Hacker Con Badges

BSides Orlando

BSides Orlando 2026

The completed September 26, 2026 Central Florida Security BSides conference at Full Sail Live, with September 25 pre-conference workshops. Its official GitHub organization published a CH32V003 LED badge design from August 4, 2026; the 2026-badge repository was not publicly reachable from September 25 and reappeared on September 29-30 with the badge firmware, a v1.0.0 release dated September 26, the EasyEDA Gerbers as ordered from JLCPCB, and a README stating that its programmer SAOs flashed all of the attendees' badges in the Soldering Village at BSides Orlando. The official Build Your Badge page, merged on the conference day, describes the part-built attendee solder kit and credits kcolley for the PCB and Shep for the art. The official event page still read pre-event on October 1, 2026, so the edition is marked completed on the organizer repository's post-event statement; the number of badges handed out is not published.

Full Sail Live, 141 University Park Dr, Winter Park, Florida · United States · 2026

BSides Orlando 2026 Electronic Badge

BSides Orlando 2026's attendee badge is a retro-futurist CH32V003 RISC-V board, a 1960s World's Fair vision of tomorrow with Lil Chompy the alligator at the wheel of a flying car, handed out as a part-built solder kit and programmed in the conference Soldering Village. Security BSides Orlando's official GitHub organization published the design from August 4, 2026; its 2026-badge repository was not publicly reachable from September 25 and reappeared on September 29-30 with the KiCad source, the EasyEDA full-colour-silkscreen Gerbers as ordered from JLCPCB, the badge firmware, a v1.0.0 release dated September 26, and a README stating that its programmer SAOs flashed all of the attendees' badges in the Soldering Village at BSides Orlando. Three SK6812MINI-E RGB LEDs form the flying car's headlights and a fingerprint-scanner indicator, four self-blinking LEDs light the tower spire and geodesic sphere, two capacitive touch pads sit under the fingerprint and Lil Chompy's head, one AAA cell feeds a TPS61021A boost converter, and the SAO header doubles as an SAOv3 host and a 115200-baud serial console running the Lil Chompy and the World's Fair text-adventure CTF.

Lifecycle

Add-ons & Upgrades

BSides Orlando 2026 Electronic Badge official event-day build guide

assembly format

Part-built attendee solder kit

The official Build Your Badge page says the badge arrives with the microcontroller, reverse-mounted LEDs, and tiny parts pre-soldered, and that attendees solder four LEDs and the SAO connector on the front and the power switch and battery holder on the back before inserting an AAA battery, with help at the Soldering Village.

Compatibility: BSides Orlando 2026 badge as described on the official build page; the page does not say who received a kit or how many were handed out.

BSides Orlando 2026 Electronic Badge organizer firmware source and release

badge CTF

Lil Chompy and the World's Fair console CTF

A text adventure on the 115200-baud SAO-header console: players hold the real fingerprint pad to pass the fairgrounds gate, tap Lil Chompy's head to wake him, and find the flight passkey to fly up the Sky Spike. Beating it prints a flag for the event CTFd site, lights a second sphere LED, unlocks rainbow headlights, and enables PEEK, which can dump the firmware; a second flag is readable only at the real flash address, not the boot-mirror alias.

Compatibility: BSides Orlando 2026 Electronic Badge with a 3.3 V USB-serial adapter on the SAO header

BSides Orlando 2026 Electronic Badge official organization source-backed

event association

Official organization and 2026 badge-repository connection

BSides Orlando's official site links the GitHub organization, whose profile calls itself the official GitHub organization for Security BSides Orlando and describes its Badge repositories as electronic badge firmware and designs. That organization published the public 2026-badge project. This establishes an organizer-published planned badge-design trail, not attendee inclusion, production completion, a credential function, or delivery.

Compatibility: BSides Orlando 2026 Electronic Badge

BSides Orlando 2026 Electronic Badge organizer firmware source

expansion protocol

SAOv3 host with Hack@UCF SAO unlock

The badge acts as an SAOv3 host over I2C with boot-time and hot-plug discovery and optional LED mirroring; attaching a Hack@UCF SAO permanently unlocks a colour-crossfade headlight mode and a gold scanner idle. The SAOv3 host library submodule was not yet public at the September 30 push.

Compatibility: SAOv3 and static SAO add-ons on the BSides Orlando 2026 badge

BSides Orlando 2026 Electronic Badge organizer documentation and release asset

factory programming tool

RP2040 programmer SAO

A WaveShare RP2040-Zero running picorvd-for-badges, wired as an SAO-header probe powered by the badge, flashes firmware.bin over SWIO and triggers the badge self-test; the README says these programmer SAOs programmed the attendees' badges in the Soldering Village and gives build instructions.

