Conduct
Code of Conduct
Two codes apply to this event, and both are in force the entire time you're here. Harassment of any kind ends your event.
Which codes apply
- The DEF CON Code of Conduct governs the venue and everyone in it: attendees, speakers, press, volunteers, and Goons alike. DEF CON states it does not condone harassment against any participant, for any reason, and that harassment includes deliberate intimidation and targeting people in a way that makes them feel uncomfortable, unwelcome, or afraid.
- The OWASP Code of Conduct governs this competition as an OWASP activity, and applies to the CTF Discord, the OWASP-CTF GitHub organization, and any pull requests or reviews you take part in.
- Where the two overlap, follow the stricter one. Neither is waived by anything on this site, and organizers can remove anyone from the competition for a breach of either.
Reporting a problem
You do not need to be the target to report something, and you do not need proof. If something feels wrong, say so. Every route below reaches a real person.
- At the conference: contact any Goon, the registration desk, or an info booth. DEF CON also runs a safety hotline you can call or text: 725-222-0934.
- Year-round, to DEF CON: safety@defcon.org.
- For anything CTF-specific: find an organizer at the OWASP CTF area, or message the organizers in the CTF Discord. This is also the right route for scoring disputes and for reporting a bug in a challenge or the scorer.
- In writing, and in private: defcon-ctf@owasp.org. This reaches the CTF organizers directly. Use it if the report involves someone you would rather not approach in person, or if you want a written record instead of a conversation in a shared Discord.