Competition begins at 0.00 am on 7th August 2013 and ends at 23.59 pm on 1st of September 2013.
The organiser of the competition is the Matriculation Examination Board of Finland. Rules for the competition can be found at https://digabi.fi/pub/doku.php?id=hackabi:saannot_en
Contestants must be at least 15 years old. Minors under 18 need approval from a guardian to participate in the Hackabi competition. The employees of F-Secure, Nixu Ltd, FICORA and the Matriculation Examination Board are not allowed to participate in the competition.
Contestants are given the task of searching for vulnerabilities within the exam operating system, which can be used to effect one or more of the following:
Resources supplied for the competition can be found at the competition’s website https://digabi.fi/pub/doku.php?id=hackabi:kilpailu_en. Competition materials are provided in English only.
Finding vulnerabilities within the servers of the Matriculation Examination Board is not part of the competition. This kind of action will be regarded as a hostile breaching attempt.
Competition begins at 0.00 am on 7th August 2013 and ends at 23.59 pm on 1st September 2013. Dates given are in Finnish summer time (UTC+3).
Competition entries have to be confirmed by a workstation with specifications determined by the Matriculation Examination Board. An English translation of these specifications can be found at the website of the competition.
Only entries whose copyrights are owned by the contestants themselves are allowed to participate in the competition. Contestants are, however, free to use tools created by others.
Competition entries are submitted by email to email@example.com. Competition entries must be either written down in the text field of the email or attached as a PDF file. Only one PDF attachment is allowed per entry. Competition entries should be written in Finnish, Swedish or English.
Competition entries should include a working email address for contacting about the possible prize.
The entries do not have to include guidelines on how to fix the vulnerability found. Providing these guidelines may, however, have an influence on the points given.
The competition jury panel consists of the following members:
Members of the jury will receive all competition entries. Each member then has 100 points to divide between the entries according to their preference. If two or more entries finish with an equal score, their placement is resolved in a draw.
The Matriculation Examination Board is already aware of some vulnerabilities and more may be recognised during the competition (for example, kernel based vulnerabilities). These known security vulnerabilities can be used as part of the competition entries, but the jury will decide how this will affect scoring.
At least three best competition entries, chosen by the jury, are awarded a smartphone or a tablet device valued at approximately 1.000 €. Possible prizes include Acer Iconia W700 11.6” 128 GB, Apple iPhone 5 64 GB, Apple iPad Retina 128 GB, Asus Vivo Tab RT TF600TG 64GB, Lenovo ThinkPad Tablet 2 10.1”, Samsung Google Nexus 10 32 GB or Sony Xperia Tablet Z 10.1”. Alternatively, the prize can also be given in currency. In addition to three best entries, the Matriculation Examination Board reserves the right to award additional entries using a set of criteria of its own choosing. Winners are announced on 3rd October 2013 on the website of the competition. Winners will also be informed by email.
Contestants are allowed to use a nickname. Each competition entry must include an email address to be used for contacting purposes. Email addresses will not be made public.
It is also possible to take part in the competition as a team. If a team wins a reward, the prize is given to the person whose email address was included in the entry. The Matriculation Examination Board cannot be held responsible for how a team decides to share the reward between its team members. If there are problems, the Matriculation Examination Board can refrain from giving the reward altogether.
Winners must provide the Matriculation Examination Board with their full personal details. Rewards are considered taxable income.
Competition entries will be licensed under the Creative Commons CC-BY-NC licence. The contestants will retain full ownership of the copyrights of the entries.
If the competition entries use vulnerabilities which are associated with commonly used programs, CERT-FI will coordinate the processes for fixing these vulnerabilities.
The Matriculation Examination Board can publish competition entries and names or nicknames of the contestants by means of the CC-BY-NC licence.
Additional information for the competition can be found on the website http://digabi.fi/hackabi.
Finnish law and good manners shall be followed during the competition. Should there be any disputes on the application of these rules that is not amicably settled the cases shall be heard in the District Court of Helsinki.