BSides Des Moines
The June 13, 2026 Des Moines Security BSides edition whose iot-pwn bsidesdsm26 repository documents a CH585 RISC-V badge with an ISO 14443A NFC reader, SK6812 LEDs, and an eight-tag village-collection CTF with two static flags.
Ankeny, Iowa · United States · 2026
An official BSides Des Moines 2026 badge documented by the iot-pwn bsidesdsm26 repository as a WCH CH585 RISC-V board with an integrated ISO 14443A NFC reader, four SK6812 RGBW LEDs, a main control button, audio, and a three-layer CTF with two static flags, an eight-tag village-collection challenge, and a hash-based unlock, for the June 13, 2026 edition in Ankeny, Iowa.
Lifecycle
Eight hardcoded 4-byte UIDs map to village and event markers (HW Village, Talks1, Talks2, Solder Village, Blue Team, Vendor, CTF, Check-In); scanning a matching tag collects it and lighting all four LEDs blue requires all eight.
The firmware encodes two static flags (a plaintext constant and a Ghidra-disassembleable byte-assembled string) plus a hash-based unlock that celebrates a specific UID-derived LED combination.
The WCH CH585 integrates an ISO 14443A NFC reader supporting REQA, WUPA, anticollision, RATS, APDU relay, NTAG215 dump, and low-power card detect over the CH585 NFC peripheral.
Sending BOOTSEL over the USB-CDC serial console jumps into the WCH ISP bootloader for reflashing, complementing the flash station bulk-provisioning tooling.
Operational history
The catalogue records the verified firmware and challenge surface without inventing physical-form-factor, power, or hardware-design details.
The United States record remains source-backed and image-free rather than copying repository diagrams, screenshots, social media, placeholders, or generated approximations.