How much does it take to hack a mobile network?
Is electronic government secure
in the era of WikiLeaks and Anonymous?

Is SCADA hacking a Hollywood fiction
or the nowadays reality?
Internet banking: is there any chance to win
over the fraudsters?

Cyber-crimes, cyber-espionage, cyber-war: where do we draw a borderline?

Pages

Thursday, July 19, 2012

WikiLeaks at PHDays 2012

We continue our review of competitions at the information security forum Positive Hack Days 2012. Today we will tell you about one of the most popular online competitions – WikiLeaks, which challenged the contestants’ skills of surfing the Internet for concealed information.

There were 150 people registered for the competition, 60 of which managed to succeed at least in one task. A user nicknamed mchumichev took the lead on the first day and held it till the end, so the real fight broke out for the second and third places. Many contestants ended up with the same score, but only the fastest could win.

Rules


We posted questions about Disa Retail, a potato exporting company, on the competition web page.


To answer these questions, the teams were to surf the Internet and various networks, both Russian and international (Xing, Badoo, Pastebin).

Questions


During the competition, the counter of wrong answers was set to zero several times, so the competitors had a chance to correct their wrong answers. Below is the full list of questions in English:

1. Director’s full name
2. Head office address
3. Chief financial officer’s hobby (CFO)
4. Number of employees
5. Chief human resources officer’s salary (CHRO)
6. The breed of Chief marketing officer’s dog (CMO)
7. Chief business officer’s hometown (CBO)
8. Chief technology officer’s favorite film (CTO)
9. Chief information officer’s favorite football team (CIO)
10. Net Income for 2011
11. The main competitor of the company
12. Chief information security officer’s date of birth (CISO)
13. Chief learning officer’s auto (CLO)
14. Chief risk officer’s phone number (CRO)
15. Chief web officer’s favorite band (CWO)
16. Offshore account number

Some questions proved to be more challenging than it might have seen at the first glance. Besides, the participants often confused the name of the virtual company with a similar name of an actually existing company (Disa Retail Atlantico), thus increasing the number of wrong answers.

Keys


The most reasonable idea was to start the search with the official site of the company – disaretail.com. The content of the site had been deleted before the competitions, but could still be found in the cache of searching engines. Looking through the cashed pages, the competitors could find the answers to the first two questions. In addition, among the folders in the directory, there was one called /docs/, which contained a financial statement of the company with answers to two more questions: the net income for 2011 and the offshore account number.

A lot of useful information about employees of Disa Retail could be found at linkedin.com, for example, their twitter accounts (one and two), which prompted answers to a number of questions.

The information about the company and the number of its employees could be found on Facebook. As for the question about the salary, the answer was given in chat logs at Pastebin. Besides, some answers could be found in the profiles of some employees on dating sites (for example, here and here).

Winners


To win the competition, the participants had to expand standard set of search tools – the leaders used a number of searching engines and social networks at once. Here is the trio of the winners:

I. mchumivhev
II. djecka
III. Maxfrost

Merced 2001, who took the 4th place, posted a detailed review of the competition (in Russian).

Our congratulations to the winners!

By the way, some participants tried to guess the answers but it wasn’t easy at all :)

Next year we’ll try our best to make the WikiLeaks competition even more challenging and amusing.

20 comments:

  1. I think that you need to check here for some information on how to write good argumentative essay. I think that this could be useful

    ReplyDelete
  2. Efficiently written data, it will be significant to everybody who utilizes it, including myself. This blog is exceptionally valuable for us Thank you in order for sharing this astounding data. Check out my dissertation writing service website.

    ReplyDelete
  3. Our essay Research Writing Service in the mission to ensure clients are satisfied has ensured access to customer service 24/7 meant to address all issues relating to custom term papers and Buy Essay Writing Service offered by the company.

    ReplyDelete
  4. Case Study Assignment Help in the USA begins in only a couple of snaps. The Best Assignment Writers USA, 100% without plagiarism free student-friendly prices and 24*7 supports guaranteed. How to Write a Case Study

    ReplyDelete
  5. Greetings! Very helpful advice within this post! It is the little changes that will make the most important changes. Thanks a lot for sharing!
    Install Kodi

    ReplyDelete
  6. Very Helpful Information. I love it. Please click the links down below to download wordpress plugins for free.
    Anywhere elementor pro
    Divi Switch Pro
    Woocommerce Booking & Appointment Plugin

    ReplyDelete
  7. Online logistics management writing services are very difficult to complete and many students are always searching for Logistics Writing Services Online to help them complete their logistics coursework writing services and logistic research paper services.

    ReplyDelete
  8. Would you like to get a NYC School Calendar or especially NYC DOE Calendar 2020-2021 then checkout the latest released NYC DOE School Calendar. You want to get a 2020-2021 school Year with NYC DOE Calendar 2020-2021

    ReplyDelete
  9. Responsive website composition organization has taken the charge and gotten inescapable in web advancement. We ensure that our moderate web composition contact the privilege focused on crowd. https://webilistic.com/

    ReplyDelete
  10. research publishers We help students, researchers, academicians, and corporations to publish their research endeavors in internationally reputed, indexed and peer-reviewed journals.

    ReplyDelete
  11. pro dissertation writing Academic Dissertation Writing Service and Thesis Writing work, it may be due to anything, because you are facing difficulties due to stressing too much about the work that you are not even able to do it.

    ReplyDelete
  12. papers planet Our content is free of any grammatical errors or sentence structuring mistakes due to our highly diligent team of editors and proofreaders. We also provide quick consultancy for research writing.

    ReplyDelete
  13. paper lords Our editors are capable of creating your task from scratch, and they will satisfy all the requirements of your project.

    ReplyDelete
  14. Online education consultancy We are devoted to exterminating all hindrances in academic pathways and are offering unique educational consulting services, which answer all education-related queries.

    ReplyDelete
  15. Online Class Hub is an association of professionals dedicated to serving students save capital and simplify their careers.

    ReplyDelete
  16. maverican alytics hub Our ample experience in providing insightful solutions to our global clients, enable Maveric Analytics Hub to inherently incorporate reliability, promptness and authenticity in statistical services.

    ReplyDelete
  17. dissertation lords Our consulting service is developed to deliver technical support to students as they carry out their thesis or dissertation.

    ReplyDelete
  18. British dissertation consultants British Dissertation Consultants ensures that your work is screened before submission under the strictest quality control measures.

    ReplyDelete