BSides Orlando 2026 · United States · 2026

BSides Orlando 2026 Electronic Badge

CH32V003 part-built solder-kit badge with the Lil Chompy text-adventure CTF

BSides Orlando 2026's attendee badge is a retro-futurist CH32V003 RISC-V board, a 1960s World's Fair vision of tomorrow with Lil Chompy the alligator at the wheel of a flying car, handed out as a part-built solder kit and programmed in the conference Soldering Village. Security BSides Orlando's official GitHub organization published the design from August 4, 2026; its 2026-badge repository was not publicly reachable from September 25 and reappeared on September 29-30 with the KiCad source, the EasyEDA full-colour-silkscreen Gerbers as ordered from JLCPCB, the badge firmware, a v1.0.0 release dated September 26, and a README stating that its programmer SAOs flashed all of the attendees' badges in the Soldering Village at BSides Orlando. Three SK6812MINI-E RGB LEDs form the flying car's headlights and a fingerprint-scanner indicator, four self-blinking LEDs light the tower spire and geodesic sphere, two capacitive touch pads sit under the fingerprint and Lil Chompy's head, one AAA cell feeds a TPS61021A boost converter, and the SAO header doubles as an SAOv3 host and a 115200-baud serial console running the Lil Chompy and the World's Fair text-adventure CTF.

EventBSides Orlando 2026
SeriesBSides Orlando
LocationFull Sail Live, 141 University Park Dr, Winter Park, Florida
CountryUnited States

People

Authors & Credits

PCB and firmware designer

Kevin Colley

The hardware/bsidesorl-v1.kicad_sch title block names Kevin Colley as the company field for BSides Orlando Badge 2026 rev R1, and the commits from the August 4 microcontroller addition through the September 1 JLCPCB production files are authored under that identity. The official Build Your Badge page separately credits the badge PCB to kcolley, and the repository README credits PCB and firmware to Kevin Colley. This is a title-block, commit-author, and build-page credit, not a claimed manufacturer, funder, or distributor role.

Source

badge artist

Shep

The official Build Your Badge page credits the badge art to Shep. Only the handle is published; no fuller name or artwork licence is given.

Source

event, official GitHub organization, and planned badge-design publisher

Security BSides Orlando

The organization profile identifies Security BSides Orlando as the official GitHub organization, links the official event site, describes badge firmware/design repositories, and publishes the public 2026-badge source. This is a source-publisher credit, not an individual design, manufacture, artwork, fulfillment, or image-reuse attribution.

Source

initial-design commit author

Jose Rodriguez

Jose Rodriguez authored the August 4, 2026 initial discrete-LED design commits, and the repository's Jose_3mm_Led library symbol name preserves that initial-design attribution in the retained blink LEDs. This is a commit-author credit, not a claimed final-revision, manufacturing, or distribution role.

Source

Why It Mattered

It turns a pre-event design trail that briefly vanished the day before the conference into a complete organizer-published post-event archive: hardware as ordered, firmware source and binaries, a factory-programming workflow, a two-flag CTF, and an organizer statement about on-site programming. The record keeps the remaining gaps (badge count, licence, images) explicit instead of filling them in.

Hardware

The rev R1 KiCad schematic (dated 2026-08-31, title block naming Kevin Colley) instantiates U1 as a CH32V003F4P6 in TSSOP-20, D1-D3 as SK6812MINI-E reverse-mount addressable RGB LEDs on PC6 (D1/D2 headlights, D3 scanner), D5 as a breathing 3 mm LED on the tower spire and D6-D8 as fast-blink 3 mm LEDs on the geodesic sphere, driven open-drain, D4 as a TPD4E05U06 ESD array protecting the J1 SAO connector on the Simple_Addon_v2 2x3 socket, BT1 as a 1x AAA cell on a BH-AAA-1X holder with a TPS61021ADSGR boost converter and Q1 SI2302S, and SW1 as the MST22D18G2 125 switch. Two capacitive touch pads on PA2 (fingerprint) and PA1 (Lil Chompy's head) are read by ADC slope sensing. SAO GPIO1/GPIO2 on PD0/PD1 double as the console UART, and PD1 is also the SWIO debug pin. A September 29, 2026 commit adds the EasyEDA Pro project and Gerbers as ordered: JLCPCB required EasyEDA output for full-colour silkscreen, the board was ordered as a 3x5 panel, and a JLC re-panelisation left the colour art slightly misaligned. The repository still gives no production count, measured runtime, or safety result.

