<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Puzzle #3 Answers</title>
	<atom:link href="http://forensicscontest.com/2010/02/02/puzzle-3-answers/feed" rel="self" type="application/rss+xml" />
	<link>http://forensicscontest.com/2010/02/02/puzzle-3-answers</link>
	<description>&#34;No Hard Drive? No Problem!&#34;</description>
	<lastBuildDate>Tue, 20 Jul 2010 16:23:15 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0</generator>
	<item>
		<title>By: sherri</title>
		<link>http://forensicscontest.com/2010/02/02/puzzle-3-answers/comment-page-1#comment-275</link>
		<dc:creator>sherri</dc:creator>
		<pubDate>Thu, 04 Mar 2010 04:21:44 +0000</pubDate>
		<guid isPermaLink="false">http://forensicscontest.com/?p=375#comment-275</guid>
		<description>Winners are up! Sorry it took so long. You guys had great entries, and it was really tough to pick just one. Thank you all for making this so interesting and for building these fantastic tools for the community to use and play with.</description>
		<content:encoded><![CDATA[<p>Winners are up! Sorry it took so long. You guys had great entries, and it was really tough to pick just one. Thank you all for making this so interesting and for building these fantastic tools for the community to use and play with.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Sébastien DAMAYE</title>
		<link>http://forensicscontest.com/2010/02/02/puzzle-3-answers/comment-page-1#comment-269</link>
		<dc:creator>Sébastien DAMAYE</dc:creator>
		<pubDate>Sat, 27 Feb 2010 10:46:31 +0000</pubDate>
		<guid isPermaLink="false">http://forensicscontest.com/?p=375#comment-269</guid>
		<description>I would say the right to post a new puzzle :-P</description>
		<content:encoded><![CDATA[<p>I would say the right to post a new puzzle <img src='http://forensicscontest.com/wp-includes/images/smilies/icon_razz.gif' alt=':-P' class='wp-smiley' /> </p>
]]></content:encoded>
	</item>
	<item>
		<title>By: sherri</title>
		<link>http://forensicscontest.com/2010/02/02/puzzle-3-answers/comment-page-1#comment-268</link>
		<dc:creator>sherri</dc:creator>
		<pubDate>Sat, 27 Feb 2010 09:26:07 +0000</pubDate>
		<guid isPermaLink="false">http://forensicscontest.com/?p=375#comment-268</guid>
		<description>Hi Sébastien,

That&#039;s fair! We will make a big push this weekend and aim to get the winners published by your deadline of 2/28/10 (11:59:59PM UTC-11). Looking at all these great submissions, I think it&#039;s going to be tight! (What do we win if we make it?? ;)

Sherri</description>
		<content:encoded><![CDATA[<p>Hi Sébastien,</p>
<p>That&#8217;s fair! We will make a big push this weekend and aim to get the winners published by your deadline of 2/28/10 (11:59:59PM UTC-11). Looking at all these great submissions, I think it&#8217;s going to be tight! (What do we win if we make it?? <img src='http://forensicscontest.com/wp-includes/images/smilies/icon_wink.gif' alt=';)' class='wp-smiley' /> </p>
<p>Sherri</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Sébastien DAMAYE</title>
		<link>http://forensicscontest.com/2010/02/02/puzzle-3-answers/comment-page-1#comment-267</link>
		<dc:creator>Sébastien DAMAYE</dc:creator>
		<pubDate>Sat, 27 Feb 2010 06:48:48 +0000</pubDate>
		<guid isPermaLink="false">http://forensicscontest.com/?p=375#comment-267</guid>
		<description>We all know it is difficult to find a &quot;universal&quot; humor, something everyone would find funny. But I guess I found some kind of one (hope there is no copyright on that sentence)...

&quot;Deadline for submmitting the winner is 2/28/10 (11:59:59PM UTC-11) (In other words, if it’s still 2/28/10 anywhere in the world, you can submit the name of the winner.)&quot;

In case you havn&#039;t understood, that was humor ;-)</description>
		<content:encoded><![CDATA[<p>We all know it is difficult to find a &#8220;universal&#8221; humor, something everyone would find funny. But I guess I found some kind of one (hope there is no copyright on that sentence)&#8230;</p>
<p>&#8220;Deadline for submmitting the winner is 2/28/10 (11:59:59PM UTC-11) (In other words, if it’s still 2/28/10 anywhere in the world, you can submit the name of the winner.)&#8221;</p>
<p>In case you havn&#8217;t understood, that was humor <img src='http://forensicscontest.com/wp-includes/images/smilies/icon_wink.gif' alt=';-)' class='wp-smiley' /> </p>
]]></content:encoded>
	</item>
	<item>
		<title>By: sherri</title>
		<link>http://forensicscontest.com/2010/02/02/puzzle-3-answers/comment-page-1#comment-233</link>
		<dc:creator>sherri</dc:creator>
		<pubDate>Tue, 23 Feb 2010 09:02:36 +0000</pubDate>
		<guid isPermaLink="false">http://forensicscontest.com/?p=375#comment-233</guid>
		<description>Sébastien -- Sorry for the wait! We&#039;ve been building and testing the 50 netbooks for Orlando, so more hosed than usual on this end. We know you&#039;re waiting and we&#039;re excited to give away this shiny new AppleTV! Soon, we promise.

