will take a look.","ticket_id":98},{"created_on":"2020-08-09T17:31:14Z","id":279,"is_team_message":false,"message_text":"We have confirmed that SLA checks, patching, and deployment are correct. There is a problem, and it's not on our side.","ticket_id":98},{"created_on":"2020-08-09T17:55:30Z","id":285,"is_team_message":true,"message_text":"does deployment are correct sure? \ncould you check `Patch #644 for service nooode uploaded hash 1c89734d2f9a6a5e1a74c3f08e3c2acfa937190ef06c88801ecec4c845f561ce status ACCEPTED.` this thing?\n","ticket_id":98},{"created_on":"2020-08-09T17:57:41Z","id":286,"is_team_message":false,"message_text":"We are 100% sure that deployment is correct, the error is on your side for all of your submissions, please recheck things on your end from the start.","ticket_id":98},{"created_on":"2020-08-09T18:05:14Z","id":288,"is_team_message":false,"message_text":"Did patch 648 work as you expected?","ticket_id":98},{"created_on":"2020-08-09T18:11:16Z","id":289,"is_team_message":true,"message_text":"nope. since start, our patch is never accepted","ticket_id":98},{"created_on":"2020-08-09T18:13:06Z","id":290,"is_team_message":false,"message_text":"Patch 648 was very likely overwritten by the time you checked (see announcements).","ticket_id":98}],"status":"CLOSED","subject":"patch issue - team. koreanbadass","team_id":5,"team_name":"koreanbadass"},{"created_on":"2020-08-09T16:55:30Z","description":"Is there any special argument option / output key limitation that the generator has to follow? We tried several \"normal\" generators but all got SLA_FAIL.","id":97,"messages":[{"created_on":"2020-08-09T17:03:18Z","id":263,"is_team_message":false,"message_text":"looking into it","ticket_id":97},{"created_on":"2020-08-09T17:19:43Z","id":275,"is_team_message":false,"message_text":"See latest announcements, and file new ticket if there's an issue.","ticket_id":97}],"status":"CLOSED","subject":"Patch generator of sloootmachine","team_id":4,"team_name":"HITCON \u2694 Balsn"},{"created_on":"2020-08-09T16:47:50Z","description":" $ ssh -i team16 team_16@bdooos.31337.ooo                                                      !8064\nPTY allocation request failed on channel 0\nNcat: Invalid argument.\nConnection to bdooos.31337.ooo closed.\n\nIs the server down?","id":96,"messages":[{"created_on":"2020-08-09T16:48:06Z","id":259,"is_team_message":false,"message_text":"Checking","ticket_id":96},{"created_on":"2020-08-09T16:50:48Z","id":261,"is_team_message":false,"message_text":"It appears to be up.  You might get this error if you try to have multiple concurrent connections.  Only one connection can be made to the console at a time.  You can use \"ssh -T ...\" to not attempt pty allocation, which is forbidden on the server.","ticket_id":96}],"status":"CLOSED","subject":"bdooor can not access console","team_id":16,"team_name":"Tea Deliverers"},{"created_on":"2020-08-09T16:46:23Z","description":"Clicking on a link gets 200 and serves the index html","id":95,"messages":[{"created_on":"2020-08-09T16:47:19Z","id":258,"is_team_message":false,"message_text":"looking into it","ticket_id":95},{"created_on":"2020-08-09T16:49:27Z","id":260,"is_team_message":false,"message_text":"Which specific pcap?\n","ticket_id":95},{"created_on":"2020-08-09T16:50:52Z","id":262,"is_team_message":false,"message_text":"I'm able to download pcaps from your team interface, please clarify :)","ticket_id":95},{"created_on":"2020-08-09T17:12:33Z","id":265,"is_team_message":true,"message_text":"For example clicking on http://localhost:8080/pcap/17/released/team_9_service_17_1596992770_release.pcap","ticket_id":95},{"created_on":"2020-08-09T17:12:53Z","id":267,"is_team_message":true,"message_text":"Perhaps it has to do with my environment? this just leads me back to the index page","ticket_id":95},{"created_on":"2020-08-09T17:15:11Z","id":269,"is_team_message":false,"message_text":"I'm able to get that file just fine, maybe your connection is broken but the page is still there?\n\nBest to check that you can get that file from your team's jumpbox.","ticket_id":95},{"created_on":"2020-08-09T17:17:14Z","id":271,"is_team_message":true,"message_text":"yes that works. Thanks !","ticket_id":95}],"status":"CLOSED","subject":"Cant download caps","team_id":9,"team_name":"pasten"},{"created_on":"2020-08-09T16:23:54Z","description":"We think our patch #538 works okay (just implement AES). Why did it fail?","id":94,"messages":[{"created_on":"2020-08-09T16:27:20Z","id":255,"is_team_message":false,"message_text":"investigating!","ticket_id":94},{"created_on":"2020-08-09T16:43:49Z","id":256,"is_team_message":false,"message_text":"Hi A*0*E! the patch failed as intended. Check the announcement for sloootmachine!","ticket_id":94}],"status":"CLOSED","subject":"Patch of sloootmachine","team_id":1,"team_name":"A*0*E"},{"created_on":"2020-08-09T15:52:52Z","description":"The attack/defense graphs as [1] and [2] seem to be partially the same after tick ~225.\r\n\r\n[1] https://scoreboard.ooo/static/aflike/generated/service16_pwnhistory.html?nocacheplz\r\n[2] https://scoreboard.ooo/static/aflike/generated/service17_pwnhistory.html?nocacheplz\r\n","id":93,"messages":[{"created_on":"2020-08-09T16:04:31Z","id":249,"is_team_message":false,"message_text":"You're right, it's a mistake on our part. Please ignore it for now.","ticket_id":93}],"status":"CLOSED","subject":"Visualisation error","team_id":8,"team_name":"NorseCode"},{"created_on":"2020-08-09T15:48:23Z","description":"My patch is SLA_FAILing, but I have verified that:\n1. cryptor runs blazing fast.\n2. generator is a little bit slow but finishes in <3s.\n3. The command line interface is same to original cryptor and generator (at least --flag --key and -i -o -k).\n4. Of course the I/O of cryptor matches original.\n\nDo I need to match the stdout of the original cryptor?","id":92,"messages":[{"created_on":"2020-08-09T15:50:40Z","id":242,"is_team_message":false,"message_text":"can I get your patch id?","ticket_id":92},{"created_on":"2020-08-09T15:55:30Z","id":244,"is_team_message":true,"message_text":"Patch #529 for service sloootmachine uploaded hash c496c099530e2f1f631891d7599ae2c6f6e945a746b09811b8741144def63372 status SLA_FAIL.\n\nThanks!","ticket_id":92},{"created_on":"2020-08-09T15:55:53Z","id":245,"is_team_message":false,"message_text":"investigating","ticket_id":92},{"created_on":"2020-08-09T16:11:13Z","id":254,"is_team_message":false,"message_text":"I'm pretty sure that this is intentional. Go keep patching!","ticket_id":92},{"created_on":"2020-08-09T16:44:08Z","id":257,"is_team_message":false,"message_text":"Hi Tea Deliverers! the patch failed as intended. Check the announcement for sloootmachine!","ticket_id":92},{"created_on":"2020-08-09T17:17:39Z","id":272,"is_team_message":true,"message_text":"Got it, thank you!","ticket_id":92}],"status":"CLOSED","subject":"Can you hint on the SLA check criteria of sloootmachine?","team_id":16,"team_name":"Tea Deliverers"},{"created_on":"2020-08-09T15:44:02Z","description":"I think that team 10 does not respond correctly with the tar.gz, could you please check?","id":91,"messages":[{"created_on":"2020-08-09T15:44:41Z","id":236,"is_team_message":true,"message_text":"after sending 1 to roll they won't send anything back","ticket_id":91},{"created_on":"2020-08-09T15:45:10Z","id":237,"is_team_message":false,"message_text":"investigating!","ticket_id":91},{"created_on":"2020-08-09T15:46:22Z","id":239,"is_team_message":true,"message_text":"thanks","ticket_id":91},{"created_on":"2020-08-09T15:46:42Z","id":240,"is_team_message":false,"message_text":"I can receive msgs from team 10. Can you try again now?","ticket_id":91},{"created_on":"2020-08-09T15:53:45Z","id":243,"is_team_message":true,"message_text":"it could be that the file is very big compared to the other teams, so maybe it is a network issue on my side","ticket_id":91},{"created_on":"2020-08-09T15:57:04Z","id":246,"is_team_message":true,"message_text":"from 4,7,10 I don't receive any reply after the initial banner (even after some minutes) with the others the reply is almost instantaneous","ticket_id":91},{"created_on":"2020-08-09T15:59:32Z","id":247,"is_team_message":false,"message_text":"To reduce the places we have to look, are you using the team jumpbox?","ticket_id":91},{"created_on":"2020-08-09T16:01:02Z","id":248,"is_team_message":true,"message_text":"ah no I'll try that\n","ticket_id":91},{"created_on":"2020-08-09T16:06:42Z","id":250,"is_team_message":false,"message_text":"Can you also post here how you're testing (command) so that I can double check?","ticket_id":91},{"created_on":"2020-08-09T16:09:36Z","id":251,"is_team_message":true,"message_text":"nc 10.13.37.10 9162\nwait \nsend 1\nwait\n\nhowever my teammate sent me a script that works, so yeah it probably was connection/buffering related\nsorry","ticket_id":91},{"created_on":"2020-08-09T16:09:55Z","id":252,"is_team_message":true,"message_text":"ops the formatting was messed up","ticket_id":91},{"created_on":"2020-08-09T16:10:04Z","id":253,"is_team_message":false,"message_text":"ok thanks for letting us know :)","ticket_id":91}],"status":"CLOSED","subject":"Sloootmachine team 10 sla check","team_id":6,"team_name":"mhackeroni"},{"created_on":"2020-08-09T15:38:57Z","description":"sloootmachine patch is giving this error, but we are submitting a tarball. what does this error mean?","id":90,"messages":[{"created_on":"2020-08-09T15:44:41Z","id":235,"is_team_message":false,"message_text":"Could you send me your tarball on discord? tiffany #8087\n","ticket_id":90},{"created_on":"2020-08-09T15:45:45Z","id":238,"is_team_message":true,"message_text":"Never mind, it didn't properly compress.","ticket_id":90}],"status":"CLOSED","subject":"patch fail: format error","team_id":13,"team_name":"\u4f8d"},{"created_on":"2020-08-09T15:32:11Z","description":"It looks like the ropshipai visualization is stuck at round 249","id":89,"messages":[{"created_on":"2020-08-09T15:46:43Z","id":241,"is_team_message":false,"message_text":"Seems to be ticking forward.","ticket_id":89}],"status":"CLOSED","subject":"ropshipai visualization","team_id":8,"team_name":"NorseCode"},{"created_on":"2020-08-09T15:27:58Z","description":"dear organizers, is it intended that we don't have the ./generator file?