DEF CON 34 · United States · 2026
Pre-event ATtiny1616 cedar interactive Simple Add-On for DEF CON 34
MakeItHackin's live Uberflux listing describes Root Access as a home-milled Tennessee-cedar add-on built for the DEF CON 34 badge and says it also works with a standard six-pin SAO header. Its August 4, 2026 marketplace snapshot lists $50 and a seller state of 15 sold from a listed total of 100, with BSides Las Vegas and Linq Circle Bar drop labels. The maker's public RootAccess guide independently identifies an ATtiny1616, ten addressable RGB pixels, eleven discrete LEDs, fifty built-in animations, a physical button, I2C address 0x50, and non-volatile USERROW state. It documents standalone operation and host-controlled lighting over I2C, plus separate GPIO 1 and GPIO 2 circuits that can be used as LED outputs or button inputs. This is a source-backed pre-event independent SAO record, not proof of final manufacture, actual drop handoff, every listed compatibility claim, safe electrical integration, DEF CON organizer affiliation, conference admission, or reusable-image rights.
People
The product listing identifies MakeItHackin as the maker and the public RootAccess repository is under the MakeItHackin account. This records a narrow public maker/publisher role without inferring individual engineering authorship, manufacturing responsibility, DEF CON organizational status, or image-reuse authority.
SourceRoot Access is unusually well documented for a current BadgeLife-style SAO: the maker publishes both a high-level product description and an operational interface guide. That lets the catalogue distinguish confirmed standalone behavior, documented host control, and a deliberate GPIO experimentation surface from an inferred generic blinky. It also retains the necessary limits: a public protocol is not a license, an individual host experiment is not a universal compatibility result, and attractive maker photos do not establish reusable image provenance.
The maker's guide identifies an ATtiny1616, ten individually addressable RGB pixels, eleven discrete LEDs of which four are PWM-capable, one physical button, I2C at address 0x50, and a standard six-pin SAO header. The product page adds home-milled Tennessee cedar, labelled breakout pads on both sides of the header, and independently selectable circuitry for GPIO 1 and GPIO 2. It says a GPIO line can be switched between button input and LED output modes, with a high/low polarity choice for the input path. No reviewed source supplies a schematic, BOM, board revision, component part numbers beyond the MCU, power/current budget, wood treatment or flammability information, electrical protection, SAO pinout validation, dimensions, production test record, compatibility matrix, compliance evidence, or final manufacturing report.
The public guide says a tap cycles its fifty built-in animations, a roughly 700 ms hold turns outputs off, and a roughly three-second hold stores a boot-time favorite in USERROW. It documents I2C mode selection, all-off control, raw discrete-LED and RGB-pixel writes, and a two-byte status read; malformed raw writes are described as rejected without partial state changes. The repository currently exposes only a README and images, not firmware source, a binary release, build toolchain, flash procedure, code license, hardware-design license, test suite, update/recovery policy, or supported-host library. The catalogue therefore records a public operating guide, not an open firmware release or guaranteed integration recipe.
The marketplace calls the board Root Access and frames it as hand-paired local cedar and a PCB, with grain and colour varying by unit. It labels the project for DEF CON 34 but currently lists drops at BSides Las Vegas 2026 and two Linq Circle Bar nights rather than a confirmed official DEF CON distribution point. Those source labels establish independent Hacker Summer Camp and BadgeLife context, not a DEF CON-issued credential, host-badge inclusion, organizer authorization, venue approval, attendee entitlement, completed pickup, or a final production quantity.
Lifecycle
The maker says GPIO 1 and GPIO 2 each have separate hardware, switches, LEDs, and button-input options, independent of the animation engine and I2C controls. It says a host can drive an LED path or receive button input, with selectable logical polarity. No schematic, safe-voltage/current envelope, host-pin map, test matrix, or compatibility guarantee is published.
SourceThe listing says the cedar was grown on a creator farm in Tennessee, milled at home, and paired with the PCB by hand; it also says the header pins break out to labelled solder pads on both sides. The source does not give wood treatment, dimensions, mechanical durability, fire-safety, sourcing chain, production count, assembly instructions, or final quality-control information.
SourceThe guide identifies I2C address 0x50 and documents built-in-mode selection, all-off control, raw discrete and RGB LED writes, plus a two-byte status response. It says malformed raw writes are rejected without partial state changes. This is a published operating interface, not a warranty of host compatibility, electrical safety, bus arbitration, command support by a particular badge, or a software library.
SourceThe guide identifies an ATtiny1616, ten addressable RGB pixels, eleven discrete LEDs, fifty animations, a button, and non-volatile USERROW storage for a favorite and last-played animation. It describes tap and hold behavior, but does not supply firmware source, a binary release, electronics test data, a battery/runtime profile, or final-unit verification.
SourceThe live MakeItHackin page lists $50 and a seller state of 15 sold from a listed total of 100, plus drops labelled BSides Las Vegas 2026 and two Linq Circle Bar nights. These time-specific seller figures do not prove final run size, paid-order ledger, onsite allocation, collection, shipment, delivery, refund, event authorization, or post-event support.
SourceOperational history
Readers can identify the intended experimentation surface without assuming every host, GPIO mode, cable, orientation, or shared bus configuration is safe or interoperable.
The catalogue links the documented interface without presenting it as an open-source firmware release, reproducible hardware design, or supported integration package.
The dossier does not convert a useful product and how-to description into an electrical integration certificate, universal host fit, or material-safety guarantee.
The catalogue classifies Root Access as an independent pre-event Simple Add-On associated with DEF CON 34, not an official credential, organizer-issued badge, or access item.
The record remains source-backed and image-free rather than copying listing photographs, repository images, screenshots, social media, placeholders, or generated approximations.
The catalogue preserves a dated seller snapshot without converting it into a completed DEF CON or Hacker Summer Camp distribution report.