Car Hacking Village at DEF CON 32 · United States · 2024

Car Hacking Village DC32 Main Badge

RP2040 CAN-bus badge with CHV SAO ecosystem

Car Hacking Village's DEF CON 32 badge ecosystem centered on a main RP2040 badge with CAN-network surfaces, four CHV SAO connectors, public board and firmware repositories, public CTF challenge notes, and IOActive's separately documented key-fob badge / SAO build.

Car Hacking Village DEF CON DEF CON 32 United States RP2040 CAN SAO Vehicle Network CTF Key Fob North America

EventCar Hacking Village at DEF CON 32

SeriesCar Hacking Village

LocationLas Vegas Convention Center, Las Vegas, Nevada / DEF CON 32

CountryUnited States

People

Authors & Credits

Speedometer SAO challenge submitter

Uberwoozle

The public DC32 CTF challenge archive names Uberwoozle as submitter for the Speedometer SAO rock-paper-scissors challenge.

Source

TUF challenge submitter

Red Balloon Security

The public DC32 CTF challenge archive names Red Balloon Security as submitter for the TUF challenges.

Source

badge publisher and repository owner

Car Hacking Village

The official CHV page and GitHub organization publish the DEF CON 32 badge lineup, board archive, firmware archive, CTF notes, and SAO specification.

Source

key-fob badge build-series publisher

IOActive

IOActive published the three-part build series for the DEF CON 2024 Car Hacking Village key-fob badge / SAO.

Source

vehicle-network challenge submitter

Rivian

The public DC32 CTF challenge archive names Rivian as submitter for several vehicle-network challenges.

Source

Why It Mattered

It adds the automotive-security village line to the worldwide compendium: the badge acted as a hands-on CAN lab, a platform for SAO peripherals, and a CTF target where attendees could enumerate vehicle-like traffic, inspect the board, use UART, and interact with speedometer and key-fob style add-ons.

Hardware

The official CHV page documents the 2024 main badge, RP2040 controller, four CAN networks, a dry CAN connector, and four SAO connectors. The public board repository preserves KiCad PCB and schematic files, PCBWay BOM material, pick-and-place files, footprints, and plot outputs. The CHV SAO specification replaces the normal SAO I2C pins with CAN TX and CAN RX over a 3.3 V SAO-style connector. IOActive's key-fob series documents a DEF CON 32 CHV key-fob badge / SAO design around a dsPIC33CK32MP502 microcontroller, CAN transceiver, five NeoPixels, touch buttons, IR receiver, 125 kHz RFID receive, and 433 MHz transmit behavior.

Software & Apps

The firmware repository describes a car-on-a-board firmware stack for emulating a car on one PCB, with C and Python firmware areas, manufacturer verification material, RP2040 flashing instructions, BootSel/reset workflow, and socketcan/cansniffer support. The public DC32 CTF challenge archive documents main-badge CAN enumeration, random CAN traffic, a UART Python REPL flag path, and a Speedometer SAO rock-paper-scissors challenge, alongside Red Balloon Security and Rivian vehicle-network challenges.

Lore

Car Hacking Village's 2024 page listed the main badge, kids badge, Speedometer SAO, key-fob SAO, PRNDL SAO, and other village badge artifacts as limited DEF CON 32 hardware. IOActive's three-part writeup framed the key-fob project as an exclusive DEF CON 2024 Car Hacking Village badge built to fit the CHV CAN SAO ecosystem.

Lifecycle

Add-ons & Upgrades

CAN SAO and key-fob badge source-backed

IOActive key-fob badge / SAO

IOActive's build series documents a key-fob badge / SAO for DEF CON 32 CHV with dsPIC33CK32MP502, CAN transceiver, NeoPixels, touch buttons, IR, 125 kHz RFID receive, and 433 MHz transmit surfaces.

Compatibility: Car Hacking Village DC32 Main Badge and key-fob SAO

Source

CAN SAO challenge source-backed

Speedometer SAO challenge

The public CTF archive ties the Speedometer SAO to rock-paper-scissors behavior, CAN messages, firmware reversing, and LCD output used in the challenge.

Compatibility: Car Hacking Village DC32 Main Badge and Speedometer SAO

Source

SAO firmware lifecycle source-backed

Speedometer SAO firmware archive

The public Speedometer SAO firmware repository is MIT-licensed and says it includes CTF problem and notes material built on a display library.

Compatibility: Car Hacking Village DC32 Speedometer SAO

Source

add-on specification source-backed

CHV CAN SAO connector

The CHV SAO spec provides 3.3 V and ground while replacing normal SAO I2C with CAN TX and CAN RX for vehicle-network add-ons.

Compatibility: Car Hacking Village DC32 Main Badge and SAOs

Source

badge challenge archive source-backed

Main-badge CTF paths

The public challenge archive documents main-badge CAN enumeration, a physical-inspection flag under the battery pack, random traffic, and a UART Python REPL path.

