Add-on dossier
A linkable lifecycle record for hardware expansions, app ecosystems, firmware upgrades, cases, radio parts, and post-event badge experiments.
The firmware encodes two static flags (a plaintext constant and a Ghidra-disassembleable byte-assembled string) plus a hash-based unlock that celebrates a specific UID-derived LED combination.
Badge context
Repository license source confirming GPL-2.0 terms for the badge firmware.
Official BSides Des Moines source for the June 13, 2026 edition in Ankeny, Iowa, United States.
iot-pwn repository for the BSides Des Moines 2026 badge firmware, published under GPL-2.0, documenting the CH585 RISC-V NFC badge, the flash station provisioning tooling, and the three-layer CTF.
Source trail
Primary official source for the June 13, 2026 Ankeny, Iowa edition and United States Security BSides context.
Primary repository source for the WCH CH585 RISC-V microcontroller with integrated ISO 14443A NFC reader, four SK6812 RGBW LEDs, main and boot buttons, audio tone generator, USB-CDC console, the eight-tag village-collection CTF, two static flags, the hash unlock, and the BOOTSEL bootloader backdoor, published under GPL-2.0.
Primary license source confirming GPL-2.0 terms for the badge firmware.