\n\nthx","id":88,"messages":[{"created_on":"2020-08-09T15:28:42Z","id":228,"is_team_message":false,"message_text":"Dear mhackeroni, yes.","ticket_id":88}],"status":"CLOSED","subject":"Sloootmachine missing file generator","team_id":6,"team_name":"mhackeroni"},{"created_on":"2020-08-09T15:25:23Z","description":"In sloootmachine , our patch status is ACCEPTED but it shows that our patch is not applied.","id":87,"messages":[{"created_on":"2020-08-09T15:26:36Z","id":224,"is_team_message":true,"message_text":"btw here's the log: Patch #480 for service sloootmachine uploaded hash 5fef630a383ed2a9aec09fbcbeb7a7bd79c5989bcc7072fc77c0fa2d7ef5dba6 status ACCEPTED.\n","ticket_id":87},{"created_on":"2020-08-09T15:26:42Z","id":226,"is_team_message":false,"message_text":"What do you mean by it shows your patch is not applied?","ticket_id":87},{"created_on":"2020-08-09T15:30:02Z","id":229,"is_team_message":true,"message_text":"Oops, sorry, we just discovered the patch number we remembered was incorrect. The ticket should have not been opened.","ticket_id":87},{"created_on":"2020-08-09T15:30:21Z","id":230,"is_team_message":false,"message_text":"Great!","ticket_id":87}],"status":"CLOSED","subject":"In sloootmachine , our patch status is ACCEPTED but it shows that our patch is not applied.","team_id":1,"team_name":"A*0*E"},{"created_on":"2020-08-09T15:21:59Z","description":"The detector machine code is not allowed to run due to the memory protection/DEP, is this intended?\n","id":86,"messages":[{"created_on":"2020-08-09T15:26:05Z","id":223,"is_team_message":false,"message_text":"The service is running as intended.","ticket_id":86}],"status":"CLOSED","subject":"bdooos","team_id":4,"team_name":"HITCON \u2694 Balsn"},{"created_on":"2020-08-09T15:20:25Z","description":"Our patch not applied? We are sure that we have modified cryptor in our patch","id":85,"messages":[{"created_on":"2020-08-09T15:21:41Z","id":222,"is_team_message":false,"message_text":"This is intentional. Nice trial!","ticket_id":85}],"status":"CLOSED","subject":"sloootmachine patch not applied","team_id":1,"team_name":"A*0*E"},{"created_on":"2020-08-09T15:19:06Z","description":"why we got test flag in sloootmachine","id":84,"messages":[{"created_on":"2020-08-09T15:19:34Z","id":220,"is_team_message":false,"message_text":"We are investigating ","ticket_id":84},{"created_on":"2020-08-09T15:26:38Z","id":225,"is_team_message":false,"message_text":"Should be resolved. Let us know if you see this again.","ticket_id":84}],"status":"CLOSED","subject":"test flag?","team_id":1,"team_name":"A*0*E"},{"created_on":"2020-08-09T15:14:17Z","description":"When matching the rule, bdooos hit getrandom() and block by seccomp. Is that intended behavior?","id":83,"messages":[{"created_on":"2020-08-09T15:15:38Z","id":218,"is_team_message":false,"message_text":"Yes, this is intended.","ticket_id":83}],"status":"CLOSED","subject":"bdooos","team_id":4,"team_name":"HITCON \u2694 Balsn"},{"created_on":"2020-08-09T15:11:58Z","description":"Hi, we noticed the binary downloaded by our teammates is different from the one downloaded yesterday. Any possible ideas?","id":82,"messages":[{"created_on":"2020-08-09T15:12:36Z","id":215,"is_team_message":false,"message_text":"Investigating.","ticket_id":82},{"created_on":"2020-08-09T15:14:17Z","id":217,"is_team_message":false,"message_text":"Can you send us sha256sums of both?","ticket_id":82},{"created_on":"2020-08-09T15:17:49Z","id":219,"is_team_message":false,"message_text":"(of the binary, not the tarball)","ticket_id":82},{"created_on":"2020-08-09T15:30:27Z","id":231,"is_team_message":true,"message_text":"console: dcc22ba37f80e038b0afb333505bc70298f9f7810bfcdc258cba930d87d5c123 (yesterday)\nconsole: 61723979010475459382515bccc6fa64c19e0ef794afb97e4567436b11d559ac (today)","ticket_id":82},{"created_on":"2020-08-09T15:31:01Z","id":232,"is_team_message":true,"message_text":"image: b69eb66dc7c61595492b02d5302c6cd39b97c5edf05c0f6ef9edf808c9019dfc (yesterday) &  7cb3374720d8fc47435a8a11acf50013ea88659645aee57ad65687e91d3a5791 (today)","ticket_id":82},{"created_on":"2020-08-09T15:32:33Z","id":233,"is_team_message":true,"message_text":"initrd: c6d50284132be6a300ba1ce59b1650d62f16fac140b5e3a688b3a9c947b4e179 (yesterday) & 0cad487b8366d3a0295ad3881a8d71469c62a9ed76f46ee887840faa6887bf92 (today)","ticket_id":82},{"created_on":"2020-08-09T15:35:02Z","id":234,"is_team_message":false,"message_text":"Thanks. Please use yesterday's files, those match what is running.","ticket_id":82}],"status":"CLOSED","subject":"Question about bdooos","team_id":1,"team_name":"A*0*E"},{"created_on":"2020-08-09T15:08:54Z","description":"I0809 15:07:44.106053 140366910170944 exploit.py:111] FLAG-ARCHIVE,b'OOO{this_is_a_test_flag_this_is_a_true_testflag}',4,INCORRECT,More Bush Smoked Whackers,sloootmachine,ooobge,False,2020-08-09 15:07:44.106013\nI0809 15:07:44.106230 140366910170944 exploit.py:117] Attempt 1/1 of exploit sloootmachine-ooobge against More Bush Smoked Whackers failed.\n\n\nI0809 15:07:44.113193 140366910170944 exploit.py:111] FLAG-ARCHIVE,b'OOO{this_is_a_test_flag_this_is_a_true_testflag}',4,INCORRECT,PPP,sloootmachine,ooobge,False,2020-08-09 15:07:44.113155\nI0809 15:07:44.113461 140366910170944 exploit.py:117] Attempt 1/1 of exploit sloootmachine-ooobge against PPP failed.\n","id":81,"messages":[{"created_on":"2020-08-09T15:09:28Z","id":214,"is_team_message":false,"message_text":"Investigating!","ticket_id":81},{"created_on":"2020-08-09T15:19:41Z","id":221,"is_team_message":true,"message_text":"Now everyone has a test flag :P\nPlus, the service sometimes kills the connection before sending out the tar archive, annoying but nbd though.\n\nI0809 15:18:29.446015 140158789916480 exploit.py:111] FLAG-ARCHIVE,b'OOO{this_is_a_test_flag_this_is_a_true_testflag}',4,INCORRECT,koreanbadass,sloootmachine,ooobge,False,2020-08-09 15:18:29.445965\nI0809 15:18:30.210163 140158789916480 exploit.py:111] FLAG-ARCHIVE,b'OOO{this_is_a_test_flag_this_is_a_true_testflag}',4,INCORRECT,mhackeroni,sloootmachine,ooobge,False,2020-08-09 15:18:30.210115\nI0809 15:18:30.248256 140158789916480 exploit.py:111] FLAG-ARCHIVE,b'OOO{this_is_a_test_flag_this_is_a_true_testflag}',4,INCORRECT,bintw,sloootmachine,ooobge,False,2020-08-09 15:18:30.248220\nI0809 15:18:30.620404 140158789916480 exploit.py:111] FLAG-ARCHIVE,b'OOO{this_is_a_test_flag_this_is_a_true_testflag}',4,INCORRECT,Shellphish,sloootmachine,ooobge,False,2020-08-09 15:18:30.620355\nI0809 15:18:31.118566 140158789916480 exploit.py:111] FLAG-ARCHIVE,b'OOO{this_is_a_test_flag_this_is_a_true_testflag}',4,INCORRECT,Tea Deliverers,sloootmachine,ooobge,False,2020-08-09 15:18:31.118517\nI0809 15:18:31.315940 140158789916480 exploit.py:111] FLAG-ARCHIVE,b'OOO{this_is_a_test_flag_this_is_a_true_testflag}',4,INCORRECT,pasten,sloootmachine,ooobge,False,2020-08-09 15:18:31.315901\nI0809 15:18:31.355707 140158789916480 exploit.py:111] FLAG-ARCHIVE,b'OOO{this_is_a_test_flag_this_is_a_true_testflag}',4,INCORRECT,More Bush Smoked Whackers,sloootmachine,ooobge,False,2020-08-09 15:18:31.355660\nI0809 15:18:31.391503 140158789916480 exploit.py:111] FLAG-ARCHIVE,b'OOO{this_is_a_test_flag_this_is_a_true_testflag}',4,INCORRECT,PPP,sloootmachine,ooobge,False,2020-08-09 15:18:31.391466\nI0809 15:18:31.398586 140158789916480 exploit.py:111] FLAG-ARCHIVE,b'OOO{this_is_a_test_flag_this_is_a_true_testflag}',4,INCORRECT,CyKor,sloootmachine,ooobge,False,2020-08-09 15:18:31.398561\nI0809 15:18:31.621093 140158789916480 exploit.py:111] FLAG-ARCHIVE,b'OOO{this_is_a_test_flag_this_is_a_true_testflag}',4,INCORRECT,Samurai,sloootmachine,ooobge,False,2020-08-09 15:18:31.621057\nI0809 15:18:31.921068 140158789916480 exploit.py:111] FLAG-ARCHIVE,b'OOO{this_is_a_test_flag_this_is_a_true_testflag}',4,INCORRECT,A*0*E,sloootmachine,ooobge,False,2020-08-09 15:18:31.921031\n","ticket_id":81},{"created_on":"2020-08-09T15:26:54Z","id":227,"is_team_message":false,"message_text":"Should be resolved. Let us know if you see this again.","ticket_id":81}],"status":"CLOSED","subject":"I think there are something wrong in your flag pushing pipeline of sloootmachine","team_id":16,"team_name":"Tea Deliverers"},{"created_on":"2020-08-09T15:03:45Z","description":"What does this mean for sloootmachine?","id":80,"messages":[{"created_on":"2020-08-09T15:14:03Z","id":216,"is_team_message":false,"message_text":"A \"name error\" in sloootmachine means that there are extraneous files in the submitted tarball.","ticket_id":80}],"status":"CLOSED","subject":"patch fail: name error","team_id":13,"team_name":"\u4f8d"},{"created_on":"2020-08-09T14:58:58Z","description":"1. Is keep updating the state of the server allowed? \r\n2. Is keeping *crashing* the server (so server will reboot after 1 sec) allowed?","id":79,"messages":[{"created_on":"2020-08-09T15:01:27Z","id":211,"is_team_message":false,"message_text":"to your own server, or to a opponent?","ticket_id":79},{"created_on":"2020-08-09T15:07:34Z","id":212,"is_team_message":true,"message_text":"Both. ","ticket_id":79},{"created_on":"2020-08-09T15:08:15Z","id":213,"is_team_message":false,"message_text":"to an opponent is fine. to your own i would consider a self-dos and would not advise doing that.","ticket_id":79}],"status":"CLOSED","subject":"[gameboooy] Can we keep updating the state of the server?","team_id":4,"team_name":"HITCON \u2694 Balsn"},{"created_on":"2020-08-09T14:54:50Z","description":"What does the \"should not be obfuscated\" patch requirement mean?\nIn particular, is a rewritten / recompiled & stripped binary okay, so long as it's still totally reversible / not packed / no fancy obfuscation techniques?","id":78,"messages":[{"created_on":"2020-08-09T14:56:37Z","id":210,"is_team_message":false,"message_text":"Yes, that's groovy","ticket_id":78}],"status":"CLOSED","subject":"Sloootmachine patch requirement","team_id":10,"team_name":"PPP"},{"created_on":"2020-08-09T05:47:12Z","description":"This feature appears to run shellcode that we provided was base64. But locally and on the competition machine it will crash (even with trivial return instruction) due to XN. This makes this functionality unusable. Is this intentional?","id":77,"messages":[{"created_on":"2020-08-09T05:49:45Z","id":201,"is_team_message":true,"message_text":"(for bdooo challenge)","ticket_id":77},{"created_on":"2020-08-09T05:50:06Z","id":203,"is_team_message":false,"message_text":"Looking at it.","ticket_id":77},{"created_on":"2020-08-09T05:52:39Z","id":204,"is_team_message":true,"message_text":"Also just wondering: every time we have add a rule and attempt to trigger it, it crashes and causes our box to restart.