BSidesKC 2018 - Badge Pirates - Electronic Badge Overview

how many guys is your first besides over

okay how about within the last five years okay so everybody in here is news about this we just got a batch challenge at any twenty years how many you know workshop okay so this is a great opportunity one of the things that I always love every time you go to a smaller conference where you get time to sit down with hiring people is ways to figure out some of the harder more simple things to get a batch like this you get an opportunity to figure out all the nuances with it this is the same thing that some of us have every day or you know daily jobs because kids can do it you can do it here you can do it with

your kids so with that I would advise you to not make this work just your conference about to take it home you know sure other people with that I'd like to introduce Paul he's going to talk about badges here and what guess these things you should pay attention to so [Applause] hello besides PC welcome to batch recent ok all written will I go by online everywhere you want to take me afterwards it should be easy to find me first of all can everybody hear me okay all right cool so uh that's why that screw we're here to satisfy a need for blanket lights so we have this morning so nice I species s that piracy

designed and Clemente badges for this year's event but some of you probably know probably mostly don't know who we are so bad parents of small team of hackers we have a passion for all things that encompass events life so that pirates first of all you guys say no please

[Applause] gee to the million and we are all from cities at the DEF CON 24 that were even at GE had just completed surrounded just like smashing and hitting all the batches that were available after another heater so shortly after that a bunch of us from site PC got together to plan out their will in a bag of our own so the real first task was to design a badge for truces I thought people were going to grow we've embarked on the journey to top the bag from the event but due to the egg relax reach Trixie was schemes but that's okay never T cannot you have another batch up your sleeves this badge was recon 25 but

some of you may be asking weird only bad just come from that's good so in the beginning the universe is created every time and offices we found every reason to have conferences to make sure the only certain people to go mother's come on and for that the confidence badges in your city well what is it only for conferences finders need common steel so DEFCON Oh many others have beside the cause and with it cons they had badges since beginning the present day actors could identify as being allowed anything but fewer than more style in the corporate study comments for suits so these bags evolved over time from basic machine so we took the knack next natural evolution

preaches the electronic bed at the DC 14 they spat at first electronic bags quickly evolved badges increase in complexity artistic ingenuity soon become even coveted totally honest at least the bank has increased in complexity and so anyways we the DEF CON magics last year if you do that we're analog and there's a lot of hubbub but that's ok because we come we're going to solve that here in size AC this con is aren't on so we neither I started back in 2010 I'm not sure do we need the original 22 besides people remember advantages I could not find any photos so that is kind of like some lost over there last year's bad news what would a

complete image patch is proudly show their beloved KC and the next iteration identify using the best economy friends I present you the 2018 besides game to see better

all right so let's talk about this huge baggage we didn't want to go over towards their second full-scale badge you want to something else quick prototype it's still pretty cool wanted to program the new size decent logo in Arlington Heights good battery but do not move it acabou so that the number of you guys could all do some havoc on the badge so it's a really simple design we use very few four components artemis microcontroller a very few mins small memory little power was easy to build is cheap simple in debug and programming and then the functionality all it is is lights LED news and then we need a power supply it's common cheap strong navigate

the cr2032 ubiquitous we can get it anywhere and in the last month or so let's talk about that actually building the back so last year at the center January we had our initial design we ordered our first probe PCB PCB way is a key support and PC board assembly operation in China and very good to work with the good crew we got our first prototypes pretty quickly and then we probably built the badge on January 31st at the same time besides tickets went on sale and within 36 hours of February 1st the badges syllabic that's perfect timing because right after that they actually program the first prototype - you got some proof Casa Coker we have ransom initial

battery tests and as where they found the first problems first of all was about new tests original battery only lasted three hours it's the wrong battery we just hang that we just threw a random battery in there for our initial development but luckily to be there we teach at the final design the reset button didn't work because dramatic so but that's okay to fix that to the permanent test pass were way too small and before I play that just it said earlier there are a few other problems certainly was higher but we got all the bugs speaks about later when we sit the actual word just in time for Chinese New Year so I don't feel what

about Chinese New Year but basically China shuts down for two and a half weeks people go home and the home is often for our way through the city where they work and if you're in business with China they can see disruptive but that's just kind of the natural theme of things if you're ever early in the year - every time - a gives me so many ways to talk about how the patch actually works really that's just a record-high LED circuit but you've had my controller refinement profit it's a nice idea but all those things on the microcontroller just isn't quite pretty easy to work with so we're gonna simplify with the hack of the use of the pins on the