Compatibility: BSides Orlando 2026 Electronic Badge; pico_rvd_factory.uf2 from the v1.0.0 release

BSides Orlando 2026 Electronic Badge public pre-event production-ready design

generated manufacturing files

JLCPCB production outputs

The September 1 commits added a full JLCPCB Gerber set, drill files, BOM, and CPL placement file and declared the final schematic ready to order. These outputs document a manufacturing-ready design; they do not evidence a placed order, fabricated boards, assembly, attendee allocation, or distribution.

Compatibility: BSides Orlando 2026 Electronic Badge

BSides Orlando 2026 Electronic Badge schematic- and BOM-backed design detail

planned controller

CH32V003F4P6 microcontroller

The revised schematic instantiates U1 as a WCH CH32V003F4P6 RISC-V microcontroller in a TSSOP-20 package, and the production BOM carries its LCSC part number. The September 29-30 firmware release and README document its use: SPI-DMA-driven SK6812 output, ADC touch sensing, open-drain beacon LEDs, I2C1 SAO hosting, and a UART console sharing the SWIO pin, flashed in production by an RP2040 picorvd probe.

Compatibility: BSides Orlando 2026 Electronic Badge

BSides Orlando 2026 Electronic Badge schematic-, library-, and commit-backed design detail

planned expansion surface

SAO v2 expansion connector with ESD protection

J1 is valued SAO Connector on the repository-local Simple_Addon_v2 2x3 socket, and an August 13 commit message names the added I2C pull-ups, SAO ESD protection, and series resistors, realized as D4 TPD4E05U06 and the 33R series resistors. The sources do not publish the pinout mapping beyond the library standard, tested host compatibility, or an expansion ecosystem claim.

Compatibility: BSides Orlando 2026 Electronic Badge

BSides Orlando 2026 Electronic Badge schematic-backed design detail

planned lighting circuit

Retained Breathing and Fast Blink 3 mm LEDs

The earlier discrete design survives in the revised schematic as D5, valued Breathing 3mm LED, and D6 through D8, valued Fast Blink 3mm LED, on 3 mm through-hole footprints. The sources do not identify their color, supplier, current draw, blink pattern, or population outcome.

Compatibility: BSides Orlando 2026 Electronic Badge

BSides Orlando 2026 Electronic Badge schematic- and BOM-backed design detail

planned lighting circuit

Three SK6812MINI-E reverse-mount addressable LEDs

D1 through D3 are SK6812MINI-E reverse-mount addressable RGB LEDs, carried in the production BOM. The sources do not document their animation behavior, control mapping, mounting face artwork interaction, or populated outcome.

Compatibility: BSides Orlando 2026 Electronic Badge

BSides Orlando 2026 Electronic Badge schematic- and BOM-backed design detail

planned power surface

Single AAA cell with boost converter

BT1 is valued 1x AAA on a BH-AAA-1X holder footprint, and U2 is a TPS61021ADSGR boost converter with Q1 SI2302S, replacing the earlier CR2032 Keystone-holder framing of the August 4 snapshot. The sources do not state an included cell, chemistry, runtime, measured current budget, or safety result.

Compatibility: BSides Orlando 2026 Electronic Badge

Operational history

Issues & Camp Impact

BSides Orlando 2026 Electronic Badge note

allocation and quantity boundary · organizer repository and official build page · on-site programming documented; badge count and ticket inclusion unpublished

The organizer README says the programmer SAOs programmed all of the attendees' badges in the Soldering Village, and the September 29 commit documents a JLCPCB order on a 3x5 panel, but no source gives the number of boards ordered or handed out, a ticket-tier rule, leftover stock, or failures. The 2026-badge repository was not publicly reachable from September 25 through September 29, and the official event page still had no wrap-up on October 1.

The record treats attendee programming at the event as organizer-stated, without asserting a count or that every registrant received a badge.

BSides Orlando 2026 Electronic Badge note

design-credit and distribution-role gap · official organization and public repository review · named designers and organization credited; manufacture and fulfillment roles not recovered

The rev R1 schematic title block names Kevin Colley, whose commits carry the August 4 microcontroller addition through the September 1 production files, while Jose Rodriguez authored the August 4 initial discrete-LED design whose Jose_3mm_Led library symbols survive in the retained blink LEDs. The organization profile establishes Security BSides Orlando as publisher, but the reviewed public material does not name a manufacturer, assembler, funder, or distribution owner, and the repository predates any stated official event-page badge announcement.