\r\n(msg like\r\n# [   95.920775] audit: type=1326 audit(1596948838.000:2): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=237 comm=\"console\" exe=\"/console\" sig=31 arch=c00000b7 syscall=278 compat=0 ip=0x521f48 code=0x80000000\r\nBad system call\r\n)\r\nWe've been doing this for a while and initially thought we were doing something dumb, but figured it was worth checking ","ticket_id":77},{"created_on":"2020-08-09T05:53:33Z","id":205,"is_team_message":false,"message_text":"Ack.","ticket_id":77},{"created_on":"2020-08-09T05:58:37Z","id":206,"is_team_message":true,"message_text":"Also, we found the backdoor shellcode that lets us send data to an arbitrary IPv4 host and port via UDP. This works locally, but on the competition network we cannot send to any external IP nor our jump box. Is this intentional behavior?","ticket_id":77},{"created_on":"2020-08-09T05:58:48Z","id":207,"is_team_message":false,"message_text":"The XN issue is not intended, and will be addressed.  We haven't seen that crash before and will need to investigate it more tonight.","ticket_id":77},{"created_on":"2020-08-09T05:59:19Z","id":208,"is_team_message":false,"message_text":"Re: the backdoor, yes, this is intended.","ticket_id":77},{"created_on":"2020-08-09T14:35:59Z","id":209,"is_team_message":false,"message_text":"Resolution will be discussed at the captain's meeting this morning.","ticket_id":77}],"status":"CLOSED","subject":"Custom detector functionality","team_id":10,"team_name":"PPP"},{"created_on":"2020-08-09T05:44:11Z","description":"$ ssh team_07@bdooos.31337.ooo -i ~/team7\nPTY allocation request failed on channel 0\nNcat: Invalid argument.\nConnection to bdooos.31337.ooo closed.\n\nis it ok?","id":76,"messages":[{"created_on":"2020-08-09T05:50:00Z","id":202,"is_team_message":false,"message_text":"PTYs are restricted.  You might be seeing that error if you're trying to connect concurrently.  One connection at a time only to the console.","ticket_id":76}],"status":"CLOSED","subject":"Bdooos SSH connection failed","team_id":7,"team_name":"More Bush Smoked Whackers"},{"created_on":"2020-08-09T04:59:25Z","description":"Ports range shown in http://10.13.37.2:1337/, \"1${team_id:%02d}00-$${team_id:%02d}99\", doesn't make sense and I cannot connect to them.\nIs it correct?\n","id":75,"messages":[{"created_on":"2020-08-09T05:03:59Z","id":197,"is_team_message":false,"message_text":"Looking into it.","ticket_id":75},{"created_on":"2020-08-09T05:04:38Z","id":198,"is_team_message":false,"message_text":"For team 2, the port range is 10200-10299.  Will push an update for the typo.","ticket_id":75},{"created_on":"2020-08-09T05:14:27Z","id":199,"is_team_message":true,"message_text":"Thank you for fixing typo. I've tried to connect to some ports in the range (10200,10201,10202,10299) from inside/outside jumpbox. All eight attempts to connect these ports failed with time out error. Is this expected behavior?","ticket_id":75},{"created_on":"2020-08-09T05:21:03Z","id":200,"is_team_message":false,"message_text":"It is certainly possible, depending on how you are interacting with the service.","ticket_id":75}],"status":"CLOSED","subject":"Typo in bdooos description?","team_id":2,"team_name":"/bin/tw"},{"created_on":"2020-08-09T04:35:09Z","description":"We discovered there are two hidden files \"backbox\" and \"playfield\" on the server, but none of them is able to hit the sputnik jackpot.\nThe score of \"backbox\" is just 2 points away. Is it working as expected?","id":74,"messages":[{"created_on":"2020-08-09T04:36:08Z","id":192,"is_team_message":false,"message_text":"The challenge is working as expected.","ticket_id":74}],"status":"CLOSED","subject":"about sputnik jackpot of pinboooll","team_id":1,"team_name":"A*0*E"},{"created_on":"2020-08-09T04:29:50Z","description":"Is it intentionally excluded generator binary from distributed sloootmachine.tar.gz?","id":73,"messages":[{"created_on":"2020-08-09T04:30:18Z","id":190,"is_team_message":false,"message_text":"Yes","ticket_id":73}],"status":"CLOSED","subject":"about sloootmachine","team_id":2,"team_name":"/bin/tw"},{"created_on":"2020-08-09T04:27:30Z","description":"Hi. We discovered this flag exists for team 15 at BOTH 6min ago and 24 min ago: 0006181579FCFA757B4DAFEF0BEB9105399B750B7253D635. First submission (24min ago) returned TOO_OLD while the second submission (6min ago) returned ALREADY_SUBMITTED.\nIs this working as it should be?","id":72,"messages":[{"created_on":"2020-08-09T04:35:19Z","id":191,"is_team_message":false,"message_text":"Yes, working as it should. ","ticket_id":72}],"status":"CLOSED","subject":"bdooos's flag on :1337","team_id":1,"team_name":"A*0*E"},{"created_on":"2020-08-09T04:03:14Z","description":"There is no binary \"generator\" downloaded from the slot machine, is this expected?","id":71,"messages":[{"created_on":"2020-08-09T04:07:51Z","id":189,"is_team_message":false,"message_text":"The generator is meant to be not distributed.","ticket_id":71}],"status":"CLOSED","subject":"sloootmachine","team_id":4,"team_name":"HITCON \u2694 Balsn"},{"created_on":"2020-08-09T03:44:06Z","description":"are we supposed to get the generator file? we can get cryptor... and we can update generator... was generator supposed to be distributed?","id":70,"messages":[{"created_on":"2020-08-09T03:47:48Z","id":188,"is_team_message":false,"message_text":"The generator is meant to be not distributed.","ticket_id":70},{"created_on":"2020-08-09T04:39:34Z","id":193,"is_team_message":true,"message_text":"Thanks! (Sorry to revive this, but just wanted to triple-check before we rabbit-holed ourselves.) It's also intentionally not in the OOOaward.tgz, right?","ticket_id":70},{"created_on":"2020-08-09T04:43:37Z","id":194,"is_team_message":false,"message_text":"Yep, it is intentionally *not* in the OOOaward.tgz. I can triple-confirm this. :)","ticket_id":70},{"created_on":"2020-08-09T04:47:45Z","id":195,"is_team_message":true,"message_text":"Thanks! We're just a little confused (especially since we see nowhere that appears to call cryptor...) but I guess we'll try to muddle through. Thanks again for the quick answers!","ticket_id":70},{"created_on":"2020-08-09T04:55:59Z","id":196,"is_team_message":false,"message_text":"No problem! Good luck with it. :)","ticket_id":70}],"status":"CLOSED","subject":"slot machine question...","team_id":10,"team_name":"PPP"},{"created_on":"2020-08-09T03:17:49Z","description":"we think the provided chall file is not enough for us to setup debug environment. Further more, even can not pass the so-called POW in `service`.  Then we try to submit a patch,  But SLA fail with an unknown error `name error`. What we did is just patch the `service`, then ` tar zcf sloootmachine.tar.gz service steer.py`","id":69,"messages":[{"created_on":"2020-08-09T03:20:48Z","id":184,"is_team_message":false,"message_text":"Hey A*0*E! This is intentional per what you did. Nice trial!","ticket_id":69},{"created_on":"2020-08-09T03:25:31Z","id":185,"is_team_message":true,"message_text":"ok, thanks! ","ticket_id":69}],"status":"CLOSED","subject":"sloootmachine file missing","team_id":1,"team_name":"A*0*E"},{"created_on":"2020-08-09T03:13:51Z","description":"Both HITCON and TeaDeliverers seem to consistently get 7.5 attack points (15 teams, stealth) while getting 1 defense point. This seems impossible because both teams successfully got flag from each other..? or Do we not understand something about the defense points?","id":68,"messages":[{"created_on":"2020-08-09T03:29:27Z","id":186,"is_team_message":false,"message_text":"This is not an impossible result.","ticket_id":68},{"created_on":"2020-08-09T03:35:15Z","id":187,"is_team_message":true,"message_text":"Even when there's only one service actively being exploited? Hmm.. alright.. thanks!","ticket_id":68}],"status":"CLOSED","subject":"Defense points clarification","team_id":10,"team_name":"PPP"},{"created_on":"2020-08-09T03:12:40Z","description":"The files OOOAward.tgz and sloootmachine.tar.gz both seem to be missing.","id":67,"messages":[{"created_on":"2020-08-09T03:13:24Z","id":182,"is_team_message":true,"message_text":"nevermind","ticket_id":67},{"created_on":"2020-08-09T03:14:58Z","id":183,"is_team_message":false,"message_text":"good luck!","ticket_id":67}],"status":"CLOSED","subject":"Missing files in sloootmachine","team_id":8,"team_name":"NorseCode"},{"created_on":"2020-08-09T02:39:48Z","description":"We found a logical vulnerability which crashes the server. Is it allowed?","id":66,"messages":[{"created_on":"2020-08-09T02:40:35Z","id":180,"is_team_message":true,"message_text":"*Is keeping crashing the server allowed?","ticket_id":66},{"created_on":"2020-08-09T02:45:38Z","id":181,"is_team_message":false,"message_text":"Sure, shouldn't affect anything.","ticket_id":66}],"status":"CLOSED","subject":"[gameboooy] Can we keep crashing the server?","team_id":4,"team_name":"HITCON \u2694 Balsn"},{"created_on":"2020-08-09T00:59:59Z","description":"In the challenge gameboooy, the process logs_server listens on port 8085, but the specification states it listens on port 8086. Is this intentional or a mistake?","id":65,"messages":[{"created_on":"2020-08-09T01:04:15Z","id":179,"is_team_message":false,"message_text":"this is a mistake, however it shouldn't impact usability, as the log server is currently unused int the system.","ticket_id":65}],"status":"CLOSED","subject":"Wrong port for logs_server?","team_id":8,"team_name":"NorseCode"},{"created_on":"2020-08-09T00:31:59Z","description":"The challenge says \"KEEP YOUR APPLIANCE ONLINE YOUR SLA DEPENDS ON IT\", but the official rule said \"Note that there is no 'SLA' or 'uptime' here.\". So what does SLA mean in this challenge, and how does that affect patching?","id":64,"messages":[{"created_on":"2020-08-09T00:36:09Z","id":176,"is_team_message":false,"message_text":"Sorry, yes, bdooos is the sole exception.  