DEF CON 34 · United States · 2026
Pre-event RP2350B interactive Simple Add-On planned for DEF CON 34
ParallelLogic's Uberflux listing, public MalO_SAO source/design repository, and first-hand Hackaday.io project diary document a planned DEF CON 34 Simple Add-On based on the SCP-1471-A MalO setting. The marketplace's August 4, 2026 snapshot lists $50, 43 sold, and 57 remaining. The repository says the units are intended for online sale and DEF CON 34 handout in August 2026, identifies an RP2350B, 16 MB external flash, 1.5-inch 128 by 128 grayscale OLED, standard six-pin SAO header, USB-C, capacitive touch, potentiometer, buzzer, microphone, hall sensor, IMU, ambient-light sensor, IR transmit/receive, NFC/RFID, and LED banks. Its project diary confirms the work is ongoing and documents early prototype testing. The repository declares the work CC BY-SA 3.0. This is a source-backed pre-event independent badge record, not proof that a final revision has shipped, that all promoted functions are complete, that every radio/sensor interaction is safe or private, that a named third-party lore asset grants image rights, that the project is DEF CON-issued, or that it grants admission.
People
The MalO_SAO repository credits HotGlewd for PCB artwork, stickers, and promotional artwork. This preserves that source-named creative role without treating it as an image-reuse license or inferring hardware, firmware, manufacturing, or event responsibility.
SourceThe marketplace attributes SCP-1471 to LurkD and links its stated source/license context. This records the listing's named creative-work attribution only; it is not a claim of project affiliation, hardware authorship, or blanket image-reuse permission.
SourceThe MalO_SAO repository credits BitAssembly for pixel artwork. This is a narrow public creative credit and not a general reuse grant or proof of hardware, firmware, manufacturing, or event role.
SourceHackaday.io identifies Parallel Logic as the MalO project owner, while the marketplace uses the maker name ParallelLogic and the public repository is published under parallellogic-. This records a narrow public project/maker/publisher role without inferring final manufacturing, DEF CON organizational status, or image-reuse authority.
SourceMalO is a rare current SAO with a public design trail, a detailed first-hand development diary, and an explicit project-level license statement. The record can therefore distinguish published component and interface claims from a completed product: the builder documents prototype lessons, a source-derived host-port constraint, and evolving firmware/toolchain work. It also deliberately keeps the privacy, compatibility, independent-credential, third-party-lore, and image-rights boundaries visible rather than treating a large feature list as a finished, universally interoperable device.
The source repository identifies an RP2350B processor, 16 MB W25Q128 flash, USB-C, a 1.5-inch 128 by 128 grayscale SSD1327 OLED, a six-pin SAO header, capacitive touch, a 10 kOhm potentiometer, buzzer, microphone, hall-effect sensor, LSM6DS3TR IMU, LTR-308 ambient-light sensor, ST25DV04K 13.56 MHz RFID component, IR transmit/receive hardware, and an internal temperature sensor. The product listing says over fifty LEDs, while the diary describes two 24-device red-green LED banks. The repository also notes a source-described upside-down DEF CON 34 SAO-port orientation, 3.0 V supply, and 100 mA maximum current context. It does not establish the exact final LED count or populated revision, battery or independent power support, current draw in all modes, final electrical protection, IR range, RF/NFC behavior, sensor calibration, mechanical durability, emissions/compliance, assembly quality, or host-compatibility test matrix.
The public repository describes a compiled C library, graphics and file-system work on one core, and low-level sensor interfaces on the other; it links Arduino IDE material for the RP2350B. The project diary also describes an evolving Python/C++ split for the two cores, game, puzzle, screensaver, and message ambitions, and a USB port for user modification. No reviewed source publishes a tagged final firmware release, supported end-user firmware image, build environment, complete dependency inventory, install/flash guide, stable menu specification, final game/puzzle content, IR/NFC message protocol, security/privacy policy, update/recovery policy, test results, or a separate software license. The CC BY-SA 3.0 statement is recorded as the repository's declared work license, not as proof of every dependency's license or a warranty that all code and artwork share one grant.
