{"id":16116,"date":"2019-08-20T09:10:09","date_gmt":"2019-08-20T17:10:09","guid":{"rendered":"https:\/\/www.palada.net\/index.php\/2019\/08\/20\/news-9859\/"},"modified":"2019-08-20T09:10:09","modified_gmt":"2019-08-20T17:10:09","slug":"news-9859","status":"publish","type":"post","link":"https:\/\/www.palada.net\/index.php\/2019\/08\/20\/news-9859\/","title":{"rendered":"DEF CON 27 retrospective: badge life redux"},"content":{"rendered":"

Credit to Author: Jean Taggart| Date: Tue, 20 Aug 2019 16:42:20 +0000<\/strong><\/p>\n

Kickstarter or DEF CON attendee? Be forewarned, this light overview contains some mild spoilers. If you want the purest \u201cDa Bomb\u201d experience with no web-based OSINT hints, read no further. I\u2019m not revealing any earth-shattering secrets here, but figured it was worth mentioning. Also DEF CON is over so\u2026<\/em><\/p>\n

Defcon is what you make it<\/h3>\n

Two years ago at DEF CON 25, I acquired the Ides of DEF CON<\/a> third-party electronic badge.<\/p>\n

\"\"<\/p>\n

This was a “non-electronic” badge year, if the loosely-followed rule of one year on, one year off for electronic badges is to be followed. (DC27 is a bit of a weird one, but I digress.)<\/p>\n

I wanted some blinky bling to hang around my neck and this badge felt eerily reminiscent of the DEF CON 18 Ninja Party badge.<\/a> That was one I had lusted over, but failed to acquire.<\/p>\n

\"\"<\/em>I can’t help but think that I didn\u2019t get to fully experience the Ides badge. There were too many other blinkies around my neck. The last few years saw my quest skewed toward acquiring as many as possible<\/a>, and sometimes this was at the detriment of experiencing the full package meal deal that some badges promise.<\/span><\/p>\n

Concentrate on one<\/h3>\n

This year, I swore I would not become an ambulatory Christmas tree\u2014again. I concentrated on one badge that promised interesting challenges, an opportunity to interact with strangers who had also purchased the badge, answer questions from fellow con goers about said badge, and to revel in the allure and prestige of having something exclusive.<\/p>\n

Enter “Da Bomb”<\/h3>\n

The\u00a0“Da Bomb”<\/a> badge, originating from the same team that made the aforementioned Ides badge is the one I chose.<\/p>\n

\"\"<\/p>\n

Thanks for name choice, I’m sure we’re not all on a list now. \"\ud83d\ude42\"<\/p>\n<\/div>\n

You can time travel and read the blog of the team behind this badge here.<\/a><\/p>\n

Encouraged interaction<\/h3>\n

Suffice to say, “Da Bomb” badge met and exceeded all my expectations. I fought many DEF CON attendees, some that had never had a single match, even quite late into the con. (It looks like my previous experience with the Ides wasn\u2019t so unique after all.)<\/p>\n

Every match was an opportunity to engage with a stranger. It might be only some friendly banter and a quick battle; it might lead to an in-depth discussion on the state of the infosec industry with a business card trade at the end. This alone justified the cost of the badge.<\/p>\n

Expect the unexpected<\/h3>\n

I fought a kind stranger that had reversed the firmware and given himself greater speeds, bigger bullets, more health, and had accrued 1,337 points of experience.<\/p>\n

Needless to say he trounced me, and then I let him push his custom firmware over the air, badge to badge! This is a feature I’m not even sure the creators of “Da Bomb” know about!<\/p>\n

Amazingly, I agreed to this. My hair stood on end while the process was taking place. Luckily for me, this kind stranger had no ill intent. This resulted in my having access to secret ships and the ability to edit values, such as the experience points count.<\/p>\n

I had the main badge organizer, @netik flash my badge at the hardware hacking village with a newer firmware to acquire the \u201cdoom guy\u201d as well as a bug fix for the game. These guys were still refining the product during the con! They offered support for defective badges, repairs, and help with any issues. They were kind enough to unlock additional LED modes at the same time.<\/p>\n

\"\"<\/p>\n

The health bar animation of the original Doom game as an optional marquee!<\/p>\n<\/div>\n

Participant surprise<\/h3>\n

I was one of the lucky few who got 3-D printed joystick nubs. One of the kickstarter backers had printed a bag of them and given them to the team. Thank you, random 3-D-printing fairy guy\/gal. Whoever you are, my thumbs are eternally grateful.<\/p>\n

\"\"<\/p>\n

Thumb saving nubs!<\/p>\n<\/div>\n

Sh**ty add-ons<\/h3>\n

The badge came with improved<\/a>\u00a0SAO<\/a> ports for additional bling capabilities. I refrained until the very end with populating these, as battery life was an important factor, seeing as I chose to engage in battle with any and all fellow badge owners. I even camped out at the entrance of the conference halls scouting for bomb badge owners.<\/p>\n

\"\"<\/p>\n

It’s gif with a hard “G”. I don’t care what the maker of the standard says.<\/p>\n<\/div>\n

The main game<\/h3>\n

The main battle screen, where your gamer tag and rank are displayed, is also where you can select the menus to engage in battle and peruse other badge capabilities. As you can see, while I did win most engagements, I lost a few as well.<\/p>\n

\"\"<\/p>\n

The XP is completely off due to the custom firmware.<\/p>\n<\/div>\n

The proximity map is where you can navigate and select from multiple possible enemies for engagements. The prospective opponent name is displayed in the upper left corner.<\/p>\n

\"\"<\/p>\n

Short names are best, as long ones can exceed the available space!<\/p>\n<\/div>\n

\u00a0<\/em>The special challenge coin<\/a> that kickstarter backers got as a bonus!<\/p>\n

\"\"<\/p>\n

Hedy Lamare!<\/p>\n<\/div>\n

All this, and we haven’t even touched on the cool stickers to decorate your laptop and guarantee the TSA gives you the evil eye, the dial tone generator, the RF spectrum analyzer, LED sign, the video player, the badge to badge radio chat, the Caesar cypher generator, the music player, and THE BITCOIN MINER.<\/em><\/p>\n

Gamified knowledge acquisition<\/h3>\n

Aside from the excuse for social interaction, the badge also has a JTAG header and shares many similarities with IoT devices providing a fun way to acquire valuable skills that are directly transferable to IoT research.<\/p>\n

The idesteam can be found on twitter here<\/a>. Documentation for the badge is here<\/a> and here<\/a>.<\/p>\n

I have only scratched the surface of what this badge can do. Time to “Jtagulate<\/a>” it and poke at the internals.<\/p>\n

Mr. Konami sent his regards. You can reach me @jean_taggart on Twitter.<\/p>\n

The post DEF CON 27 retrospective: badge life redux<\/a> appeared first on Malwarebytes Labs<\/a>.<\/p>\n

https:\/\/blog.malwarebytes.com\/feed\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Credit to Author: Jean Taggart| Date: Tue, 20 Aug 2019 16:42:20 +0000<\/strong><\/p>\n\n\n\n
<\/a><\/td>\n<\/tr>\n
Learn about one of our researcher’s badge experiences at DEF CON 27.<\/p>\n

Categories: <\/p>\n