Can't be more specific about what constitutes a SLA violation, however, unless you have a more specific question.","ticket_id":64},{"created_on":"2020-08-09T00:50:13Z","id":177,"is_team_message":true,"message_text":"What happens when a SLA violation occurs?","ticket_id":64},{"created_on":"2020-08-09T00:53:04Z","id":178,"is_team_message":false,"message_text":"Your flag is publicly disclosed.","ticket_id":64}],"status":"CLOSED","subject":"What does SLA mean in bdooos?","team_id":10,"team_name":"PPP"},{"created_on":"2020-08-09T00:07:06Z","description":"Hi, we have two different type of crashes in pinball: one will crash at \"free\" with invalid system call, and one will crash at \"fread\" with segmentation fault. But we still got \"duplicate crash\" in this case, could you help clarify the rule? Thanks a lot.","id":63,"messages":[{"created_on":"2020-08-09T00:13:12Z","id":173,"is_team_message":false,"message_text":"Can you elaborate on how you're triggering these bugs?","ticket_id":63},{"created_on":"2020-08-09T00:21:53Z","id":174,"is_team_message":true,"message_text":"(1) free: Overlap the data buffer with secret buffer by using bumper 3 times, which will crash during free(). (2) fread: Overwrite the data buffer with invalid address by using bumper 4 times, and send one more command then it will crash when trying fread() the data.","ticket_id":63},{"created_on":"2020-08-09T00:23:35Z","id":175,"is_team_message":false,"message_text":"I see. Looks like our deduplication considers that to have a common root cause, unfortunately.","ticket_id":63}],"status":"CLOSED","subject":"\"duplicate crash\" in pinball ","team_id":4,"team_name":"HITCON \u2694 Balsn"},{"created_on":"2020-08-09T00:00:14Z","description":"`nc -vvv bdooos.31337.ooo 11300`\nNo TCP connection. Service not up?","id":62,"messages":[{"created_on":"2020-08-09T00:01:26Z","id":170,"is_team_message":false,"message_text":"The service is up.","ticket_id":62}],"status":"CLOSED","subject":"bdooos: How to connect to the service","team_id":4,"team_name":"HITCON \u2694 Balsn"},{"created_on":"2020-08-08T23:59:42Z","description":"Hi, we ranked 3rd place with 89000+ score in latest 2~3 rounds. But we've got 170000+ score earlier. Should we still need to submit our solution every round? If not, what's the period for submitting?","id":61,"messages":[{"created_on":"2020-08-09T00:03:33Z","id":172,"is_team_message":false,"message_text":"pinboooll scores monotonically increase. They were dropping because of a bug. We'll propagate your 170000 score to all future ticks (until you beat it) as part of the score fixing.","ticket_id":61}],"status":"CLOSED","subject":"pinboooll","team_id":1,"team_name":"A*0*E"},{"created_on":"2020-08-08T23:56:03Z","description":"SIC ARCANUM CREATUS EST Patches should not be uploaded here. \nSo.. where should be patches be uploaded?","id":60,"messages":[{"created_on":"2020-08-09T00:02:46Z","id":171,"is_team_message":false,"message_text":"Can't answer that, sorry.","ticket_id":60}],"status":"CLOSED","subject":"Patches for bdooos","team_id":4,"team_name":"HITCON \u2694 Balsn"},{"created_on":"2020-08-08T23:47:39Z","description":"`bdooos.31337.ooo ports 1${team_id:%02d}00-$${team_id:%02d}99`\n\nis the command hint right? it looks confusing","id":59,"messages":[{"created_on":"2020-08-08T23:49:30Z","id":168,"is_team_message":false,"message_text":"If you are team 1, then the corresponding monitor interface will receive traffic send to bdooos.31337.ooo on ports 10100-10199.","ticket_id":59},{"created_on":"2020-08-08T23:50:51Z","id":169,"is_team_message":false,"message_text":"Pushing a fix for the $$ typo, thanks.","ticket_id":59}],"status":"CLOSED","subject":"bdooos cmd hint question","team_id":1,"team_name":"A*0*E"},{"created_on":"2020-08-08T23:32:22Z","description":"Nothing shown when connecting to bdooos@ 10.13.37.4:1337\nIs that expected?\n\nAlso by \"passwd\" you mean the \"/etc/passwd\", right?","id":58,"messages":[{"created_on":"2020-08-08T23:34:29Z","id":165,"is_team_message":false,"message_text":"Re: connection, yes.  Update coming for the patch.","ticket_id":58},{"created_on":"2020-08-08T23:38:29Z","id":167,"is_team_message":false,"message_text":"Sorry, misunderstood the connection question.  You should get a web page on 10.13.37.4:1337 with some important information.","ticket_id":58}],"status":"CLOSED","subject":"bdooos","team_id":4,"team_name":"HITCON \u2694 Balsn"},{"created_on":"2020-08-08T23:32:03Z","description":"Our score on scoreboard is decreased from 204542 to 103105. Could you help check it? Thanks.","id":57,"messages":[{"created_on":"2020-08-08T23:35:03Z","id":166,"is_team_message":false,"message_text":"Different one-time issue. Scores will get fixed when we rewrite, but if you like to see them up there now, just resubmit your solution :-)","ticket_id":57}],"status":"CLOSED","subject":"pinball score happened again","team_id":4,"team_name":"HITCON \u2694 Balsn"},{"created_on":"2020-08-08T23:28:24Z","description":"Is there a simultaneous connection limit?\r\nGetting: `Ncat: Invalid argument.`","id":56,"messages":[{"created_on":"2020-08-08T23:28:50Z","id":162,"is_team_message":false,"message_text":"Yes, one connection at a time to the console.","ticket_id":56}],"status":"CLOSED","subject":"bdooos not connecting","team_id":13,"team_name":"\u4f8d"},{"created_on":"2020-08-08T23:25:45Z","description":"Hi, we're on the jumpbox but we don't see the ssh keys. Where are they located?","id":55,"messages":[{"created_on":"2020-08-08T23:26:23Z","id":161,"is_team_message":false,"message_text":"They're the same ssh keys that you used to get into the jump box.","ticket_id":55}],"status":"CLOSED","subject":"Ssh keys for bdooos","team_id":10,"team_name":"PPP"},{"created_on":"2020-08-08T23:23:49Z","description":"line 51 has a typo 'of', so `ne`, `gt`, `lt` not working","id":54,"messages":[{"created_on":"2020-08-08T23:24:54Z","id":159,"is_team_message":false,"message_text":"Thanks, looking into it.","ticket_id":54},{"created_on":"2020-08-08T23:25:15Z","id":160,"is_team_message":false,"message_text":"fixing, sorry! will update","ticket_id":54},{"created_on":"2020-08-08T23:32:16Z","id":163,"is_team_message":false,"message_text":"redeployed pods with the fix, please redownload the bundle, it's been fixed.","ticket_id":54},{"created_on":"2020-08-08T23:32:25Z","id":164,"is_team_message":false,"message_text":"you must reupload any patches at this point.","ticket_id":54}],"status":"CLOSED","subject":"gameboooy: bug in firewall.rb","team_id":1,"team_name":"A*0*E"},{"created_on":"2020-08-08T23:06:53Z","description":"As the title, the score of our team is not shown yet.","id":53,"messages":[{"created_on":"2020-08-08T23:10:05Z","id":157,"is_team_message":false,"message_text":"We see 204542. Is that incorrect?","ticket_id":53},{"created_on":"2020-08-08T23:21:58Z","id":158,"is_team_message":false,"message_text":"204542 is what I see in the db too. For the past 15 minutes","ticket_id":53}],"status":"CLOSED","subject":"pinball still not shown","team_id":4,"team_name":"HITCON \u2694 Balsn"},{"created_on":"2020-08-08T22:51:35Z","description":"Hi. Is `unplug` necessary to sync our score to the score board?","id":52,"messages":[{"created_on":"2020-08-08T22:58:37Z","id":155,"is_team_message":false,"message_text":"no. If the problem was the fact that sometimes it reset the score.. that was due to a bug triggered when you submitted a low-scoring ball after scoring a jackpot","ticket_id":52}],"status":"CLOSED","subject":"pinboooll score question","team_id":1,"team_name":"A*0*E"},{"created_on":"2020-08-08T22:31:43Z","description":"Hi, we've seen our team listed on https://scoreboard.ooo/stats_slideshow.html with >30000 score today, but now it's disappeared. Could you help check it? Do we need to resubmit our ball in every round? Thanks.","id":51,"messages":[{"created_on":"2020-08-08T22:40:35Z","id":147,"is_team_message":false,"message_text":"Yes, that should not be possible :(\nI can see two or three possibilities. One, you were playing multiple games in parallel and there was a race condition writing to the score file. 2. the pod got redeployed... I guess sometimes it happens and in that case you should resubmit your ball. 3 you did not complete the protocol correctly (e.g., fail to send a second ball in a multiball) and so the server exit without saving the score.","ticket_id":51},{"created_on":"2020-08-08T22:41:57Z","id":148,"is_team_message":false,"message_text":"Btw, in the db I see now 72652","ticket_id":51},{"created_on":"2020-08-08T22:51:46Z","id":152,"is_team_message":true,"message_text":"Hi, this happened again: https://imgur.com/a/MPqSh8e","ticket_id":51},{"created_on":"2020-08-08T22:55:00Z","id":154,"is_team_message":false,"message_text":"pls see announcement","ticket_id":51}],"status":"CLOSED","subject":"pinball score does not shown","team_id":4,"team_name":"HITCON \u2694 Balsn"},{"created_on":"2020-08-08T22:25:29Z","description":"Is it OK that jackpot scores are not multiplied by x5 bonus in pinboooll?","id":50,"messages":[{"created_on":"2020-08-08T22:27:31Z","id":143,"is_team_message":false,"message_text":"The multiplier is for the bonus, not for the entire score.","ticket_id":50}],"status":"CLOSED","subject":"Scoring in pinboooll: multiplication","team_id":7,"team_name":"More Bush Smoked Whackers"},{"created_on":"2020-08-08T22:24:01Z","description":"We have 9398 points on the pinboool best scores but the scoreboard does not show us.  ","id":49,"messages":[{"created_on":"2020-08-08T22:30:53Z","id":144,"is_team_message":false,"message_text":"I dont see that in your pod. \nI can see two or three possibilities. One, you were playing multiple games in parallel and there was a race condition writing to the score file. 2. the pod got redeployed... I guess sometimes it happens and in that case you should resubmit your ball. 3 you did not complete the protocol correctly (e.g., fail to send a second ball in a multiball) and so the server exit without saving the score.","ticket_id":49},{"created_on":"2020-08-08T22:32:15Z","id":145,"is_team_message":true,"message_text":"nc 10.13.37.10 2003\n\n===============================================================================\n\n  --- Welcome to the Space Race Abstract Pinb(ooo)ll ---\n\n===============================================================================\n\n 1. Read the Rules\n 2. Check your team best scores\n 3. Unplug the pinball (delete *local* team scores)\n 4. Download pinball table setup\n 5. Play a new game\n\n2\n\n===============================================================================\n\n        Score          Name \n       9398        42414c4c \n       9398        42414c4c \n       9398        42414c4c \n       9398        42414c4c \n       5398                 \n\n===============================================================================\n\nDoes this not indicate that the score was saved?","ticket_id":49},{"created_on":"2020-08-08T22:39:41Z","id":146,"is_team_message":false,"message_text":"no.. that is your local ranking. You can reset that and it would not touch your score.","ticket_id":49},{"created_on":"2020-08-08T22:43:00Z","id":149,"is_team_message":true,"message_text":"Shouldn't the existence of this score indicate our scoreboard score is at least this value?","ticket_id":49},{"created_on":"2020-08-08T22:44:21Z","id":150,"is_team_message":false,"message_text":"It should.. as that one is written after the real score. But this one is more... fragile.