[–] [S] 2 points 2 months ago

Great point, haven't thought of that.. I'll see if either, this is a good enough vulnerability for this level of task, or I'll try setting a ulimit, as at least according to wikipedia, that is a good enough prevention against a simple fork bomb. Thank you very much!

  • source
  • parent
  • context
  • [–] [S] 1 point 2 months ago (2 children)

    Could it be considered an exploit/vulnerability tho? And if it would, would you say the difficulty of finding it being enabled could be hard enough for the audience I am creating it for?

  • source
  • parent
  • context
  •  

    Hi everyone! I was tasked to create few challenges for a CTF at my university as part of my bachelor thesis. The last challenge I should create is essentially about crashing a system, while another "monitoring" system is detecting if the other one is running, and if not it gives you a flag. The tasks are meant for 4th year high-school students, so nothing insane, but this one still should be at an "extreme" difficulty in regard to the experience high-school students could have.

    Issue is, I have no prior experience in such exploitation, and I don't necessarily know where to start with this one. My idea was creating a custom vulnerable module/driver in the linux kernel, that the players would be tasked to somehow exploit (some kind of overflow I guess, so that it would trigger kernel panic). I suppose it could be something similar to this: https://nofilqasim.info/Making%20a%20Kernel%20CTF%20%28PUCon%2724%20pwn%20CTF%29/ , except I believe the author of this CTF made it as a privilege escalation task, which is not exactly what I desire.

    I was wondering if anyone could give me some pointers or ideas on where to start with this, and if what I have described above might be too difficult for the students to exploit, and consequently for me to implement.

    Thank you for any answers!

    [–] [S] 1 point 2 months ago

    Just little update to what I've decided (at least for now).. I have to agree with some of you saying that specializing in this specific subfield is not totally optimal, and have just decided to research it in my own time, purely out of curiosity. Also, one of the bigger reason for me even being on Lemmy, and being more privacy conscious is my increasing frustration with this technology (together with Google, Microsoft, the obvious ones). So, instead of pursuing a degree in a bubble as one of you said, I'd just rather learn about it on my own, together with contributing and interacting more with Lemmy, Fediverse, FOSS communities and similar. Thank you for your answers everyone!

  • source
  • Research in AI (lemmy.zip)
     

    I've been very fed up with AI for about past 6 months, completely started to boycott it, discuss it with people of all kinds of different views, and I found joy and pride once again in my own work.

    But the world issues coming from AI, and even more so from the billionaires and empires behind it seem to further pile up to insane heights. I've been trying to learn more and more about it, and after my bachelor and masters I am considering pursuing phd and research surrounding AI, especially from the critical perspective, which seems to be deeply neglected in the research pov.

    This is still a few years in the future, and lot could change, but I am curious what do people here think about pursuing such a thing, and if in current academic world it is even something that would be possible doing, given lot of the grants and funding of AI research comes from these companies that just want to gain even more power through it.

    As I said, I am already trying to know as much as possible about it, but I would like to look more deeply into its impact on society, impact on students etc.

    Do you think this would be a worthwile endevaour? And if not, where do you think I should be heading to make change about this while not completely starving to death?

    view more: next ›