The maker frames MalO around SCP-1471-A and credits the SCP Wiki source and CC BY-SA 3.0 in its marketplace listing. The repository says units will be sold online and handed out at DEF CON 34, while Hackaday.io calls the project ongoing and gives Parallel Logic as its public project owner. These sources establish a planned independent Hacker Summer Camp artifact with source-declared creative attribution, not permission to republish product images, proof of a completed distribution, an official DEF CON activity, conference endorsement, ticket entitlement, or a guarantee that every mentioned puzzle, interaction, or lore element will appear in shipped units.
Lifecycle
The sources name capacitive touch, a 10 kOhm potentiometer, buzzer, microphone, hall-effect sensor, LSM6DS3TR IMU, ambient-light sensor, internal temperature sensing, and input-voltage monitoring. They do not publish final calibration, microphone privacy behavior, sensor accuracy, environmental limits, sampling policies, current build completeness, or user safety guidance.
SourceThe marketplace and README describe IR send/receive plus a 13.56 MHz RFID/NFC component, while the diary discusses a planned short-message interaction over infrared. The sources do not establish a final message format, range, pairing/discovery rules, encryption/authentication, collision handling, data retention, interoperability, regulatory status, or user-consent model.
SourceThe sources describe games, puzzles, screensavers, messages, user modification through USB-C, a compiled C library, and an evolving Python/C++ two-core arrangement. No reviewed material supplies a tagged final firmware, end-user build/flash guide, challenge archive, stable UI specification, release hashes, update policy, test report, or final behavior guarantee.
SourceThe live listing shows $50, 43 sold, 57 remaining, and a DEFCON34 drop label. The repository and project diary describe online sale and intended August handout/pickup. These sources do not prove final run size, paid-order ledger, exact drop allocation, production, attendee handoff, shipment, delivery, refund, or post-event support.
SourceThe repository publishes public design/source directories, names HotGlewd for PCB/sticker/promotional artwork, BitAssembly for pixel artwork, and declares the work CC BY-SA 3.0. The marketplace separately credits the SCP-1471 source. These statements provide traceable project provenance but do not clear a particular product image, confirm every dependency's licensing, or prove that every third-party lore asset may be republished.
SourceThe repository identifies an RP2350B, 16 MB flash, USB-C, and a 1.5-inch 128 by 128 grayscale SSD1327 OLED. The listing says over fifty LEDs, while the diary describes two 24-device red-green LED banks. This creates a useful documented surface but not a final populated-unit specification, current budget, assembly record, or universal performance guarantee.
SourceThe repository points to a DEFCON34 MICD source and says the badge's SAO port is installed upside-down from the cited standard orientation, with a 3.0 V supply and 100 mA maximum-current context. It also says the MalO header can be inverted with a switch and jumper. This is a source-reported design consideration, not an official defect finding, a complete electrical specification, or proof of safe interoperability.
SourceOperational history
The record does not turn a feature list into a privacy guarantee, secure messaging claim, surveillance assurance, or universally suitable interaction model.
The catalogue preserves a relevant source note without declaring the official badge defective, safe for hot-swapping, or universally compatible.
The dossier links the public work without presenting it as a finished end-user firmware or support package.
The catalogue classifies MalO as an independent pre-event Simple Add-On associated with DEF CON 34, not an official conference credential, organizer-issued badge, or access item.
The record remains source-backed and image-free rather than copying product art, project renders, prototype photos, screenshots, social media, placeholders, or generated approximations.
The catalogue preserves a current, well-documented planned artifact without presenting it as a shipped or universally received conference item.
Readers can see substantive development evidence without mistaking a working or revised prototype trail for a finished, safety-qualified production specification.
The catalogue credits named sources without republishing lore artwork, product media, or project images on an assumed license basis.