Software & Apps

The firmware (PlatformIO on ch32fun, about 16.3 KB of the CH32V003's 16 KB usable flash) drives headlight modes (normal, hazards, rainbow, police, colour crossfade), a fingerprint-scan animation, spire and sphere LEDs, an SAOv3 host with hot-plug discovery and a Hack@UCF SAO unlock, and a post-flash self-test triggered over SWIO. Its serial console runs Lil Chompy and the World's Fair, a text adventure that uses the real touch pads and prints a flag on completion, saves the solve to flash, and unlocks a PEEK command for dumping memory; a second flag sits in a flash page hidden behind the boot-mirror alias. The v1.0.0 release (published September 26, 2026) carries firmware.bin (16,304 bytes, SHA-256 467fb2778a4d7e0b6261a14a5cd5b43edad5ca57e82f64904ce966f6eba7abee), firmware.elf, and the pico_rvd_factory.uf2 probe image used on the conference programmers. The SAOv3 host library submodule was not yet public at the September 30 push, and the repository still declares no licence.

Lore

The official site names September 25 workshops and a September 26 conference at Full Sail Live; its Build Your Badge page, merged on the conference day, credits the badge PCB to kcolley and the art to Shep and walks attendees through soldering four LEDs, the SAO connector, the power switch, and the AAA holder. The repository told the design story in commits from Jose Rodriguez's August 4 discrete-LED design through Kevin Colley's September 1 production files. On September 25, one day before the conference, the repository and its metadata endpoint returned 404 while the organization's older repositories stayed public; it reappeared on September 29-30 with the firmware, the as-ordered EasyEDA project, and README instructions for building the RP2040-Zero programmer SAOs that, in the README's words, programmed all of the attendees' badges in the soldering village at BSides Orlando. The official event page itself still carried pre-event wording on October 1, 2026, so the completion rests on the organizer repository rather than a site wrap-up.

Lifecycle

Add-ons & Upgrades

assembly format official event-day build guide

Part-built attendee solder kit

The official Build Your Badge page says the badge arrives with the microcontroller, reverse-mounted LEDs, and tiny parts pre-soldered, and that attendees solder four LEDs and the SAO connector on the front and the power switch and battery holder on the back before inserting an AAA battery, with help at the Soldering Village.

Compatibility: BSides Orlando 2026 badge as described on the official build page; the page does not say who received a kit or how many were handed out.

Source
badge CTF organizer firmware source and release

Lil Chompy and the World's Fair console CTF

A text adventure on the 115200-baud SAO-header console: players hold the real fingerprint pad to pass the fairgrounds gate, tap Lil Chompy's head to wake him, and find the flight passkey to fly up the Sky Spike. Beating it prints a flag for the event CTFd site, lights a second sphere LED, unlocks rainbow headlights, and enables PEEK, which can dump the firmware; a second flag is readable only at the real flash address, not the boot-mirror alias.

Compatibility: BSides Orlando 2026 Electronic Badge with a 3.3 V USB-serial adapter on the SAO header

Source
event association official organization source-backed

Official organization and 2026 badge-repository connection

BSides Orlando's official site links the GitHub organization, whose profile calls itself the official GitHub organization for Security BSides Orlando and describes its Badge repositories as electronic badge firmware and designs. That organization published the public 2026-badge project. This establishes an organizer-published planned badge-design trail, not attendee inclusion, production completion, a credential function, or delivery.