Sherri</description>
		<content:encoded><![CDATA[<p>Sébastien &#8212; Sorry for the wait! We&#8217;ve been building and testing the 50 netbooks for Orlando, so more hosed than usual on this end. We know you&#8217;re waiting and we&#8217;re excited to give away this shiny new AppleTV! Soon, we promise.</p>
<p>Sherri</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Sébastien DAMAYE</title>
		<link>http://forensicscontest.com/2010/02/02/puzzle-3-answers/comment-page-1#comment-232</link>
		<dc:creator>Sébastien DAMAYE</dc:creator>
		<pubDate>Tue, 23 Feb 2010 08:52:23 +0000</pubDate>
		<guid isPermaLink="false">http://forensicscontest.com/?p=375#comment-232</guid>
		<description>@Sherri: still no result for puzzle #3? I guess you have much to do with all our answers ;-)</description>
		<content:encoded><![CDATA[<p>@Sherri: still no result for puzzle #3? I guess you have much to do with all our answers <img src='http://forensicscontest.com/wp-includes/images/smilies/icon_wink.gif' alt=';-)' class='wp-smiley' /> </p>
]]></content:encoded>
	</item>
	<item>
		<title>By: sherri</title>
		<link>http://forensicscontest.com/2010/02/02/puzzle-3-answers/comment-page-1#comment-222</link>
		<dc:creator>sherri</dc:creator>
		<pubDate>Wed, 17 Feb 2010 18:34:25 +0000</pubDate>
		<guid isPermaLink="false">http://forensicscontest.com/?p=375#comment-222</guid>
		<description>Hi TJS,

Yes, definitely! We will be announcing the winners in the same format as last time.

best,
Sherri</description>
		<content:encoded><![CDATA[<p>Hi TJS,</p>
<p>Yes, definitely! We will be announcing the winners in the same format as last time.</p>
<p>best,<br />
Sherri</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: TJS</title>
		<link>http://forensicscontest.com/2010/02/02/puzzle-3-answers/comment-page-1#comment-219</link>
		<dc:creator>TJS</dc:creator>
		<pubDate>Mon, 15 Feb 2010 00:33:12 +0000</pubDate>
		<guid isPermaLink="false">http://forensicscontest.com/?p=375#comment-219</guid>
		<description>Are you going to list out the names of people that got the answers correct?</description>
		<content:encoded><![CDATA[<p>Are you going to list out the names of people that got the answers correct?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Wesley McGrew</title>
		<link>http://forensicscontest.com/2010/02/02/puzzle-3-answers/comment-page-1#comment-215</link>
		<dc:creator>Wesley McGrew</dc:creator>
		<pubDate>Wed, 10 Feb 2010 01:02:15 +0000</pubDate>
		<guid isPermaLink="false">http://forensicscontest.com/?p=375#comment-215</guid>
		<description>I&#039;m not the one running the contest, but my opinion would be that if it were much longer period of time, I probably wouldn&#039;t participate.  A one-month time limit sort of caps the amount of time anyone can spend on their submission, making it more likely that someone like me that can only put in spare time here and there (evenings on travel, etc) can be competitive.  Much more time than that and it winds up leaving &quot;weekend-project&quot; territory and becoming a more serious project, which I don&#039;t really have time for.

I think that after that one-month limit, whatever scripts are considered for addition to the SANS course material and toolkit can be tweaked and added to outside the context of the contest.  For example, my Puzzle 3 tool is nice in my opinion, but could benefit from a lot of further hacking with other samples of AppleTV traffic, which I probably wouldn&#039;t bother doing within the scope of a contest anyway.  If it turned out to be a tool folks would actually use though, it&#039;d be worth it.</description>
		<content:encoded><![CDATA[<p>I&#8217;m not the one running the contest, but my opinion would be that if it were much longer period of time, I probably wouldn&#8217;t participate.  A one-month time limit sort of caps the amount of time anyone can spend on their submission, making it more likely that someone like me that can only put in spare time here and there (evenings on travel, etc) can be competitive.  Much more time than that and it winds up leaving &#8220;weekend-project&#8221; territory and becoming a more serious project, which I don&#8217;t really have time for.</p>
<p>I think that after that one-month limit, whatever scripts are considered for addition to the SANS course material and toolkit can be tweaked and added to outside the context of the contest.  For example, my Puzzle 3 tool is nice in my opinion, but could benefit from a lot of further hacking with other samples of AppleTV traffic, which I probably wouldn&#8217;t bother doing within the scope of a contest anyway.  If it turned out to be a tool folks would actually use though, it&#8217;d be worth it.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Lou</title>
		<link>http://forensicscontest.com/2010/02/02/puzzle-3-answers/comment-page-1#comment-214</link>
		<dc:creator>Lou</dc:creator>
		<pubDate>Tue, 09 Feb 2010 22:41:21 +0000</pubDate>
		<guid isPermaLink="false">http://forensicscontest.com/?p=375#comment-214</guid>
		<description>... fat fingered and sent that last msg before I was done...

XML parser. 

To answer Sherri&#039;s question, I think 6 weeks would be better for those of us who want to put some time into scripts, along with with hints like the ones given for puzzle 3 but earlier on in the contest.  If the goal is to get some quality tools out of the solutions, then more time and some suggestions to get us thinking will really help.  I&#039;m sure you don&#039;t want to squelch our creativity by giving too much direction.  I thought the hints you gave last time gave me some good ideas for how I might have fine tuned my scripts.

Thanks for running the contest!  I&#039;ve been having a lot of fun with this.</description>
		<content:encoded><![CDATA[<p>&#8230; fat fingered and sent that last msg before I was done&#8230;</p>
<p>XML parser. </p>
<p>To answer Sherri&#8217;s question, I think 6 weeks would be better for those of us who want to put some time into scripts, along with with hints like the ones given for puzzle 3 but earlier on in the contest.  If the goal is to get some quality tools out of the solutions, then more time and some suggestions to get us thinking will really help.  I&#8217;m sure you don&#8217;t want to squelch our creativity by giving too much direction.  I thought the hints you gave last time gave me some good ideas for how I might have fine tuned my scripts.</p>
<p>Thanks for running the contest!  I&#8217;ve been having a lot of fun with this.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
