BR0KEN W3B CHALLENGE 2.0

The Challenge for IT-Security-Talents.

Rules of the challenge

Br0ken w3b Challenge 2.0 by Deutsche Telekom

Introduction

Before registering and participating in the “Br0ken w3b Challenge 2.0 by Deutsche Telekom” (hereinafter referred to as the “Challenge”), the Participant must accept the “Rules of the Challenge” (hereinafter referred to as the “Rules”).

The Deutsche Telekom, AG Friedrich-Ebert-Allee 140 53113 Bonn Germany

 (hereinafter referred to as the “Partner Company”), has decided to engage Agorize France, 34, rue du Faubourg Saint-Antoine, 75012 Paris (hereinafter referred to as the “Service Provider”), to organize a Challenge as set forth below. The Service Provider shall act in the name of and on behalf of the Partner Company. Consequently, the Partner Company is the organizer of the Challenge.

 

1. Who can participate?

The Challenge is open to target who meet the following criteria:

  • any person of legal age.

 

2. Conditions for entering the Challenge

Participants must create an account (see no. 4). Once a Participant has been registered on the platform, no changes in her/his make-up may be made once the first deliverable has been submitted.

Only one entry per person is permitted in the Challenge.

Participation in the Challenge is free.

Employees and representatives of the Partner Company and the Service Provider and/or the members of their families (parents, children and spouses) are not eligible to participate in the Challenge.

Any Participant that does not abide by the Rules during her/his registration or at any time during the Challenge, will automatically and without prior notification be disqualified from the Challenge and shall not receive any award. In the event that an award goes to a Participant that does not or did not comply with the Rules at the time of her/his registration or during the Challenge, the Partner Company has the discretionary right to demand the return of the award.

 

3. Registration

Registration for the Challenge is completed exclusively online. The Participant must open a user account at www.agorize.com and enter the following data:

  • Last name;
  • First name;
  • A valid email address;
  • A valid password;
  • Country
  • Nationality
  • Education
  • Study progress
  • Skills (optional)
  • Xing or Linkedin link (optional)

To validate registration, the Participant must accept the Service Provider’s competition rules, terms and conditions. A confirmation email containing an activation link will then be sent to the Participant’s listed email address. Once the account has been activated, the Participant can complete her/his profile in the account settings. To end the registration process for the Challenge, the Participant must check the box indicating that she/he accepts the Rules of the Challenge.

Any incorrect or incomplete information entered during registration shall not be taken into account and shall disqualify the Participant.

The Participant must have a computer to access the Challenge. The minimum configurations and devices are:

  • processor 1 Ghz or higher with 1 Go RAM or higher;
  • 1024x768 pixel screen definition with 65,536 colors;
  • operating system: Windows XP and Vista;
  • a browser that accepts cookies and Javascript function execution: Internet Explorer 7 or higher, or Firefox 3.5 are recommended;
  • flash Player version 9.045;
  • a sound card is recommended, but not required.

Participants will be notified of any changes to these requirements via www.agorize.com.

 

4. Duration and Process of the Challenge

The Challenge shall take place from 11/10/2018 to 15/11/2018 final date, via the website at > https://challenge.telekom.com/br0kenw3b20 <.

If necessary due to operational requirements, the Partner Company reserves the right to change the duration of the Challenge by a reasonable amount of time, in which case Participants will be notified.

The Challenge process consists of the following four essential stages:

Application stage

The application stage takes place from 11/10/2018 to 04/11/2018.

By 11:59 pm (CET) on 4th of November 2018, Participants must upload to the platform their preselection deliverables, which comprise a maximum of 10-slide document. It must contain: the special keyword of the hacked web application, a documentation of the spotted issues and how they were exploited. Participants must answer the following questions: How secure is it? What are the weak points? and What can you find if you dig deep enough?. The supporting documentation can be a PowerPoint file (max. 10 slides), a PDF or Word file (max. 10 pages, see no. 6).

Selection stage

The selection stage takes place from 04/11/2018 to 08/11/2018. A selection jury, comprising representatives of the Partner Company, will be responsible for selecting up to 3 projects. Evaluation will be based on the preselection deliverables submitted by all Participants compared with the judging criteria explained in no. 7.