Compatibility: BSides Orlando 2026 Electronic Badge

Source
expansion protocol organizer firmware source

SAOv3 host with Hack@UCF SAO unlock

The badge acts as an SAOv3 host over I2C with boot-time and hot-plug discovery and optional LED mirroring; attaching a Hack@UCF SAO permanently unlocks a colour-crossfade headlight mode and a gold scanner idle. The SAOv3 host library submodule was not yet public at the September 30 push.

Compatibility: SAOv3 and static SAO add-ons on the BSides Orlando 2026 badge

Source
factory programming tool organizer documentation and release asset

RP2040 programmer SAO

A WaveShare RP2040-Zero running picorvd-for-badges, wired as an SAO-header probe powered by the badge, flashes firmware.bin over SWIO and triggers the badge self-test; the README says these programmer SAOs programmed the attendees' badges in the Soldering Village and gives build instructions.

Compatibility: BSides Orlando 2026 Electronic Badge; pico_rvd_factory.uf2 from the v1.0.0 release

Source
generated manufacturing files public pre-event production-ready design

JLCPCB production outputs

The September 1 commits added a full JLCPCB Gerber set, drill files, BOM, and CPL placement file and declared the final schematic ready to order. These outputs document a manufacturing-ready design; they do not evidence a placed order, fabricated boards, assembly, attendee allocation, or distribution.

Compatibility: BSides Orlando 2026 Electronic Badge

Source
input surface organizer firmware source

Capacitive fingerprint and Lil Chompy touch pads

Two ADC-slope touch pads: holding the fingerprint pad runs a 5-10 second blue scan ending in green or red flashes, and tapping or holding Lil Chompy's head cycles the headlight modes or switches to police lights.

Compatibility: BSides Orlando 2026 Electronic Badge

Source
planned controller schematic- and BOM-backed design detail

CH32V003F4P6 microcontroller

The revised schematic instantiates U1 as a WCH CH32V003F4P6 RISC-V microcontroller in a TSSOP-20 package, and the production BOM carries its LCSC part number. The September 29-30 firmware release and README document its use: SPI-DMA-driven SK6812 output, ADC touch sensing, open-drain beacon LEDs, I2C1 SAO hosting, and a UART console sharing the SWIO pin, flashed in production by an RP2040 picorvd probe.

Compatibility: BSides Orlando 2026 Electronic Badge

Source
planned expansion surface schematic-, library-, and commit-backed design detail

SAO v2 expansion connector with ESD protection

J1 is valued SAO Connector on the repository-local Simple_Addon_v2 2x3 socket, and an August 13 commit message names the added I2C pull-ups, SAO ESD protection, and series resistors, realized as D4 TPD4E05U06 and the 33R series resistors. The sources do not publish the pinout mapping beyond the library standard, tested host compatibility, or an expansion ecosystem claim.

Compatibility: BSides Orlando 2026 Electronic Badge

Source
planned lighting circuit schematic-backed design detail

Retained Breathing and Fast Blink 3 mm LEDs

The earlier discrete design survives in the revised schematic as D5, valued Breathing 3mm LED, and D6 through D8, valued Fast Blink 3mm LED, on 3 mm through-hole footprints. The sources do not identify their color, supplier, current draw, blink pattern, or population outcome.

Compatibility: BSides Orlando 2026 Electronic Badge

Source
planned lighting circuit schematic- and BOM-backed design detail

Three SK6812MINI-E reverse-mount addressable LEDs

D1 through D3 are SK6812MINI-E reverse-mount addressable RGB LEDs, carried in the production BOM. The sources do not document their animation behavior, control mapping, mounting face artwork interaction, or populated outcome.

Compatibility: BSides Orlando 2026 Electronic Badge

Source
planned power surface schematic- and BOM-backed design detail

Single AAA cell with boost converter

BT1 is valued 1x AAA on a BH-AAA-1X holder footprint, and U2 is a TPS61021ADSGR boost converter with Q1 SI2302S, replacing the earlier CR2032 Keystone-holder framing of the August 4 snapshot. The sources do not state an included cell, chemistry, runtime, measured current budget, or safety result.

