1

I'm wondering –considering GRCon'21 has another Capture The Flag challenge– whether such signal-centric problems, which typically also involve a more "classical" infosec problems but do need contestants to apply their investigative mind to signal processing / SIGINT problems are subject of this SE site, too.

AFAIK CtF questions are basically only admissible if the asker doesn't ask us to solve the flag for them, and I don't know where exactly you'd want to draw the line on advising people that might have more of a signal processing background on infosec approaches.

2

If it is legitimately about security and the specific CTF challenge instance isn't an arbitrary technology "just to be challenging", then I don't see why not.

3
  • That's the thing, though: The contestants aren't mainly breaking security of a system; that might be part of the things they do. But the weight of the flags usually is (and I say "usually", because I'm actively not involved in the flag-generation) is gathering information from signals that don't give that away easily. It is information security in the literal sense of the word. It's only partially about computer systems, i.e. only partially about information security in the narrower sense. Sep 16 at 19:46
  • The site covers more than digital security. We cover information on paper and we've entertained several physical security questions. So, just being non-digital isn't a problem. However, if the question becomes solely about this CTF and has no applicability to security outside of this CTF, then it becomes "too localised" (an old close reason).
    – schroeder Mod
    Sep 16 at 20:10
  • yeah, I think that's more than fair. Thanks! Sep 16 at 20:10

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .