yuawn / Alan Lee
Speaker Deck page and transcript credit yuawn and Alan Lee for the HITCON Badge 2019 TrustZone challenge material.
SourceHITCON CMT 2019 · Taiwan · 2019
Taiwan-shaped ARM TrustZone challenge badge
An official HITCON CMT electronic board badge shaped around Taiwan, combining collectable conference identity, 24 LED unlock states, sponsor booth challenges, a snake warm-up, and ARM TrustZone exploitation stages.
People
Speaker Deck page and transcript credit yuawn and Alan Lee for the HITCON Badge 2019 TrustZone challenge material.
SourceOfficial source for the CMT 2019 badge event mechanic and Taiwan-shaped board framing.
SourceIt adds an Asia-Pacific root record for conference badges that are not only wearable art but also embedded-security challenge targets tied to sponsors, LEDs, TrustZone separation, and public exploit documentation.
The event page describes an electronic board badge based on Taiwan imagery with unlockable LED lights. The challenge deck documents 24 LEDs, 11 patterns, a command-line interface, ARM TrustZone on an M2351-class MCU, non-secure and secure execution stages, and challenge state stored across secure/non-secure boundaries.
The public deck and repository point to released source code, firmware, hardware design, and exploit material. The badge command line exposed commands such as show, info, unlock, setname, clear, ping, ls, cat, echo, alias, whoami, and help.
HITCON tied the badge to booth participation: solving the board puzzle or completing sponsor challenges unlocked LEDs, and unlocking all county/city LEDs gave attendees a chance at the HITCON lottery game.
Lifecycle
Attendees could unlock badge LEDs by solving the board puzzle or completing sponsor booth challenges, with all LEDs unlocked leading to a HITCON lottery chance.
SourceThe badge challenge used ARM TrustZone separation with non-secure and secure stages, command-line interaction, snake warm-up behavior, and unlock states.
SourceOperational history
The entry ships without a hero image rather than using generated, placeholder, or unlicensed imagery.