Issue dossier

After badge-v2.1.4 the default branch gained more attack and tracker detection and an opt-in research build with active Wi-Fi and Bluetooth tools. The maker says the research build is compiled out of the default badge, is not in the web flasher or any release, and is for educational and authorized testing only, with no liability accepted; November 11 commits say it is never signed, published, or built by CI. By November 12 the branch also gained a hardened Badge WiFi portal and a MeshCore second-mesh preview with chat, saved identity, contacts, settings, delivery reports, and per-mesh Bluetooth, none of it released. The detection features are heuristic and no reviewed source measures their accuracy.

A linkable camp-impact record with badge context, severity, evidence confidence, and source notes.

Back to issues index

unreleased research build boundary · maker README and commits on the default branch · unreleased source only

The catalogue does not list the research build or the post-release detection and MeshCore features as badge functionality, and does not describe the badge as an attack tool.

Badge
BSidesSLC 2025 E-Badge
Category
unreleased research build boundary
Severity
note
Confidence
maker README and commits on the default branch
Status
unreleased source only
Timeframe
November 9-12, 2026
Source note
distinctm1nd README at commit ca7dee4 and the November 9-12, 2026 commit history through commit 14342a4, checked 2026-11-13.

Evidence

Related Resources

KiCad and Gerber files

Restored badge hardware folder

Hardware folder restored on November 4, 2026 (Utah time): 2025_bsides_badge_v2 KiCad PCB and schematic, a Gerber zip, and badge and minibadge front and back pictures, which carry no image licence of their own.

Badge: BSidesSLC 2025 E-Badge

browser firmware installer

Utah BSides badge web installer

Maker web installer for Chrome or Edge on a computer, serving badge-v2.1.4. The first install erases the badge's Meshtastic settings, keys, channels, and messages; later updates go over the badge's own Wi-Fi.

Badge: BSidesSLC 2025 E-Badge

commit-pinned technical archive

2025 Utahtastic BSides Badge archive

Public April 10, 2025 archive with the matching badge README plus KiCad PCB/schematic and Meshtastic-derived source tree. It is not linked from the official site, so it remains a source-bounded technical archive rather than a final production or deployment record.

Badge: BSidesSLC 2025 E-Badge

maker firmware release

badge-v2.1.4 firmware release

Latest maker release, published November 6, 2026 from commit 9df7e96 on Meshtastic 2.8.2, GPL-3.0: factory, signed Wi-Fi update, and LittleFS images plus install and update scripts. Earlier releases badge-v2.1.0 and badge-v2.1.1 appeared the same day. Not an organizer release.

Badge: BSidesSLC 2025 E-Badge

maker firmware tag

badge-v2.0.0 firmware tag

Commit 0446e50 of November 4, 2026 (Utah time), tagged badge-v2.0.0: second badge firmware on Meshtastic 2.7.26, GPL-3.0, with phone-style messages and private groups, LoRa/Wi-Fi/Bluetooth fox hunts and scanners, games, 48 LED scenes, a PIN screen lock, a Bluetooth remote, and signed Wi-Fi updates. Source only on November 5, 2026: the tag build was waiting for its release reviewer, no GitHub release existed, and the web installer page returned 404.

Badge: BSidesSLC 2025 E-Badge

official event and badge page

BSidesSLC official site

Official BSidesSLC source for the custom 2025 E-Badge hardware and firmware description, remaining-stock sale language, 2026 pickup context, and event branding.

Badge: BSidesSLC 2025 E-Badge

official event context

BSidesSLC 2026 CFP

Official BSidesSLC page for the April 9-10, 2026 Sandy, Utah event context used to classify the 2025 badge pickup language as cross-year remaining-stock distribution.

Badge: BSidesSLC 2025 E-Badge

Source trail

Evidence Sources

BSidesSLC · retrieved 2026-05-15

BSidesSLC

Primary official source for the 2025 custom E-Badge, ESP32-S3-WROOM, LoRa, 25 addressable LEDs, TFT, Micro-USB or three-AA power, UART/reset/flash surfaces, three mini-badge slots, custom Meshtastic firmware, remaining-badge sale, and 2026 pickup instructions.

Badge: BSidesSLC 2025 E-Badge

BSidesSLC · retrieved 2026-05-15

BSidesSLC 2026 CFP

Official event-context source for the April 9-10, 2026 Sandy, Utah BSidesSLC event where remaining 2025 E-Badges could be picked up.

