Blurry Box Logo

Rules

Please make sure you read the following terms before you enroll for the Blurry Box hacking contest. By registering online, you implicitly confirm that you will fully abide by these rules:

 

Contenders

  • The competition is open to anyone around the world with the exception of the Organizer Committee and Jury members, founders, and shareholders. Countries under European embargo are also excluded from participation.
  • Contenders must be 18 years old or over.
  • Contenders can register just once and provide one solution entry only.
  • Upon submitting the online registration form, the participants will be notified by email within 48 working hours about the acceptance of their enrollment, in which case they will be shipped a USB dongle by post free of charge. This is limited to the first one thousand participants.

 

Timeline

  • Registrations for the Blurry Box hacking contest will open at 1 pm CEST, on April 24th, 2017.
  • All eligible registrants will receive a confirmation of their enrollment via email and a hacking kit will be sent to the postal address given in the registration form. The kit will include a dongle on which the secure license for the application to hack will be stored.
  • Registrations will close at midnight CEST on May 12th, 2017.
  • On May 15th, 2017, the eligible registrants will receive an invitation by email to download the game protected with Blurry Box cryptography.
  • Contenders will have until midnight CEST of June 2nd, 2017 to hack the game with all possible cracking mechanisms they are acquainted with and report their results to the Jury.
  • The Jury will directly verify all the submissions on June 5th through 15th, 2017.
  • The winner(s) of the prize or the lack thereof will be announced to all contenders on June 16th, 2017.

 

Assignment

  • The game application runs on Windows 32 or 64 bit platforms, is written in C++, is protected with Blurry Box cryptography, and its license will be stored in the USB dongle the contenders are shipped.
  • The purpose of the game is to travel and collect credit for correctly answered questions. The player selects the destination city and the means of travel which have different costs. Depending on his bet, he gets credits for answering 10 questions about each destination. He then selects the next destination and so on. In this way, the game meets the assumption of complexity. The game consists of an unprotected graphical user interface and a protected game.dll. The GUI can use a script file instead of manual input and create a log file.
  • The contenders need to have Internet access to be able to download the protected game on May 15th, 2017, and return their solution by June 2nd, 2017.
  • The contenders are requested to hack the protected game and prove they can run it on a Windows-based PC without the USB dongle that was provided for the contest and without Internet connection.
  • The cracked game as well as the method and the hacking tools used to hack the game should be uploaded directly to the designated Jury web space for later analysis.
  • Submissions will be accepted in English language only.
  • During the verification process, a set of parameters will be compared between the hacked software and the original game; if the match is validated, the hacking solution will be confirmed.
  • The hack is accepted as successful if a given script file creates the same log file with the protected game and the hacked one. The jury script file will be published together with the jury result on June 16, 2017.

 

Prize

  • The cumulative prize offered by WIBU-SYSTEMS AG amounts to 50,000 EUR.
  • The sum will be split among the contestants that are proven by the Jury to have fully hacked Blurry Box cryptography. In case of multiple successful hackers, the first respondent will receive 25,000 EUR, the second 12,500 EUR, the third one 6,250 EUR, and so on.
  • If hackers are only able to partially crack Blurry Box cryptography, the partial hacking solutions will be awarded a cumulative prize of 10,000 EUR to be split among the partially successful hackers in accordance with the Jury’s assessment.
  • If no partial or complete hack of Blurry Box cryptography is received, no prize will be awarded.
  • Once the Jury has announced the results of the Blurry Box hacking contest on June 16th, a separate personal note to the winner(s) will follow from Wibu-Systems to coordinate the remittance.

 

Legal Disclosure

  • Contenders are allowed to reverse engineer the game application only for the timeframe indicated (May 15 through June 2nd, 2017) and solely for the purpose of the Blurry Box hacking contest.
  • Contenders are not allowed to publish their solution, even if validated by the Jury, for 6 (six) consecutive months following the end of the contest (until Dec. 16th, 2017).

 

Jury

  • The Jury consists of independent IT security scientists and will fulfill its role autonomously from the partners that are promoting the Blurry Box hacking contest.
  • The Jury will set up an own email channel with the contenders that will be disclosed upon confirming the acceptance of the enrollment.
  • Starting on June 5th, 2017, the Jury will analyze all partial or complete solutions received and will then officially communicate the validation or inadequacy of their findings to the contenders.
  • On June 16th, 2017, the Jury itself will announce the possible winner(s) of the Blurry Box hacking contest

 

Blurry Box® is a registered trademark of WIBU-SYSTEMS AG.