Final stage

The 3 projects selected by the selection jury will be invited to the final pitch in Cologne, Germany.

It will take place on 15th of November 2018. On that day, each of the 3 Participants will be rewarded with their prizes, after having a final pitch.  The selection jury, comprising employees of the Partner Company, will be responsible for ranking the 3 selected projects based on the shown presentation during the final pitch according to the criteria in no. 7. Project n°1, project n°2 and project n°3 will be the winning projects and therefore also the winning Participants of the entire Challenge.

 

5. Required deliverables

The Challenge requires one submitted deliverable. All deliverables must be completed in English; no other language will be accepted. Deliverables must be sent in a common digital format, such as: DOC/DOCX/PDF/PPT/PPTX/KEY/ODT/MP3/MPEG/MOV/MP4.
Maximum 10 slides.

If the deliverables sent by a Participant cannot be opened or read sufficiently, the Participant concerned will be notified and given an opportunity to re-submit the documents. Deliverables will only be accepted if submitted during each of the submission periods. If a deliverable is submitted after the submission deadline, the Participant will automatically be disqualified from the Challenge.

Each Participant warrants that the content of the deliverables includes only contributions made by herself/himself. If it appears that contributions have been made by a third party, the Participant concerned will be disqualified from the Challenge. No copyrighted photos or images may be used in the deliverables. In any event, the Partner Company will not be responsible for the use of any images copyrighted by third parties.

The Partner Company will not accept, and will not consider, any other documents submitted by the Participants.

 

6. Judging criteria

Each selection will be based on the following criteria:

  • Relevance
  • Creativity (thinking outside the box)
  • Professionalism
  • Presentation quality

 

7. Award

Only the three winning Participants in the final stage will receive an award.

Winners of the three Projects will be awarded with the following prizes, according to their ranking, with the precision that Project n°1 is better than Project n°3, which is considered the last of the three ranked by the Final Jury.

  1. Awards for Project n°1 : BOSE QuietComfort 35 II Wireless Headphones (379,95 euros)
  2. Awards for Project n°2 : Amazon Show + Philips HUE (229,99 euros)
  3. Awards for Project n°3 : JBL Charge 3 Bluetooth speaker (179 euros)

Each Participant acknowledges and accepts that under no circumstances whatsoever can an award be contested in any way, or a request made to exchange it either for its monetary value, or for another award. The award is non-transferable and Participants are advised that any sale or exchange of the award is not permitted.

If an award should be unavailable, the Partner Company at its discretion is free to substitute an award of similar value.

 

8. Notification of the results of the preselection and final stages

The Service Provider will inform all Participants of the selection results by no later than Friday the 7th of November 2018 and of the final selection results by no later than the 19th of November 2018. Notification can be by email sent to the address entered at the time of account creation at www.agorize.com and via notification to their www.agorize.com account. The Partner Company reserves the right to change the dates of notification of the results if this should become necessary due to the number of projects to be evaluated. Each pre-selected or selected Participant must respond to any email sent by the Service Provider before the specified deadline in the message has lapsed. Otherwise, the Partner Company reserves the right to disqualify the defaulting Participant’s project.

 

9. IP Rights and buying option

FULL RETENTION OF RIGHTS BY PARTICIPANTS

Each Participant agrees not to disclose any inventions, discoveries and/or developments (including respective software) that are discovered or developed in connection with the Challenge for a maximum period of 3 weeks, starting from date (“negotiation period”).

During this negotiation period the Participant(s) shall exclusively negotiate with the Partner Company. The Partner Company may present to the Participant(s) an offer to purchase said inventions, discoveries and/or developments (including corresponding worldwide intellectual property rights). The parties shall negotiate such offer in good faith and the Participant shall not unreasonable withhold his consent to a respective agreement. This in particular applies if Partner Company has offered an equitable remuneration.

In addition, if Participant(s) sells said inventions, discoveries and/or developments (including corresponding intellectual property rights) after the negotiation period to a third party, then the Partner Company shall have a buying option in accordance with §§ 463 et seq. of the German Civil Code.