microcontroller with a technique called Charlotte Clemson and here as you can see there are 6 LEDs on this picture but there's actually only three connections here so you can control whole bunch of LEDs with very few connections and this is the magic of making our bags worth here's a drawing of the Charlie flexi circuit that we're actually using the conceptual design the white backs there represent no connection basically the connection is turned off the red is the positive side of power and the black is a negative sign of power there here is like a visual in an actual operation as you can see as we move the actual red and black around it will light up one of the LEDs which is

showing red here and this is a technique that we use to control so many LEDs with such a small and simple device because of this design we don't need a lot of pendants like I said you can see here this is the actual light controller using it's an 8/10 device that actually has five Newman mounting pins and the key is that the input the pins have to have a programmable function and the hands also have to be usable as an input for as an operator so each pin to be close if you just an input or just an output on a certain pen it's not really usable for travel place programmable major the pins is the is the key here so

quite long have been to be an input it has a high impedance there's basically no voltage on that pin on the head put pin so I want one of those one through five heads when we send it to input it's like an open switch whenever we send it to an output it's going to have it is either going to be low - Tiger ground or technique tiny BCC so with that we can set any all the pens that input mode we set a couple of them to output and that's how want is I find one silo and that's how we power that led it across it so you can use a formula here to figure out the maximum

number of LEDs in a circuit you'll have basically the formula is n squared right and so for our five-minute circuit N squared is going to be 25 minus 5 so we have 22 bit for LEDs use a little circuit so obviously with the larger design you get bored LEDs you know a magic wand of something we're 12 I hope and see notes I don't know the number of my head that's a whole lot easy to control here is inspiration circuit that we use or any often that a pen microcontroller and modified little that here's our actual design without a power control or reset bypass capacitor which helps my controller operate a little more stable and a programming so make it

easy to have you bet here's my own PC board layout here and once we're done with the hardware design it's time to code and that's where I pass about to another difference of the teacher so there's a ton of examples out there Charlie flexing you could google it you can read up on it will see more explanation you'll find magic code I guarantee you'll confuse you but if you on the if you can read the code here the bottom of the basic essence of the way it works is you can see here you're sending the pink boat sending him to input set them all at first to disable all the LEDs and then you choose a couple of things that you

want instead of the bow of the boat and then you know right they'll set a high output signal on line a little output signal on the other and that's basically the essence of how it worked we decided to make this Balthus project they arduino ide we wanted to make it accessible for everybody else after the continent be able to get in and get started with this they've all been programmed with the bootloader so it's literally as easy as installing a couple of libraries and dark amino and then uploading your code to it if you have a program and speaking of programmers use any AVR programmer there's the USB ASB is a first one in the upper left a pris become a regular a

couple over really complement but even if you have an Arduino Uno lying around or something with a little bit of modification you use that as a program or two so some googly will show up some information on that and that is pretty much it so our team here we got a pretty diverse way to cover everything after you did like all the PC port layout Jim ability did the programming networking because our manager and flips us in time to get everything going and then it just kind of shifts around on all the projects do everybody's rules around that it's a lot of fun and so I guess at this time all open up if anybody has any questions you

think that you want to bring up here and also will be available afterwards we have a back by the DJ booth we have a room with the table set up if somebody has a broken back you might be able to repair it you can also come in to say hi and ask us questions but meantime is anybody have any questions that something you gave me done it this year

yeah yeah come up to see us if you have any questions we also have some some of the PC parts of the packages up here if you want to come take a look I've got a few other conference packages up here as well and we'll also have all these packet we got the bats pirates room so thanks for oh yeah and then as far as where Randy goes he I mentioned you can do those yourself but we actually have a whole bunch of programmers and we're going to available at little cost that's basically donate what you can and we'll have them back in the batch pirates room suggested donation around approximately five dollars can't afford

anything you know you're serving student that's great too so come back and see us and let's start hacking Thanks [Applause]

[Applause]

[Music] but also so pretty earth yeah okay so our website is on the back we have a little bit of information on the batch there may be adding additional information as well we have a page with the code with our reference design on there as well and by the way there might be an easter egg in the back you might be able to find it with the code you might find it just by playing around and accidentally using it to get more information is available there but also come talk to us if you have additional questions [Applause]