I seem to have completely missed the "failing" when writing "this is GitHub failing to deliver tools". My bad
1,405 karma · joined December 15, 2022
This year, multiple groups on the top of the leaderboard were clearly abusing LLMs. You can tell because they know nothing of what a CTF is nor the terminology, nor really the fields the challenges were about when they were talked to. They were obviously amateurs.
It was pretty depressing to hear how unaware they were of how obviously they did not fit in to the type that usually is on the top of the leaderboard. It seems they seriously think they were under the radar. If it was one group it could be a freak incident - some times someone just shows up and curbstomps competition. But there were many groups like this this year. They also had a certain smugness to it - one staff reported that a group was hinting to other teams about their "super weapon". Another group credited their "secret third team member they didn't want to talk about".
I use LLM frequently and experiment with it a lot, both at work and on my free time. Nowadays they are good enough to have value and I am interested in learning more about that. They let me spend more time on hard problems and avoid spending the day on simple CRUD. I say this to say that LLM doesnt have to equal bad, it is a tool, that's all. However, I generally avoid LLM communities because many LLM fans are lazy and unskilled people who are just happy they can feel they are worth something even if they have no skill. They don't really have much to provide of conversation. If anything, from reading the CTF crowd this year, the rise of LLMs has just meant more of these people can stomp on and harvest the CTF scene for self validation.
This is not me trying to gatekeep who can play CTF. Anyone is welcome, but there is one condition: You are here to learn and have fun.
The conclusion many I talk to has come to is that nowadays, it is harder to learn to put in hard work and become good at something because there are just too many ways to cheat and take shortcuts. I suspect in the future there will be a shortage of useful people - the kind that have critical thought and know the value of doing something properly. This doesn't mean "Not using LLM", but as said by many on HN before you need a certain seniority before LLMs are useful augmentations to your skills and not just stopping you from learning yourself.
I agree with the article. Anything but physical competitions with strong security - think professional e-sports with organizer-provided PCs, is over. But I think one of the most interesting things to take away from my CTF experience is that the bottom of the leaderboard was still full of amateurs slowly working their way up - it is a few rotten apples that ruin the fun for most, and there are still plenty of people who want to learn and deep-dive.
Japan has it's own card companies, and payment systems. Recently, some train lines have started adding support for Visa, but trust me that if you use it in rush hour you will be considered a knob head by everyone behind you as contactless is much slower than the native cards and can't keep up with a fast walking pace. Of course part of the problem here is Sony being greedy and making the international adoption of Felicia hard, but it's complicated.
The cards are most useful for tourists, and the best argument to introduce cards is international compatability. But international interop doesn't have to look like this, it's just how the playing field ended up looking.
Last, Visa and MasterCard are both known for being strict on what goods and services they are happy accepting, and it's not ok that so much power is consolidated in two entities in one country.
I'm not an expert on payment systems, but when I see the large scale advertisements Visa especially are pulling off in Tokyo I see a foreign company trying to disrupt and gain market share while not really benefiting locals who do have mostly moved beyond the need for card payment. I.e my reaction isn't "yay, finally Visa is here too save me" it's "oh no, how will they disrupt and destroy"
I tried Kimi 2.6 and it's almost comparable to Opus. Anthropic lost the ball. I hope this is a sign the we are moving towards a future where model usage is a commodity with heavy competition on price/performance
Then there's the question of trust. You probably have friends you know not to tell certain secrets to, because they believe they get to delegate your secrets onwards to people they trust. The further away someone is from you, the less respect they will show. Researchers have been loaning the dataset in good faith to people who they trust, but who probably didn't take the whole secrecy thing as seriously.
With 20k researchers this was inevitable. The kind of factors above need to be factored in when designing on what grounds such a dataset is to be released.
Sure, at least the developer can say they did say so, but it doesn't matter. To me it seems more like avoiding responsibility. You published the tool, and by doing so you changed the world, even minutely, and in ways you cannot predict.
As hackers we bear the responsibility of tools we publish. Even if you believe knowledge is the most important and that everything _should_ be published, we should at least be well aware of the consequences. Great power, great responsibility.
I did ruin the water protection on mine pretty quickly though, because the back panel was made of plastic and was... flimsy. It basically became a fidget toy.
When thinking of how flagship phone producers are going to keep making sexy phones that also keep their watertightness, my biggest worry is repeated stress from any removable component becoming a fidget toy
The 45 seconds is better thought of as the time it takes for the quake to propagate to Tokyo