\nStill, just reset that and resubmit the 9K ball\n","ticket_id":49},{"created_on":"2020-08-08T22:51:15Z","id":151,"is_team_message":true,"message_text":"How is it that we have 8373 on the scoreboard now, but that does not even appear within our local team best scores? Within the team best scores, I've re-triggered the 9398 ball, but that does not appear on the scoreboard.","ticket_id":49},{"created_on":"2020-08-08T22:51:49Z","id":153,"is_team_message":true,"message_text":"(To be clear, also having reset the local scores). Why does resetting local scores matter?","ticket_id":49},{"created_on":"2020-08-08T23:02:21Z","id":156,"is_team_message":false,"message_text":"Found the problem. Was due to a bug triggered when submitting a low-scoring ball after a ball with higher score and at least one jackpot\n","ticket_id":49}],"status":"CLOSED","subject":"Not showing up on the scoreboard for pinboool","team_id":10,"team_name":"PPP"},{"created_on":"2020-08-08T22:20:59Z","description":"we're getting 403 Forbiden for http requests to any gameboooy pcaps (all other services doing fine)\r\n\r\nexample:\r\n\r\nhttp://10.13.37.14/pcap/17/released/team_14_service_17_1596922004_release.pcap\r\n\r\nhttp://10.13.37.14/pcap/17/released/team_14_service_17_1596924368_release.pcap","id":48,"messages":[{"created_on":"2020-08-08T22:22:01Z","id":142,"is_team_message":true,"message_text":"update: this is fixed please close the issue","ticket_id":48}],"status":"CLOSED","subject":"403 forbidden on gameboooy pcaps","team_id":14,"team_name":"Shellphish"},{"created_on":"2020-08-08T22:20:38Z","description":"Trying to download PCAPs for Gameboooy returns 403 Forbidden.","id":47,"messages":[],"status":"CLOSED","subject":"Gameboooy PCAPs 403","team_id":6,"team_name":"mhackeroni"},{"created_on":"2020-08-08T22:19:52Z","description":"are permissions incorrect on gameboooy pcaps?","id":46,"messages":[],"status":"CLOSED","subject":"pcaps for gameboooy throwing 403","team_id":13,"team_name":"\u4f8d"},{"created_on":"2020-08-08T22:18:11Z","description":"Hi, we've got more than 30000 score since this shift start. but from the scroeboard since latest 2 round, it's still 5300+ at most. Is there any problem with the scoring system?","id":45,"messages":[{"created_on":"2020-08-08T22:20:50Z","id":141,"is_team_message":false,"message_text":"I see 94296 points in the json tick for you.\n","ticket_id":45}],"status":"CLOSED","subject":"pinboooll score wrong","team_id":1,"team_name":"A*0*E"},{"created_on":"2020-08-08T22:16:16Z","description":"It seems every gameboooy pcap are forbidden. Need help","id":44,"messages":[{"created_on":"2020-08-08T22:18:11Z","id":140,"is_team_message":false,"message_text":"looking into it","ticket_id":44}],"status":"CLOSED","subject":"cannot access gameboooy pcap.(403 Forbidden)","team_id":3,"team_name":"CyKor"},{"created_on":"2020-08-08T22:09:29Z","description":"Hello, we've managed to get all three multipliers (x2, x3, x5) and also the Roswell jackpot (4000pts) yet our score is only 5199 points for that round. We're not sure how the multipliers are being calculated.","id":43,"messages":[{"created_on":"2020-08-08T22:11:30Z","id":136,"is_team_message":false,"message_text":"The multiplier is for the bonus, not for the points.","ticket_id":43}],"status":"CLOSED","subject":"pinboool - bonus multipliers","team_id":10,"team_name":"PPP"},{"created_on":"2020-08-08T22:09:21Z","description":"Sorry for repeated question, but it seems like our score is not reflected again? We expect 6682 or 7402 points for last tick.","id":42,"messages":[{"created_on":"2020-08-08T22:11:07Z","id":135,"is_team_message":false,"message_text":"I saw your submission with 3 balls. Probably will be picked up at the end of the tick. Let's wait","ticket_id":42},{"created_on":"2020-08-08T22:13:27Z","id":138,"is_team_message":true,"message_text":"Now I see my score. Thank you.","ticket_id":42}],"status":"CLOSED","subject":"Regarding pinboool (3)","team_id":3,"team_name":"CyKor"},{"created_on":"2020-08-08T21:53:48Z","description":"Do we just submit a bunch of inputs separately, and extra balls mean we get not top-1, but top-N added up for that round?","id":41,"messages":[{"created_on":"2020-08-08T22:12:23Z","id":137,"is_team_message":false,"message_text":"Sorry.. I do not understand. Extra ball means you can submit another and points will sum up. Also, jackpots are saved across balls.","ticket_id":41},{"created_on":"2020-08-08T22:13:59Z","id":139,"is_team_message":true,"message_text":"Yup, that's what i meant :) thx!","ticket_id":41}],"status":"CLOSED","subject":"How to use the extra ballz?","team_id":7,"team_name":"More Bush Smoked Whackers"},{"created_on":"2020-08-08T12:59:52Z","description":"Is 10.13.37.17's rhg is vanilla and work properly? We can leak the auth token, but we cannot authenticate by that token.","id":40,"messages":[{"created_on":"2020-08-08T21:33:48Z","id":134,"is_team_message":false,"message_text":"yeah, that's expected. the game server only knows about 16 players, 17th is not invited to the party","ticket_id":40}],"status":"CLOSED","subject":"about 10.13.37.17's rhg","team_id":2,"team_name":"/bin/tw"},{"created_on":"2020-08-08T12:38:13Z","description":"Would it be possible to know our score? We see 3268 point in our local scoreboard.","id":39,"messages":[{"created_on":"2020-08-08T12:43:37Z","id":125,"is_team_message":false,"message_text":"The score file says 404","ticket_id":39},{"created_on":"2020-08-08T12:46:22Z","id":126,"is_team_message":true,"message_text":"I think that's not done by us?.. can you take a look? Thank you.","ticket_id":39},{"created_on":"2020-08-08T12:46:23Z","id":127,"is_team_message":false,"message_text":"it was 1428 in the previous tick\n","ticket_id":39},{"created_on":"2020-08-08T12:48:11Z","id":128,"is_team_message":false,"message_text":"it now says 3268","ticket_id":39},{"created_on":"2020-08-08T12:49:13Z","id":129,"is_team_message":true,"message_text":"Thank you!","ticket_id":39},{"created_on":"2020-08-08T12:50:10Z","id":130,"is_team_message":true,"message_text":"I cannot see it on the scoreboard. Will it be applied at the next round?","ticket_id":39},{"created_on":"2020-08-08T12:53:56Z","id":131,"is_team_message":false,"message_text":"the score is still there. I am waiting the end of the tick (still 1.5 min) to see if it gets picked up correctly\n","ticket_id":39},{"created_on":"2020-08-08T12:55:41Z","id":132,"is_team_message":true,"message_text":"Okay, I can see now. It's resolved, thanks!","ticket_id":39},{"created_on":"2020-08-08T12:56:28Z","id":133,"is_team_message":false,"message_text":"yup. All good. It's now in the json (not in yours as you get it later). You are now in first place","ticket_id":39}],"status":"CLOSED","subject":"Regarding pinboool (2)","team_id":3,"team_name":"CyKor"},{"created_on":"2020-08-08T12:25:07Z","description":"Where can we fetch other teams' patches?","id":38,"messages":[{"created_on":"2020-08-08T12:28:28Z","id":123,"is_team_message":false,"message_text":"This service does not have open patches.","ticket_id":38}],"status":"CLOSED","subject":"Patches for rhg","team_id":4,"team_name":"HITCON \u2694 Balsn"},{"created_on":"2020-08-08T11:48:38Z","description":"Hi we've got x2 bonus and x3 bonus on pinball, but the score does not get  multiplied :(\n\nCould you help clarify the rule? Is it intended? Thanks!","id":37,"messages":[{"created_on":"2020-08-08T12:07:08Z","id":119,"is_team_message":false,"message_text":"Found the issue. Investigating further.","ticket_id":37},{"created_on":"2020-08-08T12:17:31Z","id":120,"is_team_message":false,"message_text":"Can you try it now?","ticket_id":37},{"created_on":"2020-08-08T12:20:56Z","id":121,"is_team_message":true,"message_text":"Hi I got 2297 and see a line \"BONUS   x 5 = 1775\".  It looks like the bonus is multiplied by 6 instead of 5, is it intended?","ticket_id":37},{"created_on":"2020-08-08T12:23:11Z","id":122,"is_team_message":true,"message_text":"Will we get the points back for the period that the multipliers weren't working? Thanks.","ticket_id":37},{"created_on":"2020-08-08T12:29:41Z","id":124,"is_team_message":false,"message_text":"Enjoy the bonus on the multipliers :-)\r\n\r\nWe won't go back and recalculate; sorry about that.","ticket_id":37}],"status":"CLOSED","subject":"pinball score calculation","team_id":4,"team_name":"HITCON \u2694 Balsn"},{"created_on":"2020-08-08T11:36:29Z","description":"The rule says \"YELLOW [OK]: Once they are exploited, we will move them to yellow.\", but it's been sitting on GOOD since the beginning...","id":36,"messages":[{"created_on":"2020-08-08T11:38:06Z","id":114,"is_team_message":false,"message_text":"Oversight.","ticket_id":36},{"created_on":"2020-08-08T11:40:08Z","id":116,"is_team_message":true,"message_text":"Got it. Thanks!","ticket_id":36}],"status":"CLOSED","subject":"Why is RHG still in GOOD state?","team_id":10,"team_name":"PPP"},{"created_on":"2020-08-08T11:27:18Z","description":"Hi, could you please fix the figure shown in this site (https://scoreboard.ooo/exploits/) ? Currently, some information about Tea Deliverers team is missing. I can not click the button at the right side.","id":35,"messages":[{"created_on":"2020-08-08T11:29:10Z","id":110,"is_team_message":false,"message_text":"Looking into it.","ticket_id":35},{"created_on":"2020-08-08T11:30:27Z","id":111,"is_team_message":false,"message_text":"We're confused, can you zoom out?","ticket_id":35},{"created_on":"2020-08-08T11:33:24Z","id":112,"is_team_message":true,"message_text":"Yeah, I can. But I still can not click it.","ticket_id":35},{"created_on":"2020-08-08T11:35:03Z","id":113,"is_team_message":false,"message_text":"Also we don't understand, what are you trying to click on?","ticket_id":35},{"created_on":"2020-08-08T11:39:40Z","id":115,"is_team_message":true,"message_text":"Could I send you a screenshot? Maybe the figure can describe what I want to express.","ticket_id":35},{"created_on":"2020-08-08T11:48:36Z","id":117,"is_team_message":false,"message_text":"send it to [CTF] hacopo on Discord","ticket_id":35},{"created_on":"2020-08-08T11:54:35Z","id":118,"is_team_message":true,"message_text":"Thanks.","ticket_id":35}],"status":"CLOSED","subject":"Something can not be shown in https://scoreboard.ooo/exploits/","team_id":16,"team_name":"Tea Deliverers"},{"created_on":"2020-08-08T11:22:35Z","description":"We've got \"x2 bonus\" in our latest submission, which scores 1114pts. But if \"x2 bonus\" multiplies the total score,  it should be 2228 pts, shouldn't?