Compatibility: Car Hacking Village DC32 Main Badge

Source

firmware platform source-backed

Car-on-a-board firmware

The firmware repository describes firmware intended to emulate a car on one PCB, with C and Python areas, verification files, RP2040 flashing workflow, and socketcan/cansniffer output.

Compatibility: Car Hacking Village DC32 Main Badge

Source

vehicle-network badge platform source-backed

RP2040 four-CAN main badge

The official CHV page documents the 2024 main badge with an RP2040, four CAN networks, a dry CAN connector, and four SAO connectors, while the public board tree preserves KiCad and production files.

Compatibility: Car Hacking Village DC32 Main Badge

Source

Operational history

Issues & Camp Impact

image-rights boundary note

The official CHV page, IOActive build posts, and GitHub repositories include useful badge-related imagery, but this pass did not recover a specific badge photo or full-board render paired with reusable image rights, attribution, and processing provenance for publication.

The record remains image-free rather than copying event-page images, blog photos, repository images, social previews, screenshots, generated art, or approximate badge artwork.

Confidence: local project policy
Status: needs licensed original replacement
Timeframe: current catalogue build
Source note: badge.gallery image policy, Car Hacking Village DEF CON 32 page, IOActive key-fob badge posts, and public CHV repositories.

missing rights-cleared image note

No Car Hacking Village DC32 Main Badge image is published because the current public source trail has not been paired with a reusable original badge or artifact photo or official upstream raster render with source URL, license or permission basis, attribution, and processing notes.

The United States record remains source-backed and image-free rather than copying source-page media, documentation screenshots, event photos, social media, placeholders, or generated approximations.

Confidence: local project policy
Status: needs licensed original replacement
Timeframe: current catalogue build
Source note: badge.gallery image policy and Car Hacking Village DEF CON 32 official page, public CHV repositories, CTF challenge archive, SAO specification, and IOActive key-fob badge build series.

repository-license caveat note

GitHub reported no detected license for the DC32 main badge board, main badge firmware, CTF challenge, and CHV SAO specification repositories in this pass, while the separate Speedometer SAO firmware repository reports MIT.

The catalogue cites those repositories as source evidence but does not treat repository images, board renders, firmware, CTF material, or documentation as broadly reusable publication assets without explicit license coverage.

Confidence: GitHub metadata
Status: documented for source only
Timeframe: current catalogue build
Source note: GitHub repository metadata for car-hacking-village/DC32_CHV_Badge_Board, DC32_CHV_Badge_Firmware, DC32_CTF_CHALLENGES, CHV_SAO_Specification, and DC32_CHV_Speedometer_Firmware.

village-badge classification note

This record belongs to Car Hacking Village's DEF CON 32 hardware ecosystem and is not the official DEF CON 32 Human admission badge.

The compendium keeps the badge under its own village lineage while preserving DEF CON event context and avoiding an attendee-wide DEF CON main-badge claim.

Confidence: official and repository source trail
Status: documented
Timeframe: DEF CON 32
Source note: Car Hacking Village official page, CHV repositories, and IOActive build-series context.

Resources

CHV SAO specification add-on specification · Car Hacking Village SAO connector specification documenting the CAN TX/RX pin substitution, voltage, footprint, and design constraints. Car Hacking Village DEF CON 32 badges official village badge page · Official CHV event page for the DEF CON 32 badge ecosystem, including the main badge, kids badge, Speedometer SAO, key-fob SAO, PRNDL SAO, and CTF context. DC32 CHV CTF challenges CTF archive · Public challenge archive documenting main-badge CAN, UART, random-traffic, Speedometer SAO, Red Balloon Security, and Rivian challenge surfaces. DC32 CHV badge board hardware source · Public CHV repository for the DC32 main badge board archive. DC32 CHV badge firmware firmware source · Public CHV firmware repository for the main badge car-on-a-board firmware and verification material. DC32 CHV board design tree hardware source tree · KiCad board, schematic, PCBWay BOM, position files, footprints, and plot outputs for the main badge board. DC32 CHV firmware README firmware documentation · Build, flash, RP2040 BootSel/reset, and socketcan/cansniffer workflow documentation for the main badge firmware. DC32 Speedometer SAO firmware SAO firmware source · MIT-licensed firmware repository for the DC32 Speedometer SAO, referenced by the public CTF challenge archive. IOActive key-fob badge part 1 project writeup · First part of IOActive's DEF CON 2024 CHV key-fob badge build series, used for key-fob SAO purpose, component selection, and village context. IOActive key-fob badge part 2 project writeup · Second part of the IOActive build series, used for firmware, peripherals, and bring-up context. IOActive key-fob badge part 3 project writeup · Final IOActive build-series part, used for fabrication, assembly, conference deployment, and lessons learned.

Sources