38 hours, nobody hacked it. Under fire from intermittent DOS attacks, nessus scans, ssh dictionary attacks and much else.
The difference to the other competition? Nobody had local access to the machine except the machine’s owners, as it would be in a realistic situation.