\nWe are not sure if this behavior is an intended one or a bug","id":34,"messages":[{"created_on":"2020-08-08T11:25:17Z","id":109,"is_team_message":false,"message_text":"The points that it prints already contains the bonus.","ticket_id":34}],"status":"CLOSED","subject":"about pinboooll's x2 bonus","team_id":2,"team_name":"/bin/tw"},{"created_on":"2020-08-08T11:08:42Z","description":"I expect getting some score on this challenge (judging from local scoreboard from daemon), but it's not showed on https://scoreboard.ooo/stats_slideshow.html?nocacheplz .\nCan we check our score, or if the scoring bot is working correctly? Or.. perhaps it is delayed?","id":33,"messages":[{"created_on":"2020-08-08T11:12:14Z","id":108,"is_team_message":false,"message_text":"you are now at 1034 points, tie at 5th place.\nThe page only shows top 5 (if too many have the same scores the page cuts that)\n","ticket_id":33}],"status":"CLOSED","subject":"Regarding pinboool","team_id":3,"team_name":"CyKor"},{"created_on":"2020-08-08T10:06:31Z","description":"Hi, we sent a score of 1040 a few minutes ago but it doesn't show in the new tick. Our score does show when connecting via netcat, was it received?","id":32,"messages":[{"created_on":"2020-08-08T10:15:17Z","id":107,"is_team_message":false,"message_text":"Yes, we see the 1040. Keep in mind that the tick info in the json you get is delayed 30min","ticket_id":32}],"status":"CLOSED","subject":"pinbool score doesn't seem to update","team_id":6,"team_name":"mhackeroni"},{"created_on":"2020-08-08T09:56:34Z","description":"we noticed PPP has got more than 470 flags, but the status is still OK. It will shutdown when PPP gets 600 flags, right?","id":31,"messages":[{"created_on":"2020-08-08T09:57:24Z","id":104,"is_team_message":false,"message_text":"Yes","ticket_id":31},{"created_on":"2020-08-08T10:01:17Z","id":106,"is_team_message":true,"message_text":"ok. thanks!","ticket_id":31}],"status":"CLOSED","subject":"status of parallel-af","team_id":1,"team_name":"A*0*E"},{"created_on":"2020-08-08T09:03:29Z","description":"For rhg service, how can we get our team token without vulnerability?\nAnd  sometimes we use our own token login(team4), but we authed as team5 , is that bug?","id":30,"messages":[{"created_on":"2020-08-08T09:05:23Z","id":98,"is_team_message":false,"message_text":"looking into it","ticket_id":30},{"created_on":"2020-08-08T09:42:15Z","id":101,"is_team_message":false,"message_text":"so, on the team5 weirdness, can you try again? I'll leave the first question as an exercise to the reader.","ticket_id":30},{"created_on":"2020-08-08T09:53:11Z","id":103,"is_team_message":true,"message_text":"The first question is, if we don't have the off bye one vulnerability, how can we get our own token to login?","ticket_id":30},{"created_on":"2020-08-08T10:01:13Z","id":105,"is_team_message":false,"message_text":"I understand the first question :-) But sorry, other teams have figured it out, no hints!","ticket_id":30}],"status":"CLOSED","subject":"RHG issue","team_id":4,"team_name":"HITCON \u2694 Balsn"},{"created_on":"2020-08-08T08:48:13Z","description":"With the token on our gamebox, we are recognized as koreanbadass (player 5) in this game. (And it seems that other teams also have the same bug)","id":29,"messages":[{"created_on":"2020-08-08T08:58:13Z","id":96,"is_team_message":false,"message_text":"looking into it","ticket_id":29},{"created_on":"2020-08-08T09:05:14Z","id":97,"is_team_message":false,"message_text":"mmm, can you try again?","ticket_id":29},{"created_on":"2020-08-08T09:13:25Z","id":99,"is_team_message":true,"message_text":"we are still player 5 LOL","ticket_id":29},{"created_on":"2020-08-08T09:40:07Z","id":100,"is_team_message":false,"message_text":"can you try again? thx!","ticket_id":29},{"created_on":"2020-08-08T09:42:31Z","id":102,"is_team_message":true,"message_text":"It's ok now.","ticket_id":29}],"status":"CLOSED","subject":"Bugs in rhg","team_id":1,"team_name":"A*0*E"},{"created_on":"2020-08-08T08:11:19Z","description":"our fear has passed the SLA so many times, but i can't even fucking remember when it last updated!! IT PASSED BUT WHEN WE CHECK OUR SITE IT'S THE FUCKING SAME IT'S A FUCKING NIGHTMARE","id":28,"messages":[{"created_on":"2020-08-08T08:13:05Z","id":92,"is_team_message":false,"message_text":"We got to the bottom of it. Different failure cause, but service is about to go away due to max flags captured.","ticket_id":28}],"status":"CLOSED","subject":"Fear does not update in rorschach","team_id":5,"team_name":"koreanbadass"},{"created_on":"2020-08-08T07:59:37Z","description":"we checked the hand-1.json to hand-6.json, of round 111.. and found almost all teams change their name at some hand.  For example , it change from {\"name\":\"Player 11\",\"cards\":\"AK\",\"wager\":\"50\",\"bank\":\"225\",\"handResult\":\"4\",\"handNum\":\"5\",\"controller\":\"16 \",\"pid\":\"16\"}, to \r\n{\"name\":\"Player 13\",\"cards\":\"\",\"wager\":\"0\",\"bank\":\"150\",\"handResult\":\"0\",\"handNum\":\"6\",\"controller\":\"16 \",\"pid\":\"16\"}...   So I want to know how you rank each team in this case.","id":27,"messages":[{"created_on":"2020-08-08T08:03:55Z","id":88,"is_team_message":false,"message_text":"The service is working as intended.","ticket_id":27}],"status":"CLOSED","subject":"question for casinooo-life","team_id":1,"team_name":"A*0*E"},{"created_on":"2020-08-08T07:59:18Z","description":"It's happening again. I managed to pass team 5's fear locally but fail it remotely. Info may be slightly outdated as I last tested 10 minutes ago, but I still see fear failing on some teams that have the simple threshold patch.","id":26,"messages":[{"created_on":"2020-08-08T08:05:26Z","id":89,"is_team_message":false,"message_text":"Looking into this.","ticket_id":26},{"created_on":"2020-08-08T08:13:06Z","id":93,"is_team_message":false,"message_text":"We got to the bottom of it. Different failure cause, but service is about to go away due to max flags captured.","ticket_id":26}],"status":"CLOSED","subject":"fear failing remotely but not locally","team_id":13,"team_name":"\u4f8d"},{"created_on":"2020-08-08T07:55:32Z","description":"Hey guys sorry to keep bothering you on this service. We're not super sure you guys fixed the environment issue. With the same teams as before that had TF crash on /fear and get perfect patch, they redeployed the same patch, yet when we arrive with an adv example that passes all their tests (e.g., if we send it with `brave = on` we see correct targeted class w/ probability 1.0 and every histogram/black pixel amount/etc, you name it), we get NO NO NO again, just as before. While for a short while the same teams with that patch were exploitable, after your fix. Only briefly though. You sure it was fixed?","id":25,"messages":[{"created_on":"2020-08-08T07:59:08Z","id":87,"is_team_message":false,"message_text":"Looking into it.","ticket_id":25},{"created_on":"2020-08-08T08:13:06Z","id":94,"is_team_message":false,"message_text":"We got to the bottom of it. Different failure cause, but service is about to go away due to max flags captured.","ticket_id":25}],"status":"CLOSED","subject":"is rorschach really fixed now?","team_id":6,"team_name":"mhackeroni"},{"created_on":"2020-08-08T07:46:54Z","description":"Hey guys,\r\nno matter what we send you as a patch, you keep spitting the same hash of a very old patch of ours, and uploading that to the service. Also serving that via the web UI. Tested 2 times.","id":24,"messages":[{"created_on":"2020-08-08T07:47:35Z","id":77,"is_team_message":false,"message_text":"What's the patch ID?","ticket_id":24},{"created_on":"2020-08-08T07:49:27Z","id":79,"is_team_message":true,"message_text":"#244 and #219. Both should be the same file, and should be DIFFERENT from #203, yet same hash and same content is  served","ticket_id":24},{"created_on":"2020-08-08T07:49:39Z","id":80,"is_team_message":false,"message_text":"$ sha256sum service_6_team_6_patch_244\nf1125f2a0816dcc192b586bc8728ef19f03ef1a686d3b7fab3b11368e4e8b6cf  service_6_team_6_patch_244","ticket_id":24},{"created_on":"2020-08-08T07:53:26Z","id":83,"is_team_message":true,"message_text":"looks like either someone here or the cache didn't get too much sleep :-) ","ticket_id":24}],"status":"CLOSED","subject":"rorschach patches broken","team_id":6,"team_name":"mhackeroni"},{"created_on":"2020-08-08T07:36:10Z","description":"we're seeing the same issue on at least team 14","id":23,"messages":[{"created_on":"2020-08-08T07:37:46Z","id":72,"is_team_message":true,"message_text":"and several other teams.... seems like same thing as before......","ticket_id":23},{"created_on":"2020-08-08T07:44:06Z","id":74,"is_team_message":false,"message_text":"Hmm... The prior image you sent us works fine on team 14.","ticket_id":23},{"created_on":"2020-08-08T07:44:40Z","id":75,"is_team_message":true,"message_text":"wat the prior image was for team 7?","ticket_id":23},{"created_on":"2020-08-08T07:45:42Z","id":76,"is_team_message":true,"message_text":"we can provide more images that pass locally but fail remotely though? ","ticket_id":23},{"created_on":"2020-08-08T07:47:44Z","id":78,"is_team_message":false,"message_text":"Sure, send it over. That being said, the images I'm generating *are* working.","ticket_id":23},{"created_on":"2020-08-08T07:50:37Z","id":81,"is_team_message":true,"message_text":"ok, sent to zardus","ticket_id":23},{"created_on":"2020-08-08T07:53:23Z","id":82,"is_team_message":true,"message_text":"I have received no ACK of receipt of images","ticket_id":23},{"created_on":"2020-08-08T07:54:50Z","id":84,"is_team_message":false,"message_text":"Looks like it's working right at the moment. Can you confirm? We're still looking into the prior