Hacker News new | ask | show | jobs
by noproto 1847 days ago
Yea, sure. It's a server provided for security researchers. The challenge is to run any program we haven't allowed from the root shell. It's been defeated and patched 3 times over the past 2 years. You can get the list of allowed programs by running `whitebeam --list whitelist | grep Executable`. The details (and bounties) are listed here: https://github.com/WhiteBeamSec/WhiteBeam/blob/master/SECURI...

Unlike the challenge system, we also run some honeypots that record attempts. That way it's easy for both whitehats and blackhats to contribute to the overall QA testing.
1 comments
tyingq 1847 days ago
Looks like it got popular, played around a bit, then it crashed.
link
noproto 1847 days ago
No worries. I brought it back, DNS propagation just finished. Someone may have killed init or the like, which the software allows root to do. After all, why stop hackers from removing their own access and alerting the NOC team? :)

To whomever murdered init in cold blood: the challenge server is for trying to bypass the security software. If there are too many attempts to simply bring it offline I'll have to keep it powered off for a bit.

link