Thank you for your interest in the picoCTF 2020 competition (“picoCTF 2020” or the “Competition”) organized by Carnegie Mellon University (“CMU”).
IF YOU ARE A TEACHER THAT FACILITATES A REGISTRATION ON BEHALF OF A MINOR STUDENT, YOU REPRESENT THAT YOU HAVE CONSENT FROM SUCH CHILD USER’S PARENT OR LEGAL GUARDIAN FOR YOU TO CREATE A PICOCTF ACCOUNT AND TO PARTICIPATE IN THE COMPETITION CHALLENGES UNDER THESE COMPETITION RULES, INCLUDING THE RIGHT FOR YOU TO PROVIDE THE INFORMATION NECESSARY TO CREATE AN ACCOUNT FOR SUCH STUDENT.
What is picoCTF ?
picoCTF is a computer security game targeted at middle and high school students. The game consists of a series of challenges centered around a unique storyline where participants must reverse engineer, break, hack, decrypt, or do whatever it takes to solve the challenge. The challenges are all set up with the intent of being hacked, making it an excellent, legal way to get hands-on experience.
What is the 2020 Competition? When does it start/end?
The Competition involves trying to solve a designated number of problems within a period of 723 hours. The Competition begins on 1 October 2020 at 12:00pm Eastern Daylight Time and continues until 30 October 2020 at 3:00pm Eastern Daylight Time (the “Competition Period”).
Who is eligible to participate in the Competition?
Each individual who participates in the Competition (“Participant”) must:
be at least 13 years old;
if under 18, have the consent of their parent or legal guardian to participate;
- Note: in order to create a picoCTF account, you will need to provide certain information to register, which may include but not limited to a username, an email address, your country of residence and your status (e.g., middle/high school student, teacher, etc), and information about your school (if applicable). In addition, you may choose to provide certain optional information (including but not limited to your gender or racial/ethnic identity). If you are under 18, a parent or legal guardian must provide their email address as part of your account registration to indicate their consent to your account registration, unless you have a student account created by a teacher through a teacher batch registration.
How do I participate in the Competition?
To participate, you must have created a picoCTF account before or during the Competition Period and work on the Competition challenges during some and/or all of the Competition Period.
You do not have to enter the Competition by the first day of the Competition Period. However, the later you enter, the less time you have to work on the challenges during the Competition Period.
NOTE- NOT EVERY PARTICIPANT IN THE COMPETITION IS ELIGIBLE TO WIN PRIZES. PLEASE SEE DETAILS BELOW.
Collection/Use of Your Information.
How are the winners determined?
The participant that solves the most problems within the allotted time will be the winner. If more than one participant solves all of the problems, then the participant that solved the problems in the shortest amount of time will be the winner. As described in more detail below, winners (including any tie-breakers, questions about eligibility, etc.) are determined by CMU in its sole discretion.
What are the other rules and terms for picoCTF 2020?
CMU may display one or more Competition leaderboards and/or scoreboards. These boards may be available to other Participants and/or the public, and may show the Participant’s username name, the country of residence and/or school identified by the Participant, and/or the name of the School identified by the Participant.
While there are no limitations on the resources or tools that Participants can use, only the eligible Participants may solve challenges as part of the Competition. Advisors, may help facilitate the Participant's work, such as by helping set up tools or providing resources, but may not provide direct assistance on any problems.
Participants may not interfere with the progress of other Participants, nor with the operation of the Competition's infrastructure. More specifically, attacking the scoring server, other Participants, or machines not explicitly designated as targets is cheating. This includes both breaking into such machines, and denying others access to them or the ability to solve problems (for example, by altering a key or ping-flooding). Sharing keys or providing overly-revealing hints with other Participants is cheating, as is being directly assisted by personnel outside the Team (using tools from the internet is OK; asking people on the internet to help solve the problem is not). We encourage Participants to solve problems in novel and creative ways using all available resources, but we do require that Participants solve the problems themselves.
Answers to problems may not be publicly posted or otherwise shared with anyone outside of your Team members until after the Competition is over.
All information provided to establish an account must be true and correct. You are responsible for keeping such information up-to-date. Failure to keep your account up-to-date may, among other things, jeopardize your eligibility for prizes.
You are solely responsible for keeping your account names and passwords confidential. You are responsible for activity that takes place under your account (including but not limited to activity that may affect your eligibility for prizes). If you believe that your account (or an account you have created on behalf of your child or a student) has been or may be compromised, you must notify CMU by contacting firstname.lastname@example.org as soon as possible.
You understand that your School may be informed about your participation in picoCTF and/or may be asked to verify your enrollment in order to verify your eligibility to receive prizes. To the extent your School cannot legally release such information about you without your consent and you do not provide such consent, you agree that you may be ineligible for certain prizes if CMU cannot verify your eligibility.
CMU will determine participation eligibility, declare winners (including but not limited to in the event of a tie), and award prizes in its sole and absolute discretion. You agree that such decisions are final and are not subject to review or reconsideration, and that Participants are not entitled to be informed of other Participants’ results.
Winning Participants may be asked to produce written solutions for several challenges before receiving prizes. Winning Participants will need an adviser or faculty member at their School to serve as a point of contact.
Any prizes awarded are non-transferable, and any non-cash prizes are not exchangeable for cash. CMU’s ability to offer any and all prizes is subject to applicable laws and regulations.
Competition problems or other content on the picoCTF site remains the property of CMU (and/or its content providers). CMU and its relevant content providers reserve any and all of their respective rights in such materials. You are authorized to access and use such materials solely with respect to registration for and/or participation in picoCTF 2020 by you (or on behalf of your child or a student, where applicable). You may not use the picoCTF 2020 site or any materials on it (including but not limited to the Competition problems) for any unauthorized purpose.
To the maximum extent permitted under applicable law, you agree to indemnify and hold harmless CMU and PicoCTF Parties from and against any and all claims, suits, actions, losses, expenses, damages, penalties, and costs, including reasonable attorneys’ fees resulting from any actual or alleged violation of these Competition Rules by you and/or your participation in the Competition.
These Competition Rules shall be enforceable to the maximum extent permitted under applicable law. If any portion of this these Competition Rules is determined by any court or governmental agency of competent jurisdiction to violate applicable law or otherwise not to conform to requirements of law, then the rest of these Competition Rules will remain in effect and the parties will substitute a suitable and equitable provision for the invalid/unenforceable provision in order to carry out the original intent and purpose of the original Competition Rules.
The picoCTF 2020 site or materials may link to and/or refer to third party websites and/or services. CMU does not control or endorse such sites. You are responsible for determining the suitability of those sites or services.
You may not assign, delegate or transfer any of your rights or obligations under these Competition Rules. Any attempted assignment, delegation or transfer shall be void.
September 14, 2020 version