failure.","ticket_id":23},{"created_on":"2020-08-08T07:55:40Z","id":85,"is_team_message":true,"message_text":"no, still seems broken","ticket_id":23},{"created_on":"2020-08-08T07:56:16Z","id":86,"is_team_message":true,"message_text":"seemed like there was a brief blip where it worked (we scored against 14) but seems very broken in general still","ticket_id":23},{"created_on":"2020-08-08T08:05:54Z","id":90,"is_team_message":true,"message_text":"when a team changes their patch, we can hit them for a round or so? but then not after that... ","ticket_id":23},{"created_on":"2020-08-08T08:08:31Z","id":91,"is_team_message":true,"message_text":"broken for other teams as well like team 1. Pattern seems to be more random than just \"works after a patch\". It seems we have success more often than we used to (before the other ticket) but still only ~10% of the time or so?","ticket_id":23},{"created_on":"2020-08-08T08:13:09Z","id":95,"is_team_message":false,"message_text":"We got to the bottom of it. Different failure cause, but service is about to go away due to max flags captured.","ticket_id":23}],"status":"CLOSED","subject":"same rorschach issue on team 14","team_id":10,"team_name":"PPP"},{"created_on":"2020-08-08T07:15:42Z","description":"We find even files in dataset-sample originally provided cannot pass current filter. Looks like environment issues (newest tensorflow)","id":22,"messages":[{"created_on":"2020-08-08T07:18:06Z","id":69,"is_team_message":false,"message_text":"Look at announcements, new version of rorschach is available.","ticket_id":22}],"status":"CLOSED","subject":"rorschach filter issue","team_id":1,"team_name":"A*0*E"},{"created_on":"2020-08-08T07:02:31Z","description":"The binary is the same as before","id":21,"messages":[{"created_on":"2020-08-08T07:04:10Z","id":63,"is_team_message":false,"message_text":"The correct file is uploaded.","ticket_id":21}],"status":"CLOSED","subject":"heyhey, is the new parallel-af released?","team_id":14,"team_name":"Shellphish"},{"created_on":"2020-08-08T06:20:47Z","description":"I've noticed a couple inconsistencies in what the RHG client is sending and expecting and what the server is sending and expexting. For example the client is sending\r\n\r\n\"AUTH <token>\" but the server expects either \"AUTH<token>\" or just \"<token>\", and also after receving the token the server replies with \"Received 47 bytes\\n\" before \"AUTH:OK\\n<...>\" and the extra \"Received 47 bytes\\n\" is messing up the client logic. Is this expected behavior?","id":20,"messages":[{"created_on":"2020-08-08T06:30:49Z","id":53,"is_team_message":false,"message_text":"when you say 'client logic', you mean your client or RHG client? What is being messed up exactly? everything seems functional on our side but if you think this is a blocking issue, please share more details","ticket_id":20},{"created_on":"2020-08-08T06:33:36Z","id":55,"is_team_message":true,"message_text":"ah I think we were actually just misinterpreting what `10.13.37.13:4000` is, we expected it to be the server that rhg-client connects to, but now we think it's more like `nc <-> rhg-client <-> rhg-server`","ticket_id":20},{"created_on":"2020-08-08T07:02:02Z","id":62,"is_team_message":false,"message_text":"sounds good! closing this.","ticket_id":20}],"status":"CLOSED","subject":"RHG client bugged?","team_id":13,"team_name":"\u4f8d"},{"created_on":"2020-08-08T06:19:43Z","description":"we ran a copy of the fear patch by team 7 (et al) locally. When we test locally, we have no problem and we pass. When we run remotely, it says we fail.\r\n\r\nOur images match with probability \"1.0\".","id":19,"messages":[{"created_on":"2020-08-08T06:24:24Z","id":49,"is_team_message":false,"message_text":"Looking into it!","ticket_id":19},{"created_on":"2020-08-08T06:30:31Z","id":52,"is_team_message":false,"message_text":"What is the error message you're getting remotely?","ticket_id":19},{"created_on":"2020-08-08T06:31:24Z","id":54,"is_team_message":true,"message_text":"We get the \"NO\" messages, suggesting we fail the fear check. But even inside the docker you provide with the fear downloaded from them, we pass with the images we upload","ticket_id":19},{"created_on":"2020-08-08T06:48:58Z","id":59,"is_team_message":true,"message_text":"any updates on this? can we send you example images or something?","ticket_id":19},{"created_on":"2020-08-08T06:50:04Z","id":60,"is_team_message":false,"message_text":"Yes, please send Zardus#1337 an example image on discord.","ticket_id":19},{"created_on":"2020-08-08T07:17:58Z","id":68,"is_team_message":false,"message_text":"Thank you for your persistence. We found and fixed the issue!","ticket_id":19},{"created_on":"2020-08-08T07:23:01Z","id":71,"is_team_message":true,"message_text":"looking forward to the post mortem!","ticket_id":19}],"status":"CLOSED","subject":"rorschach fear behaves differently locally vs remote","team_id":10,"team_name":"PPP"},{"created_on":"2020-08-08T05:55:32Z","description":"I'm seeing lots of connections dropping on this challenge, e.g.\r\n\r\nrequests.exceptions.ConnectionError: ('Connection aborted.', RemoteDisconnected('Remote end closed connection without response'))","id":18,"messages":[{"created_on":"2020-08-08T05:59:00Z","id":45,"is_team_message":false,"message_text":"If you're having connection failures in rorschach, please note that the gunicorn config defines a single worker process for each endpoint. If you hit it heavily concurrently, you will have a bad time.","ticket_id":18},{"created_on":"2020-08-08T06:05:27Z","id":46,"is_team_message":true,"message_text":"I have offline cached solutions for every team, and make one request at a time to each team at this point. Those single connections are reliably dropping.","ticket_id":18},{"created_on":"2020-08-08T06:07:06Z","id":47,"is_team_message":false,"message_text":"What teams is this for?","ticket_id":18},{"created_on":"2020-08-08T06:24:37Z","id":50,"is_team_message":false,"message_text":"Ping. What are the teams you're connecting to?","ticket_id":18},{"created_on":"2020-08-08T06:27:03Z","id":51,"is_team_message":true,"message_text":"I'm connecting to every team. Failures from the last few minutes follow. This has been consistent for a while, I'm not sure if I've been landing much on team 8 at all due to this.\r\n\r\nteam failed 3\r\nteam failed 7\r\nteam failed 8\r\nteam failed 10\r\nteam failed 3\r\nteam failed 11\r\nteam failed 14","ticket_id":18},{"created_on":"2020-08-08T06:39:22Z","id":56,"is_team_message":false,"message_text":"Are you using the jump box? I am able to hit all of the endpoints you are hitting, without problems, from your network:\r\n\r\n$ seq 1 16 | parallel curl -s 10.13.37.{}:4045 | grep Ror | wc -l\r\n16\r\n\r\nThat's consistent over several runs.","ticket_id":18},{"created_on":"2020-08-08T06:41:16Z","id":57,"is_team_message":false,"message_text":"We're seeing an insane amount of connections (50 requests per second across the teams) from your team. Maybe someone else is hammering it?","ticket_id":18},{"created_on":"2020-08-08T06:43:00Z","id":58,"is_team_message":true,"message_text":"There are teams who don't even have a defense patch who aren't getting exploited. I'll look into whether another player is hammering it, but something definitely seems wrong on your network if none of the ~10 teams exploiting this can land a defenseless team.","ticket_id":18},{"created_on":"2020-08-08T06:51:51Z","id":61,"is_team_message":false,"message_text":"I'm only seeing one team without any patch at all, and they're being exploited by every team that's firing exploits. What team are you talking about?","ticket_id":18},{"created_on":"2020-08-08T07:05:59Z","id":64,"is_team_message":true,"message_text":"This isn't the team in question, but this is one that has been failing to land for a little bit. If I download team 8's fear script, and their current model, and run their fear against any of my images - they pass the fear check locally ($? == 0). But if I immediately submit one to the web interface with the same filename, it fails. Here are the images if you want to double check that it's actually an issue on my end.\r\n\r\nOne of my teammates is wondering if GPU resources are possibly being exhausted and causing fear failures for people who are doing inference in their fear script?\r\n\r\nHere are the images if you want to double check. Fear passes locally, not remotely. http://bochs.info/~aegis/team8.zip","ticket_id":18},{"created_on":"2020-08-08T07:09:23Z","id":65,"is_team_message":true,"message_text":"Compare tick 95 and 104 on https://scoreboard.ooo/exploits/ - many of the Rorschach patches have been around for a while, but far fewer exploits are landing now.","ticket_id":18},{"created_on":"2020-08-08T07:12:55Z","id":66,"is_team_message":false,"message_text":"We are looking into it.","ticket_id":18},{"created_on":"2020-08-08T07:13:09Z","id":67,"is_team_message":true,"message_text":"FWIW I generated my images to >0.9999 so I should also at face value pass the simple threshold test that everyone is doing.","ticket_id":18},{"created_on":"2020-08-08T07:18:09Z","id":70,"is_team_message":false,"message_text":"Man, thank you for your persistence. We found and fixed the issue!","ticket_id":18},{"created_on":"2020-08-08T07:43:53Z","id":73,"is_team_message":true,"message_text":"It's happening again. I pass team 5's fear locally right now, fail remotely.","ticket_id":18}],"status":"CLOSED","subject":"rorschach connections dropping","team_id":13,"team_name":"\u4f8d"},{"created_on":"2020-08-08T05:00:04Z","description":"Hi. For the latest patch we submitted, the status is SLA_TIMEOUT. What is this represents for? thanks.","id":17,"messages":[{"created_on":"2020-08-08T05:01:57Z","id":40,"is_team_message":false,"message_text":"What service?","ticket_id":17},{"created_on":"2020-08-08T05:16:53Z","id":41,"is_team_message":true,"message_text":"rorschach","ticket_id":17},{"created_on":"2020-08-08T05:17:24Z","id":42,"is_team_message":true,"message_text":"rorschach","ticket_id":17},{"created_on":"2020-08-08T05:18:14Z","id":43,"is_team_message":false,"message_text":"We are looking into it.","ticket_id":17},{"created_on":"2020-08-08T05:42:05Z","id":44,"is_team_message":false,"message_text":"looks like you have a working patch now. Did you speed itup?","ticket_id":17},{"created_on":"2020-08-08T06:08:11Z","id":48,"is_team_message":false,"message_text":"Closing. Please open a new ticket if you still have