Issue dossier

The writeup warns that uploaded payload code can immediately run as USB keyboard input and recommends using a separate rescue/test computer, with macOS keyboard-layout handling also caveated.

A linkable camp-impact record with badge context, severity, evidence confidence, and source notes.

H2HC 2017 Badge note

USB HID safety caveat · primary writeup · documented

The record treats the badge as a teaching artifact for keystroke injection and preserves operational risks instead of presenting it as a harmless novelty.

Badge: H2HC 2017 Badge
Category: USB HID safety caveat
Severity: note
Confidence: primary writeup
Status: documented
Timeframe: H2HC 2017 badge use
Source note: Security-Bits H2HC 2017 badge writeup.

Evidence

Related Resources

project page

H2HC 2017 badge writeup

Security-Bits writeup documenting the ATTiny85 USB HID injector badge, Wattuino Nanite 85 basis, two-PCB construction, Micronucleus bootloader, Arduino/Digistump workflow, and payload caveats.

Badge: H2HC 2017 Badge

Source trail

Evidence Sources

Security-Bits.de · retrieved 2026-05-15

First-hand badge writeup source for the H2HC 2017 ATTiny85 USB HID injector badge, Watterott Nanite 85 design basis, Micronucleus bootloader, Arduino/Digistump setup, DigiKeyboard payloads, and layout/locale caveats.

Badge: H2HC 2017 Badge