DEFCON 22: Badge Talk

LosT_giving-badge-talk_defcon22

I got a great seat on the main floor for the first big DEFCON 22 talk which is a welcome to the con and discussion of the badge hardware. [LosT], the creator of this year’s badge, started the discussion with a teaser about the badge… there’s a phone number hidden as part of the challenge. [LosT] took a call from someone chasing the puzzles. The guy was in the audience which was pretty fun.

The process of building a puzzle that can be solved at DEFCON is really tough. How do you make it just hard enough that it won’t get pwned right away but easy enough that a large number of attendees will be able to figure it out during the weekend? The answer is to build a secure system and introduce strategic flaws which will be the attack vectors for the attendees solving the badge challenge.

defcon22-badge-cut-traces-to-remove-components

Of course the badge can be used as a development platform. The populated electronics on the board all have these nice little footprints which can be cut to disconnect them from the chip. The breakout headers on either side of the board allow you to connect headers for your own uses. Great idea!

defcon-22_badge-lanyard-glyphs

The back of the lanyards have special characters on them too. This encourages community at the conference. To solve the puzzle you need to find others with different lanyards. Compare the glyphs and crack the code (so far I have no clue!!).

Know what I’m doing wrong? Have suggestions on where to go from here? I’ll be checking the comments!

Comments

  1. Chris says:

    Perhaps the LEDs make a POV thingy. You should post a video of the badge doing it’s thing so those of who aren’t there can see it. Please.

  2. NotArduino says:

    There are bold white chinese numbers on each lanyard. You have 9, 10, and 5 there. The other bold white symbols look Korean but I am not sure. Perhaps the glyphs connect together in an unsual topology, like the blueprint cubes in Contact the movie

  3. Chris says:

    The gylphs certainly contain the same shape with various lines removed. You could start with the base shape and then figure out what removing the lines means. Draw one on a napkin with all the lines combined from one color lanyard. The black lanyards are in one orientation. The blue one is perpendicular to the black ones.

  4. Bob says:

    Those aren’t jumper blocks that you can cut. They’re part of the code. Why would you series jumper blocks? and if you look carefully the vias at the top don’t connect to them.

    • pelrun says:

      Look closer, the vias do connect.

      • Rich says:

        There might also be a pattern to the series of glyphs, if you’re talking about the lanyard. I’ve had a couple drinks and am just bouncing ideas around here.

        Follow them from left to right, you end up with two rectangles and a single updward line, with an underscore. It looks kind of like a horizontal key.

        • Rich says:

          Just noticed that they were giving out another set of glyphs and Chinese characters on the lanyards Saturday morning. Can’t post a pic from here, but the ones I’m looking at are not the same. I receieved mine on 08/09

  5. William G says:
  6. Brian Weaver says:
  7. gdogg says:

    there are a few different sets of fonts that spell ‘human’. The pads connecting the LEDs are silkscreened differently between badges, and the gpio breakout has square or round pads in a different patterns depending the badge. On top of that there’s a different Korean character at the top right of the back of the badge.

    • Brian Weaver says:

      I also noticed the different ‘human’ writing. My first guess is that badges were made at different times and/or by different manufacturers. My point is: it might not mean anything.

      I spent an unnecessary amount of time trying to find hidden clues in the phrases the badge randomly transmits:
      DO NOT QUESTION AUTHORITY
      NO IMAGINATION
      SUBMIT
      OBEY
      CONFORM
      BUY
      NO INDEPENDENT THOUGHT
      STAY ASLEEP
      WATCH TV
      MARRY AND REPRODUCE
      CONSUME
      EAT
      WORK EIGHT HOURS

      Here’s some crappy perl I wrote to try and find numeric hints: http://pastebin.com/FVz1xPvZ

      I found only random distributions of phrases and spaces.

  8. d4e5v8 says:

    If you are still interested in the Lanyards, here is the methodology to solve that part of the Badge puzzle: http://dc22badge.wikia.com/wiki/Lanyard_Information
    -d4e5v8

  9. Melissa says:

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

Follow

Get every new post delivered to your Inbox.

Join 93,964 other followers