 

10. Data Protection Regulations and Consent to Data Processing

The data mentioned above under no. 4. and any content delivered by the Participant during the Challenge will be saved and used by or on behalf of the Partner Company.

Consent for e-mails / phone calls

By registering, the Participant consents that the Participant may be contacted (i) via email by the Partner Company and/or the Service Company during his/her participation in the Challenge or (ii) by phone if she/he is one of the pre-selected Participants or final winners.

Consent for use of data on website

The Participant authorizes the Partner Company or the Service Company (on behalf of the Partner Company), in the event that she/he should be chosen winner of the Challenge, to use without any additional remuneration her/his last name, first name, city, region of residence, name of her/his university or former university and her/his photograph and/or data related to her/his participation and/or deliverables in the Challenge, including on its websites and social media channels.

Consent for movie

Further, the Partner Company may shoot an institutional movie of the final ceremony, in which all Participants in this stage are expected to participate. The Participant authorizes the Partner Company to use and make available this movie on its websites and social media channels.

Information on data processing

Participant is hereby informed that the Service Company will perform any such data processing on behalf of Partner Company. This in particular includes to save and process any data that the Participants submit during the Challenge (see no. 4), to the extent necessary for the purpose of the Challenge.

Right to withdraw consent and to object to use

The Participants may at any time have the right to ask for information about her/his personal data saved by the Service Provider and/or the Partner Company, may object to the use of this personal data and/or withdraw its consent with effect for the future by contacting the Service Provider, the Partner Company or sending an e-mail marco.baldauf@telekom.de. In this case the participation in the Challenge is no longer possible.

 

11. Liability

The Partner Company shall not be liable for any damages caused by the participation in the Challenge or in connection with the award. In particular the Partner Company shall not be liable in any way if the telecommunications network used should fail or malfunction, such that the Participant cannot access www.agorize.com or any other website that is necessary for the participation in the Challenge.

The provisions of this Section 12 shall not apply with respect to personal injury or under the German Product Liability Act. Furthermore, the foregoing limitations of liability shall not apply in cases of willful misconduct, gross negligence or the acceptance of a guarantee.

 

12. Confidential information

Confidential Information means any information provided by the Partner Company that a reasonable person would understand to be confidential or proprietary due to the context of its disclosure and/or its scope, content or nature (hereinafter referred to as “Confidential Information”). The Participant may receive Confidential Information orally, visually, electronically or in writing. Confidential Information may include, without limitation, the whole or any portion of: administrative, commercial, scientific, technical, financial and fiscal information.

The following information is non-confidential:

information that is currently accessible or becomes accessible to the public without breach of the terms of the Regulations by the Participant;

  • information legally held by the Participant before its disclosure by the Partner Company;
  • information that the Interested Party had received from a third party who was entitled to disclose this information without restriction.

For the duration of the Challenge and for a period of 5 years thereafter, the Participant agrees to:

  • not to use the confidential information for any purposes other than to participate in the Challenge under the conditions of the regulations;
  • take any necessary, useful and reasonable precautions to protect confidential information;
  • not to reveal confidential information to whomever, by any means whatsoever, except to the other members of her/his team.

The obligations to maintain confidentiality as defined in this section no. 13 do not apply as far as information are disclosed in response to a valid order of a court or other governmental body to the extent of and for the purpose of such order.

At the end of the Challenge, the Participant must immediately return all Confidential Information obtained during the Challenge to the Partner Company. The Participant shall not keep copies in any form whatsoever, unless she/he has express, prior, written permission to do so from the Partner Company.

 

13. Miscellaneous

Recourse to the courts is not permitted.

These Rules shall be construed and interpreted in accordance with the laws of Germany without prejudice to any mandatory conflict of law provisions and to any mandatory provisions of the state where the Participant has her/his habitual residence.

If any provision of this Rules shall be held to be illegal, invalid or unenforceable in whole or in part, either under enactment or rule of law, such provision or part shall to that extent be deemed not to form part of this Rules but the legality, validity and enforceability of the remaining provisions of this Rules shall not be affected.

Regulations are registered with SCP Bornecque Winandy - Bru Nifosi, huissiers de justice associés 15, Passage du Marquis de la Londe- 78000- Versailles.