issues!","ticket_id":17}],"status":"CLOSED","subject":"Meaning for SLA_TIMEOUT","team_id":1,"team_name":"A*0*E"},{"created_on":"2020-08-08T04:53:35Z","description":"We have not changed any functionality but our patch fails SLA. Please advise.","id":16,"messages":[{"created_on":"2020-08-08T04:55:10Z","id":37,"is_team_message":false,"message_text":"Is it the exact same binary with no changes?","ticket_id":16},{"created_on":"2020-08-08T04:56:17Z","id":38,"is_team_message":true,"message_text":"Manchester is identical. OS has the identical computation structure.","ticket_id":16},{"created_on":"2020-08-08T05:00:24Z","id":39,"is_team_message":false,"message_text":"Patch fails SLA as intended.","ticket_id":16}],"status":"CLOSED","subject":"parallel-af patch","team_id":10,"team_name":"PPP"},{"created_on":"2020-08-07T19:58:23Z","description":"","id":15,"messages":[{"created_on":"2020-08-07T19:59:02Z","id":34,"is_team_message":false,"message_text":"?","ticket_id":15},{"created_on":"2020-08-07T19:59:03Z","id":35,"is_team_message":false,"message_text":"?","ticket_id":15},{"created_on":"2020-08-07T19:59:38Z","id":36,"is_team_message":false,"message_text":"?","ticket_id":15}],"status":"CLOSED","subject":"00064EC9FC0932AA637703B44D925144B19397EFE3D25194","team_id":3,"team_name":"CyKor"},{"created_on":"2020-08-07T18:56:55Z","description":"I can barely talk to team 7... my connections go exceedingly slow... other teams seem okay though","id":14,"messages":[{"created_on":"2020-08-07T18:57:49Z","id":26,"is_team_message":false,"message_text":"Looking into it.","ticket_id":14},{"created_on":"2020-08-07T19:00:11Z","id":27,"is_team_message":false,"message_text":"Seems very speedy to me, and it's definitely not a load or patch issue. Are you using our jump box?","ticket_id":14},{"created_on":"2020-08-07T19:01:12Z","id":28,"is_team_message":true,"message_text":"I am not; but I can hit all other teams okay with no speed issues. Will let you know if I can find anything on our end","ticket_id":14},{"created_on":"2020-08-07T19:01:34Z","id":29,"is_team_message":false,"message_text":"Sorry, still looking into it...","ticket_id":14},{"created_on":"2020-08-07T19:01:38Z","id":30,"is_team_message":false,"message_text":"Wait, hold on. I need more sleep.","ticket_id":14},{"created_on":"2020-08-07T19:03:14Z","id":31,"is_team_message":true,"message_text":"hmmm I think it works fine from another machine, so it might be a problem on our end? Not totally sure. Feel free to close I guess","ticket_id":14},{"created_on":"2020-08-07T19:04:08Z","id":32,"is_team_message":false,"message_text":"How about now?","ticket_id":14},{"created_on":"2020-08-07T19:06:16Z","id":33,"is_team_message":false,"message_text":"We looked into it, we reset the box, everything looks good.","ticket_id":14}],"status":"CLOSED","subject":"rorschach connection slow to team 7","team_id":10,"team_name":"PPP"},{"created_on":"2020-08-07T18:36:39Z","description":"The bot files are named *REDACTED.mc, and it looks like nothing has actually been removed from the file. Is that intended?","id":13,"messages":[{"created_on":"2020-08-07T18:39:58Z","id":24,"is_team_message":false,"message_text":"It's functioning as intended.","ticket_id":13},{"created_on":"2020-08-07T18:40:28Z","id":25,"is_team_message":true,"message_text":"Thx","ticket_id":13}],"status":"CLOSED","subject":"On the availability of others' casinooo bots","team_id":7,"team_name":"More Bush Smoked Whackers"},{"created_on":"2020-08-07T17:49:13Z","description":"Will you finish all the problems that are currently appeared in this round?","id":12,"messages":[{"created_on":"2020-08-07T17:53:04Z","id":23,"is_team_message":false,"message_text":"Please see the game rules regarding service retirement:\nhttps://oooverflow.io/dc-ctf-2020-finals/\n\nAny other announcements about service retirement will be made during the captain's meeting.","ticket_id":12}],"status":"CLOSED","subject":"About the lifetime of problems","team_id":2,"team_name":"/bin/tw"},{"created_on":"2020-08-07T16:41:17Z","description":"cute overload","id":11,"messages":[{"created_on":"2020-08-07T16:42:16Z","id":21,"is_team_message":false,"message_text":"no u","ticket_id":11},{"created_on":"2020-08-07T16:43:20Z","id":22,"is_team_message":false,"message_text":"https://www.defcon.org/html/links/dc-code-of-conduct.html","ticket_id":11}],"status":"CLOSED","subject":"you're cute","team_id":14,"team_name":"Shellphish"},{"created_on":"2020-08-07T15:54:51Z","description":"Is it stuck in SUBMITTED? What does that mean?","id":10,"messages":[{"created_on":"2020-08-07T15:59:22Z","id":19,"is_team_message":false,"message_text":"We see that the status changed, have you?","ticket_id":10},{"created_on":"2020-08-07T16:05:44Z","id":20,"is_team_message":false,"message_text":"I see that the status has changed, please look at your team interface.","ticket_id":10}],"status":"CLOSED","subject":"What happend to patch #13?","team_id":4,"team_name":"HITCON \u2694 Balsn"},{"created_on":"2020-08-07T15:54:44Z","description":"Super minor, but in the web UI you guys ask for 122x122 images, while the challenge wants 112x112 instead. Just to let you know :-D","id":9,"messages":[{"created_on":"2020-08-07T15:55:39Z","id":18,"is_team_message":false,"message_text":"Gah, thanks for the heads up!","ticket_id":9}],"status":"CLOSED","subject":"Typo in rorschach web UI","team_id":6,"team_name":"mhackeroni"},{"created_on":"2020-08-07T15:37:19Z","description":"Hi, we just noticed all KoH scores on https://scoreboard.ooo/scores.html dropped heavily for all teams (nearly 40% for us). Is the scoreboard works fine?","id":8,"messages":[{"created_on":"2020-08-07T15:40:16Z","id":17,"is_team_message":false,"message_text":"Yes. casinooo-life had a bug in the first ~10 ticks that resulted in erroneous score events. We cleared out those score events, but there was cached data that we found and cleared a few minutes ago, hence the recent changes. All of the scoring events are now correct!","ticket_id":8}],"status":"CLOSED","subject":"Public scoreboard questions","team_id":1,"team_name":"A*0*E"},{"created_on":"2020-08-07T14:45:22Z","description":"","id":7,"messages":[{"created_on":"2020-08-07T14:46:39Z","id":13,"is_team_message":false,"message_text":"What does the flag look like?","ticket_id":7},{"created_on":"2020-08-07T14:48:45Z","id":14,"is_team_message":true,"message_text":"No idea :) just asking for later","ticket_id":7},{"created_on":"2020-08-07T14:49:45Z","id":15,"is_team_message":false,"message_text":"No flags on NPC.","ticket_id":7}],"status":"CLOSED","subject":"Are NPC flags worth points?","team_id":7,"team_name":"More Bush Smoked Whackers"},{"created_on":"2020-08-07T13:30:32Z","description":"Hey guys, we're trying to upload new controllers for Casinooo. We can upload, and the server returns \"Upload saved\", but the current hash never changes from the sha256 of an empty file. Is our file invalid and just rejected w/o spitting errors, or something not working? Thanks","id":6,"messages":[{"created_on":"2020-08-07T13:31:20Z","id":11,"is_team_message":false,"message_text":"Looking into it, thanks.","ticket_id":6},{"created_on":"2020-08-07T13:43:02Z","id":12,"is_team_message":false,"message_text":"Your patch is being used in the game, we're looking into why the hash isn't updating in the UI.","ticket_id":6},{"created_on":"2020-08-07T15:03:16Z","id":16,"is_team_message":false,"message_text":"The UI should now be updating.","ticket_id":6}],"status":"CLOSED","subject":"Uploading new controller to Casinooo","team_id":6,"team_name":"mhackeroni"},{"created_on":"2020-08-07T13:18:04Z","description":"We're not seeing new PCAPs at times we would expect them.  (For example, we don't have PCAPs for 13:06, 13:09, 13:12, or 13:15 GMT.)  Is this because there was no non-stealth traffic to our instance during the associated time range, or is something going wrong here?","id":5,"messages":[{"created_on":"2020-08-07T13:19:35Z","id":9,"is_team_message":false,"message_text":"We are investigating and will let you know.","ticket_id":5},{"created_on":"2020-08-07T13:20:31Z","id":10,"is_team_message":false,"message_text":"You only get pcaps if there is non-stealth traffic to your service during that time interval.","ticket_id":5}],"status":"CLOSED","subject":"Missing PCAPs?","team_id":10,"team_name":"PPP"},{"created_on":"2020-08-07T12:21:40Z","description":"https://scoreboard.ooo/templates/channels/aflike/srv8.html - Looks like there's a challenge called gameboooy and another called nooopster; Should this be public?","id":4,"messages":[{"created_on":"2020-08-07T12:25:03Z","id":6,"is_team_message":false,"message_text":"Thanks for the heads up. Investigating.","ticket_id":4},{"created_on":"2020-08-07T12:33:25Z","id":7,"is_team_message":false,"message_text":"Good catch. As a sanity check, is nooopster and gameboooy all you noticed?","ticket_id":4},{"created_on":"2020-08-07T12:36:15Z","id":8,"is_team_message":true,"message_text":"Yep\r\n","ticket_id":4}],"status":"CLOSED","subject":"New chals?","team_id":12,"team_name":"RPISEC"},{"created_on":"2020-08-07T11:57:03Z","description":"E.g. patching out all free()s to get rid of UAF, as long as the service remains functional","id":3,"messages":[{"created_on":"2020-08-07T11:59:03Z","id":4,"is_team_message":false,"message_text":"It's permitted, but if for some reason it interferes with the game play we would ask you to remove it.","ticket_id":3},{"created_on":"2020-08-07T12:00:23Z","id":5,"is_team_message":true,"message_text":"Does game play include permitting other teams stealing our flag? :)","ticket_id":3}],"status":"CLOSED","subject":"How much is generic defense frowned upon?","team_id":7,"team_name":"More Bush Smoked Whackers"},{"created_on":"2020-08-07T11:54:36Z","description":"<hr>hello<h1>xss</h1>","id":2,"messages":[{"created_on":"2020-08-07T11:55:14Z","id":2,"is_team_message":true,"message_text":"{{7*'7'}}","ticket_id":2},{"created_on":"2020-08-07T11:55:25Z","id":3,"is_team_message":false,"message_text":"come on","ticket_id":2}],"status":"CLOSED","subject":"<hr>hello<h1>xss</h1>","team_id":7,"team_name":"More Bush Smoked Whackers"},{"created_on":"2020-08-07T11:50:22Z","description":"can someone ask crowell where the pcaps are @","id":1,"messages":[{"created_on":"2020-08-07T11:52:48Z","id":1,"is_team_message":false,"message_text":"no, he's basically incapable of reading.","ticket_id":1}],"status":"CLOSED","subject":"Subject","team_id":12,"team_name":"RPISEC"}]}