Pwn.college

(pwn.college)

243 points by tripdout12 hours ago

14 comments

  • rschachte2 hours ago
    I was doing this on the side for fun and learned a lot.<p>I believe the professors that helped originate this idea were a group of hacker PhD students from UC Santa Barbara that moved over to Arizona State. Adam Doupe was my professor his first year and an absolutely stellar academic and teacher.
    • adamdoupe1 hour ago
      Wow thank you for the kind words!<p>Yep I think this list is pretty up to date on the folks involved: <a href="https:&#x2F;&#x2F;pwn.college&#x2F;sensei" rel="nofollow">https:&#x2F;&#x2F;pwn.college&#x2F;sensei</a><p>And you’re right very good memory! Zardus and I were first PhD students at UCSB then became professors at ASU, and at ASU kanak’s PhD dissertation was on pwn.college
  • xavdid7 hours ago
    Not sure if the devs are here, but please don&#x27;t justify your text! It makes the lines all have huge spaces in the middle. It&#x27;s much harder to read as a result.
    • adamdoupe1 hour ago
      Man I said this years ago and was overruled. Many your comment will help convince them!
    • Groxx6 hours ago
      Honestly I&#x27;ve just set up a user CSS sheet that forces left justify. It makes the internet more comfortable, and has practically no downsides &#x2F; bad interactions, unlike many such overrides.
      • mnkyokyfrnd3 hours ago
        rivers, contextual word splits, compound noun splits, awkward pauses, there is so many downsides to mindless text justification. Only editorialised and hand crafted justified text is nice. Everything else ends up forceful and ugly.
        • cubefox2 hours ago
          Strange that online it fell out of favor, because text justification was the default for centuries. It&#x27;s still around in most PDFs though, e.g. in research papers.
          • Georgelemental1 hour ago
            When there was a person physically typesetting every line, the justification wasn&#x27;t generally &quot;mindless&quot;
            • cubefox47 minutes ago
              I suspect the print typesetting has largely been automatized for several decades.
    • cubefox2 hours ago
      The text justification would look a lot better with CSS &quot;hyphens: auto&quot;.
    • behringer4 hours ago
      Don&#x27;t listen to this. Justified text is much much easier to read.
      • kccqzy2 hours ago
        When done properly (i.e. in LaTeX with microtype, with good line breaking algorithm and character expansion) justified text is easier to read. The web is not that.
  • solyin7 hours ago
    Why so deferential about posting write-ups? I&#x27;d just have a rule that says don&#x27;t post write-ups and posting a write-up will get you banned from future editions or something.
    • anilgulecha6 hours ago
      Because giving a good reason is usually enough for most people to follow something. Not everything has to be a stick (which you can wield anyway).
      • torben-friis5 hours ago
        Almost any kind of reason actually.<p>It&#x27;s a science-backed result that doing so massively improves compliance, it&#x27;s a trick usually taught in soft skills training (negotiation, etc).
        • petesergeant5 hours ago
          &quot;The Mindlessness of Ostensibly Thoughtful Action: The Role of “Placebic” Information in Interpersonal Interaction.&quot; <a href="https:&#x2F;&#x2F;psycnet.apa.org&#x2F;record&#x2F;1979-23568-001" rel="nofollow">https:&#x2F;&#x2F;psycnet.apa.org&#x2F;record&#x2F;1979-23568-001</a><p>I first read this in Robert Cialdini&#x27;s &quot;Influence: Science and Practice&quot; which is both entertaining and interesting: <a href="https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;Influence:_Science_and_Practice" rel="nofollow">https:&#x2F;&#x2F;en.wikipedia.org&#x2F;wiki&#x2F;Influence:_Science_and_Practic...</a>
    • saagarjha3 hours ago
      Because in almost every other case that involves security challenges you are generally encouraged to post a writeup, and this one is different.
  • bitforger10 hours ago
    reminds me of high school trying to beat hackthissite.org, OverTheWire, SmashTheStack<p>simpler times
    • adamdoupe9 hours ago
      Used to use OverTheWire as assignments in class, it was a big inspiration for pwn.college
    • deaton37 minutes ago
      I was gonna say, at a glance it reminds me of Microcorruption CTF
  • knightzone7 hours ago
    We had this as a part of our reverse engineering and exploitation minor, amazing experience.
  • MisterMunchkin8 hours ago
    It looks very comprehensive, and I love the fact that they will actually send you a belt if you do all the levels.
    • enjoytheview3 hours ago
      It is very comprehensive, and the classes are amazing. I really miss having time to watch the 2h classes and do the challenges.<p>pwn.college is the most fun I&#x27;ve had in cybersecurity probably ever. The community in discord is also very friendly and helpful.
  • cantalopes9 hours ago
    Very cool project, reminds me of days playing with owasp webgoat
  • ozozozd10 hours ago
    Hugged to death.
    • Sn0wCoder10 hours ago
      The site is still up try a deeper link <a href="https:&#x2F;&#x2F;pwn.college&#x2F;welcome&#x2F;welcome&#x2F;" rel="nofollow">https:&#x2F;&#x2F;pwn.college&#x2F;welcome&#x2F;welcome&#x2F;</a>
  • hollowonepl7 hours ago
    yes, I know it for years, play with it when I have time. really cool.<p>this and telehack.com is nice entertainment
  • enahs-sf9 hours ago
    Cool idea.
  • anonym293 hours ago
    Neat concept, but utterly disgusting that Discord is still used as a social platform. Matrix is much less odious.
    • wffurr2 hours ago
      What&#x27;s wrong with Discord?
      • thedellmonitor2 hours ago
        Discord is the ultimate gatekeeper of information these days, and the company behind it cannot be trusted with its user data.
      • anonym2941 minutes ago
        Besides being a centralized, proprietary data harvesting operation that has slowly started selectively enforcing mandatory identity verification requirements, despite their previous identity verification provider already getting hacked and leaking 70,000 people&#x27;s PII?<p>Nothing says &quot;hacker culture&quot; like voluntarily submitting your photo ID and a real-time facial scan to big brother so your de-anonymized communications can be permanently logged and used against you by the state as soon as a future administration decides you&#x27;re a disfavored person.
  • nicechianti10 hours ago
    [dead]
  • learningmore11 hours ago
    “ You have entered the pwn.college DOJO, an education platform for learners to develop and practice core cybersecurity skills in a hands-on fashion. Entering, you receive your &quot;white belt&quot; , signifying the beginning of your hacker life.”
  • Vaushite11 hours ago
    And yet, the highest scores on the scoreboard are 10, which happens to be the score you get by completing the tutorials for using pwn.college.
    • unsnap_biceps10 hours ago
      each module has it&#x27;s own scoreboard, so yes, the scoreboard for the tutorial module maxes out at the maximum score for the tutorial module.
      • anonymous9082138 hours ago
        &gt; the scoreboard for the tutorial module maxes out at the maximum score for the tutorial module<p>This is not a very hacker-like mindset!
        • unsnap_biceps7 hours ago
          I would claim that if you can set a higher score, my statement would still stand, as you have modified the maximum limit!
        • schoen7 hours ago
          &quot;The first rule of tautology club is hack the planet&quot;?
    • tropicalhunter3 hours ago
      It&#x27;s maybe should be called something else if this is the case, but don&#x27;t they show the latest &quot;high scores&quot; or complete finishes of the latest users to complete the module? Might not be high score or at least overall, but do remember noticing that yet seeing my username when I went through this a little while back so felt like more of a misnomer rather than an oversight.