HOTWIRE — rules

One account, one crew

Your team has a single account. The team name is your identity here, and it is the only identity this platform has. Share the password inside your team and keep it in a shared password manager, not in a chat message.

No personal data

Do not enter real names, real email addresses, or anything else that identifies a person. The registration form does not ask for an address and will not accept one: the field is filled in automatically with a generated value that can never receive mail.

Everything here is pseudonymous by design. Accounts, submissions and logs are deleted after the event.

Flags

Flags look like BSA{something_like_this}. Submit them exactly as you find them, including the prefix and the braces.

Do not share flags with other teams, and do not post them anywhere outside your own crew. Finding the same flag twice is not the same as solving it twice.

Fair play

Read the rules of engagement before you touch anything. They cover what is in scope, what is never in scope, and what gets a crew disqualified. They are short and they are enforced.

Denial of service is never the intended solution. If a challenge only falls over when you hit it hard enough, you are on the wrong track.

When something breaks

Challenges do break. If one behaves impossibly, say so — see the help page for where to reach us. A broken challenge that nobody reports stays broken.