The catalogue credits the title-block designer, the initial-design author, and the organization without assigning manufacturing, artwork-ownership, or fulfillment responsibility beyond what the public sources state.

BSides Orlando 2026 Electronic Badge note

final hardware, manufacturing, and electrical-safety gap · KiCad source, BOM, and production-file snapshot · production-ready design documented; final board unconfirmed

The reviewed files now publish Gerbers, a drill set, a production BOM, and a CPL file, but they still do not document a placed order, received boards, assembly, powered test, measured current budget, battery life, thermal or fault behavior, cell inclusion, compliance result, or a final populated revision.

Readers can inspect a manufacturing-ready source design without treating it as a completed, safe, validated, or reproducible attendee device.

BSides Orlando 2026 Electronic Badge note

firmware, release, and license gap · public repository tree and GitHub metadata · firmware and release published; no repository license; SAOv3 library pending

The republished repository now carries firmware source, a v1.0.0 release with binaries, and build and flashing documentation, but still has no LICENSE file or detected licence, and its saov3-lib submodule pointed at a library the README says was not yet public, so a clean source build is not yet reproducible from public material alone.

The dossier documents published firmware behaviour and hashes without implying open-source terms, redistribution permission, or a reproducible build.

BSides Orlando 2026 Electronic Badge note

missing rights-cleared image · local project policy · needs licensed original replacement

No BSides Orlando 2026 Electronic Badge image is published because the official event and GitHub sources do not pair a selected factual badge photo or upstream raster with a reusable license or explicit permission basis, attribution, source URL, and processing notes. The repository's front and back renders, programmer photo, and artwork files carry no stated license.

The record remains source-backed and image-free rather than copying PCB screenshots, vector artwork, GitHub previews, event graphics, social media, placeholders, or generated approximations.