Compatibility: BSides Orlando 2026 Electronic Badge

Source

Operational history

Issues & Camp Impact

allocation and quantity boundary note

The organizer README says the programmer SAOs programmed all of the attendees' badges in the Soldering Village, and the September 29 commit documents a JLCPCB order on a 3x5 panel, but no source gives the number of boards ordered or handed out, a ticket-tier rule, leftover stock, or failures. The 2026-badge repository was not publicly reachable from September 25 through September 29, and the official event page still had no wrap-up on October 1.

The record treats attendee programming at the event as organizer-stated, without asserting a count or that every registrant received a badge.

Confidence
organizer repository and official build page
Status
on-site programming documented; badge count and ticket inclusion unpublished
Timeframe
post-event as of 2026-10-01
Source note
2026-badge README and EasyEDA order commit; BSides Orlando official event and Build Your Badge pages; September 25 to October 1, 2026 rechecks.
design-credit and distribution-role gap note

The rev R1 schematic title block names Kevin Colley, whose commits carry the August 4 microcontroller addition through the September 1 production files, while Jose Rodriguez authored the August 4 initial discrete-LED design whose Jose_3mm_Led library symbols survive in the retained blink LEDs. The organization profile establishes Security BSides Orlando as publisher, but the reviewed public material does not name a manufacturer, assembler, funder, or distribution owner, and the repository predates any stated official event-page badge announcement.

The catalogue credits the title-block designer, the initial-design author, and the organization without assigning manufacturing, artwork-ownership, or fulfillment responsibility beyond what the public sources state.

Confidence
official organization and public repository review
Status
named designers and organization credited; manufacture and fulfillment roles not recovered
Timeframe
source pass on 2026-09-21
Source note
hardware/bsidesorl-v1.kicad_sch title block, repository commit authors, and Security BSides Orlando GitHub organization profile.
final hardware, manufacturing, and electrical-safety gap note

The reviewed files now publish Gerbers, a drill set, a production BOM, and a CPL file, but they still do not document a placed order, received boards, assembly, powered test, measured current budget, battery life, thermal or fault behavior, cell inclusion, compliance result, or a final populated revision.

Readers can inspect a manufacturing-ready source design without treating it as a completed, safe, validated, or reproducible attendee device.

Confidence
KiCad source, BOM, and production-file snapshot
Status
production-ready design documented; final board unconfirmed
Timeframe
pre-event source pass on 2026-09-21
Source note
hardware/bsidesorl-v1.kicad_sch, hardware/bsidesorl-v1.kicad_pcb, and hardware/jlcpcb/ production files.
firmware, release, and license gap note

The republished repository now carries firmware source, a v1.0.0 release with binaries, and build and flashing documentation, but still has no LICENSE file or detected licence, and its saov3-lib submodule pointed at a library the README says was not yet public, so a clean source build is not yet reproducible from public material alone.

The dossier documents published firmware behaviour and hashes without implying open-source terms, redistribution permission, or a reproducible build.

Confidence
public repository tree and GitHub metadata
Status
firmware and release published; no repository license; SAOv3 library pending
Timeframe
post-event pass on 2026-10-01
Source note
2026-badge README, firmware README, .gitmodules, release v1.0.0, and GitHub metadata on the 2026-10-01 pass.
missing rights-cleared image note

No BSides Orlando 2026 Electronic Badge image is published because the official event and GitHub sources do not pair a selected factual badge photo or upstream raster with a reusable license or explicit permission basis, attribution, source URL, and processing notes. The repository's front and back renders, programmer photo, and artwork files carry no stated license.

The record remains source-backed and image-free rather than copying PCB screenshots, vector artwork, GitHub previews, event graphics, social media, placeholders, or generated approximations.

Confidence
local project policy
Status
needs licensed original replacement
Timeframe
current catalogue build
Source note
badge.gallery image policy; BSides Orlando official site; bsidesorlando organization and 2026-badge repository.

Resources

Sources