Issue dossier
A linkable camp-impact record with badge context, severity, evidence confidence, and source notes.
Unlocked badges work as ordinary ESP32-S3 boards for owner firmware, but cannot be debugged over JTAG, cannot have their flash dumped, and cannot be returned to the competition firmware.
Evidence
Official 2026 badge page: the badge is electronic, kripthor developed the conference badge once again, and Bitsight sponsors it; attendees needed a USB-C cable and a powerbank, and a phone or laptop for the full experience. Since the conference it says the badge competition ran throughout both days, the game is over, and the badge is the owner's to unlock.
Primary badge source: the current 2026 page explicitly says the programme will have talks, networking, an electronic badge, and a CTF.
Official current source for the planned October 29-30, 2026 two-day Lisbon conference and its Auditório FMD-UL event framing.
Official post-event guide to turning the ESP32-S3 badge into an open board: the serial console at 115200 baud, the published unlock code and its two confirmation steps, what the unlock erases, and how to flash new firmware with esptool or the Arduino IDE given the permanent secure download mode and disabled JTAG.
Official team source listing Pedro Umbelino in the Badge section. It does not specify a technical, design, manufacturing, or software role.
Official venue source naming Auditório Prof. Simões dos Santos at Faculdade de Medicina Dentária, Cidade Universitária, Lisboa.
Source trail
Primary official source that explicitly says BSidesLisbon 2026 will have an electronic badge alongside talks, networking, and a CTF.
Primary official source for the planned October 29-30, 2026 Lisbon event, two-day format, and current event identity.
Primary official badge source for the kripthor development credit, the Bitsight sponsorship, and the USB-C cable, powerbank, and phone-or-laptop requirements. The October 31, 2026 version says the badge competition ran throughout both days and the game is over, which this record uses as the organizer's confirmation that the event and competition took place. It publishes no board files, firmware, results, or image.
Primary official source for the planned Lisbon venue context.
Primary official source listing Pedro Umbelino under Badge. It is used as a bounded badge-team credit, not a component or build attribution.
Primary official source for the ESP32-S3 platform, ARIA's flash-encrypted competition firmware that refused other images, the data it held (contacts, Stegomatrix messages, high scores), the 115200-baud serial console, the unlock and erase procedure, the IO0 ROM-loader button, and the permanent secure download mode and disabled JTAG. It does not give board files, firmware source, unit counts, or results. badge.gallery does not repeat the unlock code.