Kübertalentide treeningud MTÜ ("ECSC Estonia trainers") may occasionally organize events ("ECSC Estonia events") such as Capture the Flag, trainings, bootcamps etc to promote the cybersecurity field and for purposes such as qualifying players for international cybersecurity competitions. Participants of these events ("participants") are expected to understand some general principles before joining the events. Please make yourselves familiar with the principles to ensure a smooth and fair experience for all participants.

"Players" and "competitors" refers to participants who are also competing in the event either individually or as part of a team.

"Facilitators" and "organizers" refers to the event's main organizers.

In addition, many events require acceptance of the privacy policy. Please review it as needed: Privacy policy

Participation in individual competitions

Some ECSC Estonia events are labelled "individual competitions", "individual" or are otherwise specified as not "team" events.

In individual competitions, participants compete individually. Forming teams and playing together with multiple people is prohibited.

Individual competition participants are required to not use the help of other people.

Using guides, instructions and manuals that are prepared during an individual competition and shared to the participant is considered "external help".

Participation in team competitions

Some ECSC Estonia events are labelled "team competitions", "team" or are otherwise specified as not "individual" events.

It is allowed to form a team and play together with other players in team competitions as long as all players in the team are eligible to play according to the specific terms of the competition.

Fair play

ECSC Estonia competitions are opportunities for you or your team to demonstrate your skills, preparation and expertise. You are expected to participate in your own or your team's capacity, using the tools and methods available to you, to do the best you can in the event.

In individual competitions, it is expected for players to not collaborate with other players or 3rd persons.

In team competitions, it is expected for players to not collaborate with other teams or 3rd persons.

It is allowed to use materials available on the Internet, AI assistants, private knowledgebases, and public and private software and tools during the events.

Conduct

All participants of ECSC Estonia events and all members of ECSC Estonia related communication channels are expected to conduct themselves well and assume good will from others.

Hateful, obscene, discriminatory and unwelcome behavior will not be tolerated.

Providing false or misleading information, or omitting information that is required to be provided, is forbidden.

In game platforms and communication channels, players are expected to use a professional and respectful team name, profile photo, and any other profile metadata.

Unprofessional team names and profiles may include defamatory, unkind, NSFW, bullying or hateful symbolics.

Actions against the game platform that may compromise the confidentiality, integrity or availability of the event are strictly forbidden. For example, it is not allowed to attack fellow competitors' accounts in the platform.

DoS, DDoS attacks against other players, their server infrastructure, or game platforms are strictly forbidden.

Sharing solutions, writeups and walkthroughs with other players during the event is forbidden.

It is required to use good conduct when participating in communication groups & support channels.

Game platforms

ECSC Estonia events may require registration on a game platform. Some examples of such platforms are self-hosted CTFd, as well as partner cyber ranges (SaaS and others).

In case partner cyber ranges are used, we will strive to communicate of any extra terms of service early. In order to participate in events leveraging partner cyber ranges, they must make sure to read, accept and comply with the terms of the partner cyber range in addition to these terms.

Underage players are expected to self-report and gather approvals from their legal guardians for participation in ECSC Estonia events.

Rules of conduct for participating in ECSC Estonia events must generally also be followed in addition to rules of conduct set by the game platform provider.

The ECSC Estonia organizers will strive to provide a reasonable guarantee of game platform uptime during any such event, but cannot guarantee 100% uptime.

In case of game platform downtime, the ECSC Estonia organizers will strive to provide a fair solution to the participants.

Special terms

ECSC Estonia events may include special terms of participation which can extend or override the general terms.

In case of conflict between general and special terms, usually the special terms apply.

Examples of special terms include: citizenship requirements, age requirements, affiliation requirements.

Another example of special terms is the requirement to be qualified by a previous event. In such case, participation in the event may require successful results in a previous event as defined by the special terms.

Rewards & scoring

In many ECSC Estonia competitions, a scoring system is used that assigns a numerical value to indicate each player or team's ("player") progress or success in the event.

We strive to choose scoring systems that give higher scores to players who demonstrate higher levels of skill, preparation and dedication. However, scoring systems are not perfect and may not always reflect the true skill of a player. The intent of scoreboards and rankings is to provide real time feedback and excitement to the players and audience.

Scoring algorithms used in ECSC Estonia competitions are usually described in the special terms of an event.

"Dynamic scoring" means a Capture the Flag event scoring system where players are assigned points based on the challenges they solve, with each challenge's point value determined based on the amount of players who solved it. All players receive the same point value for a challenge, meaning that if a challenge's point value goes down over time, so may the points of the players who solved it.

Rewards, qualifications and success criteria (general or specific, referred to as "rewards") are described in the special terms of an event.

Scoring methods and criteria are not to be changed in the middle of an event unless required for fairness.

In order to be eligible for a reward, the participating team or player must be in full compliance of conduct, general and special requirements of any events and any pending disputes and conflict processes involving the player must be resolved.

Any rewards are contingent that they can be granted in accordance with all applicable laws, tax and sanctions obligations in the applicable jurisdictions.

Some rewards, especially qualifications for future events, may require follow up actions to be taken by the player or team in order to make use of the reward. For example, extra information may be required, or a contract to be signed.

Some rewards, such as qualifications for some future events, may be based on objective and subjective criteria determined by the event facilitators. The facilitators will strive to be fair and transparent in their decisions, and may provide explanations where feasible.

The dispute window between the end of an event and the release of rewards will be limited in order to facilitate the timely release of rewards. After the dispute window has passed, the rewards will be considered final and no further disputes will be accepted.

Rewards that have already been granted may be revoked where feasible, when a dispute resolution or rule violation requires it.

Conduct in physical events

Examples of disallowed conduct include: physical violence, stalking, harassment, disturbing the peace, threatening actions, display of hateful symbols.

Disallowed conduct also generally includes performing pentests or mild vandalism (digital or otherwise) on the physical location, unless specifically allowed.

It is strictly disallowed to bring weapons such as knives, daggers, swords, firearms, explosives etc to any ECSC Estonia physical event.

Some events may include security checks (physical or otherwise) that must be passed in order to gain access to the venue.

Venue-specific rules or a formal code of conduct may apply at physical events.

Disputes and conflict resolution

Disputes and conflicts that are brought in front of the facilitators of any ECSC Estonia events will be resolved by the facilitators to the best of their abilities, considering available information and assuming reasonable good will.

Conflict resolution decisions made by the ECSC Estonia facilitators are final.

Liability

ECSC Estonia and its organizers, facilitators, and partners are not liable for any direct, indirect, incidental, special, consequential, or exemplary damages, including but not limited to damages for loss of profits, goodwill, use, data, or other intangible losses, resulting from participation in any ECSC Estonia events.

Participants assume all risks associated with participation in ECSC Estonia events, including but not limited to risks of physical injury, mental distress, and damage to personal property.

ECSC Estonia does not warrant that the events will be uninterrupted, secure, or error-free, and disclaims any liability for any harm resulting from technical issues, including but not limited to game platform downtime or data breaches.

Enforcement

Noncompliance to the general and special terms of any ECSC Estonia events may lead to enforcement measures. ECSC Estonia event facilitators will generally handle enforcement as necessary.

During team events, the entire team may be held responsible for the actions of a single team member. In these cases, enforcement measures may be applied in uniform to all members of the team. In exceptional cases, enforcement measures may be limited to a single player of the team.

Examples of enforcement measures include warnings, timeouts, slow-mode, docking of points, revocation of rewards, disqualification and barring from future events. Other enforcement measures may be used as deemed necessary.