Issue dossier
The README says the SAO was designed from initial public information about the DEF CON 34 main badge and may be reflashed as challenge information develops. It does not establish that a final badge uses the same port wiring, pull states, wake signal, I²C behavior, firmware, protections, or challenge interface, or that an owner has permission to test it.
A linkable camp-impact record with badge context, severity, evidence confidence, and source notes.
Back to issues index
target revision, interface, compatibility, and authorization boundary · maker purpose statement and pre-event timing · built against initial public information; final compatibility unknown
Readers should not treat the public source as a compatibility guarantee, a target-specific exploit claim, an endorsement to connect the SAO, or authorization to interact with another attendee's hardware.
- Badge
- NilbinSec DC34 Main Badge Fuzzer SAO
- Category
- target revision, interface, compatibility, and authorization boundary
- Severity
- note
- Confidence
- maker purpose statement and pre-event timing
- Status
- built against initial public information; final compatibility unknown
- Timeframe
- pre-event source pass
- Source note
- NilbinSec DC34 Main Badge Fuzzer SAO README and firmware source.
Evidence
Related Resources
NilbinSec public project repository
Maker-controlled public repository whose description identifies the artifact as a DC34 conference-badge fuzzing SAO. Its root exposes the README, KiCad schematic, BOM CSV, PCB archive, firmware source, and compiled firmware files, but no explicit root licence or release is visible.
Badge: NilbinSec DC34 Main Badge Fuzzer SAO
maker operating documentation
Primary maker documentation for the intended DEF CON 34 main-badge target, the three initial modes, selector/trigger use, potential badge-damage warning, possible convention reflash statement, flashing outline, and claim that Gerbers, schematic, BOM, and firmware are included.
Badge: NilbinSec DC34 Main Badge Fuzzer SAO
public firmware source
Primary C implementation source for the ATtiny1614 target, GPIO stimulation, open-drain wake assertion, passive I²C listener, LED/button mappings, 0x08–0x77 sweep implementation, 0x19/0x3C skip list, UART debug surface, and serialUPDI context. It is source code, not proof of final on-site firmware or a licence grant.
Badge: NilbinSec DC34 Main Badge Fuzzer SAO
public hardware source
Public tree containing DCBadgeFuzzer.kicad_sch, DCBadgeFuzzer.csv, and a PCB archive. The BOM records the ATtiny1614, SAO v1.69bis connector, two switches, four LEDs, 1×3 connector, resistors, and capacitors, but does not establish a final manufactured revision, test evidence, or media-reuse permission.
Badge: NilbinSec DC34 Main Badge Fuzzer SAO
Source trail
Evidence Sources
GitHub / NilbinSec · retrieved 2026-05-15
Primary maker-controlled project source identifying a NilbinSec SAO for the DC34 conference badge and exposing the technical source tree. It does not prove DEF CON organizer issuance, target-badge authorization, a sale or giveaway, production volume, completed handoff, final firmware, or reusable-image rights.
Badge: NilbinSec DC34 Main Badge Fuzzer SAO
GitHub / NilbinSec · retrieved 2026-05-15
Primary maker source for the pre-event main-badge fuzzing purpose, the three documented modes, input/LED behavior, warning that Mode 1 may harm a badge, prospective reflash wording, and build/flash guidance. It presents intended behavior, not a guaranteed or authorized outcome on a final badge.
Badge: NilbinSec DC34 Main Badge Fuzzer SAO
GitHub / NilbinSec · retrieved 2026-05-15
Primary BOM source naming the ATtiny1614-SS, four LEDs, two switches, SAO v1.69bis connector, J1 1×3 connector, 470-ohm resistors, and capacitors. It documents the public design inputs only, not final component substitutions, electrical characterization, production, safety, or a hardware licence.
Badge: NilbinSec DC34 Main Badge Fuzzer SAO
GitHub / NilbinSec · retrieved 2026-05-15
Primary implementation source for the ATtiny1614, GPIO/LED/button mapping, GPIO stimulus/release/sample loop, open-drain wake behavior, passive I²C implementation, 0x08–0x77 sweep, and skip list. It differs from the README's broad 0x00–0x7F description and does not establish a released final binary or explicit licence.
Badge: NilbinSec DC34 Main Badge Fuzzer SAO