Resources

SAOv2 library expansion connector library · Repository-local Simple_Addon_v2 symbol and footprint library used by the J1 SAO Connector instance, identifying the earlier unlabelled 2x3 2.54 mm socket as a Shitty Add-On v2 compatible expansion surface. JLCPCB Gerber set fabrication files · Per-layer Gerbers, NPTH and PTH drill files, and drill maps for bsidesorl-v1 committed to the public repository on September 1, 2026. EasyEDA project and Gerbers as ordered fabrication record · September 29, 2026 organizer commit adding the EasyEDA Pro project and Gerber zip as ordered from JLCPCB for full-colour silkscreen, explaining the 3x5 panel and a JLC re-panelisation that slightly misaligned the colour art. Badge firmware README firmware documentation · Firmware documentation for the production (R1) badge: pin map, headlight modes, fingerprint scan, Hack@UCF SAO unlock, post-flash self-test, the Lil Chompy and the World's Fair console adventure and its CTF flags, the PEEK memory-dump unlock, the SAOv3 host behaviour, and the flash budget. 2026-badge v1.0.0 release firmware release · Release published September 26, 2026, the conference day, with firmware.bin (16,304 bytes), firmware.elf, and pico_rvd_factory.uf2, the prebuilt picorvd-for-badges probe image the README says was used on the conference programmer SAOs. JLCPCB production files generated manufacturing output · September 1, 2026 organizer commit generating the BOM-bsidesorl-v1.csv, CPL-bsidesorl-v1.csv placement file, and GERBER-bsidesorl-v1.zip archive for JLCPCB. Generated output documents a ready-to-order design, not a confirmed order, fabricated board, or assembled unit. BSides Orlando 2026 Build Your Badge official badge design page · Official site page linked from the event navigation, merged into the organizer's site repository on September 25-26, 2026. Besides a 2026 badge-front design image whose alternative text describes a retro-futurist Orlando skyline with a monorail, a geodesic sphere, and a gator piloting a hovercar above a cream ID panel, a September 30 full-text review found self-assembly instructions: the badge arrives part-built with the microcontroller, reverse-mounted LEDs, and small parts pre-soldered, leaving four LEDs and an SAO connector for the front, a surface-mount power switch and battery holder for the back, and an unsoldered AAA battery, with Soldering Village help. It credits the badge PCB to kcolley and the badge art to Shep, and publishes no image licence. BSides Orlando 2026 Badge README official badge documentation · Organizer README describing the retro-futurist World's Fair theme with Lil Chompy the alligator, the CH32V003, AAA-plus-TPS61021A power, three SK6812MINI-E LEDs, four self-blinking LEDs, two capacitive touch pads, the SAOv3 host and serial console, the repository layout, the factory flashing flow, and the RP2040-Zero programmer SAO that it says programmed all of the attendees' badges in the soldering village at BSides Orlando. Credits: PCB and firmware by Kevin Colley, art by Shep. BSides Orlando 2026 official event page · Official Security BSides Orlando page for the September 25 pre-conference workshops and September 26, 2026 conference at Full Sail University. The September 27 through October 1, 2026 post-event rechecks after the elapsed conference date found the page still in pre-event wording, with a closed Call for Papers, future-tense schedule text, and no wrap-up, recap, or thank-you; the completion evidence comes from the organizer badge repository instead. Security BSides Orlando GitHub organization official organization profile · The profile calls itself the official GitHub organization for Security BSides Orlando, links the event website, and describes Badge repositories as electronic badge firmware and designs. BSides Orlando 2026 venue official venue page · Official event venue record for Full Sail Live, 141 University Park Dr, Winter Park, Florida. bsidesorlando/2026-badge organizer badge hardware and firmware repository · Public organizer-published 2026 badge repository. Through September 21, 2026 it carried 14 hardware commits (August 4 to September 1) with KiCad 10 PCB, schematic, local libraries, and JLCPCB output. It returned 404 from the September 25 recheck, one day before the conference, through September 29, and was public again on October 1, 2026 after September 29-30 pushes adding the badge firmware (commit dated September 22), the production PCB and EasyEDA project as ordered, a README, programmer-SAO build instructions, and render and photo assets. No repository licence is declared. 2026 badge KiCad PCB layout (hardware/) planned PCB layout · Primary board-layout source for the revised design, including the August 15 commit trail's lanyard and SAO-tether holes. It is not a fabrication result, assembly record, or rights-cleared hero-image source. 2026 badge KiCad schematic (hardware/) planned hardware schematic · Primary source for the revised design: a CH32V003F4P6 microcontroller, TPS61021ADSGR boost converter, three SK6812MINI-E reverse-mount addressable LEDs, the retained Breathing and Fast Blink 3 mm LEDs, a TPD4E05U06 ESD array, an SAO Connector on a 2x3 socket, a 1x AAA cell, and the MST22D18G2 125 power switch. Its title block reads BSides Orlando Badge 2026, rev R1, dated 2026-08-31, company Kevin Colley. BOM-bsidesorl-v1.csv production bill of materials · Production BOM naming LCSC part numbers for the CH32V003F4P6, SI2302S, three SK6812MINI-E, TPD4E05U06DQAR, TPS61021ADSGR, and the supporting passives, inductor, and switch. 2026-badge GitHub metadata repository metadata · GitHub API source for the August 4, 2026 creation, September 1, 2026 last push, main default branch, and null detected license field on the September 21 pass. The September 25, 27, 28, and 29, 2026 rechecks of the same endpoint returned 404; the October 1, 2026 recheck returned the repository again with a September 30, 2026 last push and a still-null licence field.