Badge: BSidesSLC 2025 E-Badge

GitHub / distinctm1nd · retrieved 2026-05-15

2025 Utahtastic BSides Badge archive

Commit-pinned April 10, 2025 public archive whose README matches the official feature list and whose tree includes KiCad PCB/schematic files and a Meshtastic-derived source tree. BSidesSLC does not directly link the repository or name its author, so it is not used alone to establish final production, deployment, or authorship.

Badge: BSidesSLC 2025 E-Badge

GitHub / distinctm1nd · retrieved 2026-11-05

Utah BSides 2025 badge ("UTAHtastic") v2 README

Maker source for the badge-v2.0.0 firmware. It says the badges shipped with a copy of Meshtastic 2.5.12 with a patched LED thread, a keypad driver, and a few games, and that v2 is Meshtastic 2.7.26 plus badge apps in one variant folder, installed once over USB with a full erase and then updated over Wi-Fi with firmware signed by the badge team. BSidesSLC does not link the repository, so the shipped-firmware statement is the maker's, not the organizer's.

Badge: BSidesSLC 2025 E-Badge

GitHub / distinctm1nd · retrieved 2026-11-11

Utah BSides 2025 badge README at badge-v2.1.4

Maker README at the v2.1.4 release commit. It says the firmware is updated to Meshtastic 2.8.2 and revises the shipped-firmware statement to a copy of Meshtastic 2.5.12 with a patched LED thread and a keyboard driver, without the few games named in the v2.0.0 README. It lists standalone messaging, fox hunts and scanners with attack detection, packet capture, games, 48 LED scenes, a PIN screen lock, and signed Wi-Fi updates, and no longer lists the Bluetooth remote. It is the maker's account, not BSidesSLC's.

Badge: BSidesSLC 2025 E-Badge

GitHub / distinctm1nd · retrieved 2026-11-11

Utah BSides 2025 badge README, default branch after badge-v2.1.4

Maker README at commit ca7dee4 (November 10, 2026) on utah-bsides-2.8.2, which a November 6 CI commit calls the new default branch. Eight commits after v2.1.4 add tracker, BLE keyboard, karma, rogue-AP, and lure detection, a threats view and log, and an off-by-default background attack scan, plus an opt-in research build (PlatformIO env utah_bsides_research, the only one that sets BADGE_OFFENSIVE) with active Wi-Fi and Bluetooth tools. The README says that build is not in the web flasher or any release and carries an authorized-use and no-liability disclaimer. None of this is in a published release on November 11.

Badge: BSidesSLC 2025 E-Badge

GitHub / distinctm1nd · retrieved 2026-11-05

badge-v2.0.0

Tagged commit with version.properties 2.7.26 and the v2 changelog. On November 5, 2026 the tag's build workflow was waiting for the release environment's reviewer, the repository had no published release, and distinctm1nd.github.io/2025_utahtastic_bsides_badge returned 404.

Badge: BSidesSLC 2025 E-Badge

GitHub / distinctm1nd · retrieved 2026-11-11

badge-v2.1.4

Maker GitHub release published November 6, 2026 at 23:28 UTC from the utah-bsides-2.8.2 branch (commit 9df7e96), with no release notes. Its assets are firmware, factory, signed update, and LittleFS images named utah_bsides-2.8.2 plus install and update scripts. The releases list also holds badge-v2.1.0 (19:48 UTC, commit 25d7322) and badge-v2.1.1 (21:54 UTC, commit d6b4677), but no badge-v2.0.0 release. version.properties at all three is 2.8.2. Download counters were single digits on November 11, so the source proves publication, not adoption.

Badge: BSidesSLC 2025 E-Badge

Security BSides · retrieved 2026-05-15

BSidesSLC 2025

Security BSides wiki metadata source for the 2025 Salt Lake City event, Sandy venue context, and community lineage.

Badge: BSidesSLC 2025 E-Badge

distinctm1nd (GitHub Pages) · retrieved 2026-11-11

Utah BSides badge installer

Maker web installer, live on November 11, 2026 (it returned 404 on November 5; Last-Modified November 6, 23:28 UTC). Its manifest names badge-v2.1.4 for ESP32-S3 with one factory image and an erase prompt. The page says the update resets the badge's Meshtastic settings, keys, channels, and messages because the memory layout changes, needs Chrome or Edge on a computer, and that later updates go over the badge's own Wi-Fi and accept only files signed by the badge team.

Badge: BSidesSLC 2025 E-Badge