Issue dossier
HITCON's official events page names an embedded NTAG215 NFC chip and phone-tap collectible-card exchange, but it does not disclose UID or memory use, NDEF/content format, tag configuration, read/write permissions, card protocol, app/backend, account linkage, authentication, encryption, anti-cloning measures, scan logging, personal-data handling, retention, deletion, privacy notice, threat model, or security review.
A linkable camp-impact record with badge context, severity, evidence confidence, and source notes.
Back to issues index
NFC data, protocol, privacy, and security boundary · official NFC Battle programme description · NTAG215 and exchange activity documented; implementation unreleased
The record exposes the announced NFC interaction without implying a specific protocol, data model, privacy practice, security property, reader/writer capability, or safe handling guidance.
- Badge
- HITCON 2026 NTAG215 NFC Attendee Badge
- Category
- NFC data, protocol, privacy, and security boundary
- Severity
- note
- Confidence
- official NFC Battle programme description
- Status
- NTAG215 and exchange activity documented; implementation unreleased
- Timeframe
- pre-event, August 2026
- Source note
- HITCON 2026 events page, NFC Battle description.
Evidence
Related Resources
official badge activity page
HITCON's official events page says every attendee badge embeds an NTAG215 NFC chip and describes the phone-tap card-exchange activity. It does not publish tag configuration, payload format, application details, access-control behavior, privacy terms, security model, or a 2026 PCB/firmware specification.
Badge: HITCON 2026 NTAG215 NFC Attendee Badge
official event page
HITCON's official conference page gives the planned August 21-22, 2026 dates and the Humanities and Social Sciences Building at Academia Sinica venue. It establishes event context, not badge construction, allocation, firmware, or image rights.
Badge: HITCON 2026 NTAG215 NFC Attendee Badge
official organizer ticketing
The organizer-linked KKTIX page identifies HITCON 2026 ticket-package conditions and explicitly names an attendee badge. It does not establish a complete all-tier allocation ledger, final physical form, credential behavior, or completed handoff.
Badge: HITCON 2026 NTAG215 NFC Attendee Badge
Source trail
Evidence Sources
Association of Hackers in Taiwan (HIT) / KKTIX · retrieved 2026-05-15
Primary organizer-linked ticketing source whose published package conditions name an attendee badge. It does not prove a final allocation ledger, all-ticket-tier eligibility, physical construction, or access-control role.
Badge: HITCON 2026 NTAG215 NFC Attendee Badge
HITCON · retrieved 2026-05-15
Primary official source for the planned August 21-22, 2026 conference at Academia Sinica. It supports event context only and does not provide attendee-badge technical specifications.
Badge: HITCON 2026 NTAG215 NFC Attendee Badge
HITCON · retrieved 2026-05-15
Primary official programme source stating that every attendee badge embeds an NTAG215 NFC chip and that a phone-to-badge tap exchange unlocks collectible cards. It does not disclose tag contents, application protocol, privacy/data processing, security design, or a 2026 PCB/firmware platform.
Badge: HITCON 2026 NTAG215 NFC Attendee Badge