Sources

GitHub API: 2026-badge GitHub metadata Retrieved 2026-10-01 · Primary metadata source for repository creation on August 4, 2026, main branch, no description, and null detected license. The September 25 through 29, 2026 rechecks returned 404; the October 1 recheck returned the repository with a September 30, 2026 last push, a null licence field, and one v1.0.0 release. Kevin Colley / Security BSides Orlando: Add EasyEDA project and exported gerbers as ordered Retrieved 2026-10-01 · Organizer commit stating the board was ordered from JLCPCB with full-colour silkscreen via EasyEDA Pro on a 3x5 panel, with slightly misaligned colour art after JLC re-panelisation. It documents the order, not the quantity. Kevin Colley / Security BSides Orlando: Final schematic, ready to order Retrieved 2026-09-21 · September 1, 2026 commit message declaring the final schematic ready to order, paired with the rev R1 title block. A commit statement is design intent, not a purchase, fabrication, or delivery record. Kevin Colley / Security BSides Orlando: Generate production files for JLCPCB Retrieved 2026-09-21 · September 1, 2026 commit adding the JLCPCB Gerbers, BOM, and CPL production outputs to the public repository. Kevin Colley / Security BSides Orlando: Post-prototype overhaul Retrieved 2026-09-21 · August 30, 2026 commit message referencing a prototype-driven redesign of the earlier August snapshot. The repository carries no prototype photo, assembly record, or test report, so the prototype reference stays a commit-message statement. Kevin Colley / Security BSides Orlando / GitHub: BSides Orlando 2026 Badge README Retrieved 2026-10-01 · Primary organizer post-event source for the badge feature list, theme, credits, and the statement that the standalone programmer SAOs were used at BSides Orlando for programming all of the attendees' badges in the soldering village. It is the basis for marking the edition completed and for the on-site programming claim; it gives no badge count. Kevin Colley / Security BSides Orlando / GitHub: BSides Orlando 2026 badge firmware Retrieved 2026-10-01 · Primary firmware source for the pin map, LED and touch behaviour, SAOv3 host, self-test, and the Lil Chompy and the World's Fair CTF. The source files carry no licence header and the repository declares none. Security BSides Orlando: BSides Orlando 2026 Build Your Badge Retrieved 2026-09-30 · Primary organizer-controlled badge page, served with a September 26, 2026 last-modified date. The September 28 pass recorded only its heading and badge-front artwork; the September 30 full-text review corrects that reading: the page describes a part-built soldering kit whose microcontroller and reverse-mounted LEDs arrive pre-soldered, with four LEDs, an SAO connector, a surface-mount power switch, a battery holder, and an AAA battery left to the attendee, notes that the six-pin SAO socket is keyed notch-up, and credits Badge PCB by kcolley and badge art by Shep. The kit list matches the archived CH32V003 design's retained through-hole LEDs, SAO socket, MST22D18G2 switch, and AAA holder, but the page states no ticket inclusion, count, or pickup outcome. Security BSides Orlando: BSides Orlando 2026 Location Retrieved 2026-09-21 · Primary organizer-controlled venue source for Full Sail Live at 141 University Park Dr, Winter Park, Florida. Security BSides Orlando: Security BSides Orlando Retrieved 2026-09-30 · Primary organizer-controlled source for the September 25 workshops, September 26, 2026 conference date, Full Sail University context, and its GitHub footer link. As of the September 28, 2026 recheck the site's Explore navigation links a Build Your Badge page, the first official-site badge surface recovered, while the page itself still carries pre-event wording with no wrap-up in the September 29 through October 1 rechecks. Security BSides Orlando / GitHub: 2026-badge release 1.0.0 Retrieved 2026-10-01 · Release published 2026-09-26T08:58Z. The downloaded firmware.bin is 16,304 bytes with SHA-256 467fb2778a4d7e0b6261a14a5cd5b43edad5ca57e82f64904ce966f6eba7abee and contains the BSO_2026 settings magic and console strings matching the published source. Security BSides Orlando / GitHub: BOM-bsidesorl-v1.csv Retrieved 2026-09-21 · Primary production-BOM source with LCSC part numbers for the CH32V003F4P6, SI2302S, SK6812MINI-E, TPD4E05U06DQAR, TPS61021ADSGR, and supporting passives. The through-hole discrete LEDs and AAA holder are not SMT-assembly lines and are absent from this SMT BOM. Security BSides Orlando / GitHub: Security BSides Orlando GitHub organization Retrieved 2026-09-21 · Primary organization source calling itself Security BSides Orlando's official GitHub organization and describing its Badge repositories as electronic badge firmware and designs. Security BSides Orlando / GitHub: bsidesorl-v1.kicad_pcb Retrieved 2026-09-21 · Primary PCB-layout source for the revised design; it does not prove fabrication, population, field use, or image-reuse rights. Security BSides Orlando / GitHub: bsidesorl-v1.kicad_sch Retrieved 2026-09-21 · Primary schematic source for U1 CH32V003F4P6, U2 TPS61021ADSGR, D1-D3 SK6812MINI-E, D5 Breathing 3mm LED, D6-D8 Fast Blink 3mm LED, D4 TPD4E05U06DQAR, J1 SAO Connector, BT1 1x AAA, SW1 MST22D18G2 125, and Q1 SI2302S, plus the rev R1 title block dated 2026-08-31 naming Kevin Colley. Security BSides Orlando / GitHub: bsidesorlando/2026-badge Retrieved 2026-10-01 · Primary organizer-published repository source. The September 21 pass documented 14 hardware commits from August 4 to September 1, 2026; the repository returned 404 from September 25 through September 29 and was public again on October 1, 2026 with September 29-30 pushes adding firmware, the as-ordered EasyEDA project and Gerbers, and a README. The temporary unavailability is documented as a source fact without inferring a reason.