Terms of Use and Acceptable Use Policy

• Your school creates your account and gives you a username and a one-time password, usually on a printed slip. The account belongs to the school; it may reset it, suspend it, or close it, and it stops working after your last class term ends plus a grace period.
• Change the one-time password the first time you sign in, keep the new one to yourself, and tell your instructor at once if you think someone else has used your account.
• Do not sign in as anyone else, and do not share class join codes outside the class they were given to.

• Instructors handle other people's data: class lists they import, credential slips they print, answers they mark, reports they export. They must have the right to use that data here, keep credential slips and exports safe, and use them only to run their classes.
• Content an instructor uploads (slides, documents, exam questions, imported question files) must be theirs to use. Instructors decide whether the AI assistant, hints and the leaderboard are available in their classes, within what the administrator allows.
• Administrators configure the instance and can see everything on it; they are bound by these terms and by the Privacy Policy in what they do with that access.

Everything you learn here, offensive and defensive, is provided for education. You will use it only for lawful, authorised purposes: your coursework, defending systems you are responsible for, and testing you have explicit written permission to perform. The fact that a technique is taught here does not make it lawful anywhere else and is not permission to use it against any real target.

You may use the tools and techniques on this platform only against:

1. the lab targets and challenges this platform provides for the lab you are running, and
2. systems you have separate, explicit, written authorisation to test.

Never against classmates, the school's network, this platform, or anything on the public internet.

• Do not try to escape your lab container or reach the server underneath it.
• Do not access, attack or disrupt other people's containers, sessions, accounts, submissions or exams.
• Do not attack, probe or try to bypass the platform itself: sign-in, the CAPTCHA, the exam timer and attempt limits, the terminal service, the sync and administrative interfaces, or the hint and flag checks.
• Do not scan or send unsolicited traffic to hosts on the school network or the internet from inside a lab, unless the lab itself tells you to and provides the target.

• Labs are for coursework. No cryptocurrency mining, file sharing, bulk scraping, denial-of-service traffic, or anything unrelated to the lab.
• Do not try to exceed or work around the memory, time and concurrent-lab limits the administrator has set. Stop a lab when you are done so that others can start theirs.

• Messages, lecture comments, tickets and the public meeting form are for civil communication. No harassment, threats, hate speech or abuse.
• Do not upload or share malware, unlawful content, or material you have no right to share. Handling a sample provided by a lab, inside its sandbox, is part of the course; taking it anywhere else is not.

• Do not share, post or sell flags, quiz answers, exam questions or write-ups for graded work unless your instructor says you may.
• Quizzes and exams are your own work, completed with only the aids your instructor allows. Attempt limits and timers are part of the assessment; working around them is cheating.

• Where an administrator has enabled it, the assistant sends your question and the relevant lecture or lab text to an outside AI provider. Do not paste personal data, credentials or anything confidential into it.
• Its answers can be wrong. They are study help, not a source of truth, not an authorisation for anything, and not a substitute for your own work where your instructor has ruled it out.