Not just specs

Issues & Camp Impact

Safety warnings, delivery problems, app-store gaps, team-process history, and first-hand reports are tracked as sourced records.

Reset
2208 matching issue record(s)

official 2026 repository-association boundary · convergent official-history and publisher sources · badge-team provenance supported; direct organizer 2026 repo link unrecovered

The source publisher's previous HTH badge repositories and the official HTH organization's 2025 fork establish a strong historical badge-team relationship, while the Eagle 5 repo explicitly names HTH 2026. The reviewed official HTH pages do not directly link or list the 2026 Eagle 5 repository, author, or board as an official organizer-owned project.

The catalogue records a real HTH 2026 electronic-badge source trail without claiming an organizer-owned repository, a formal event endorsement, or universal official issuance from affiliation alone.

Source note: HTHackers GitHub organization and J5-ShortCircuit fork metadata; syn-ack-zack account; Eagle 5 repository; HTH official site.

official hardware source and deployment boundary · post-event repository plus official event sources · source and production files documented; event-unit deployment scope remains open

The public bsidesbrisbane/badge-2026 archive now identifies the actual Clock Module hardware and provides Gerbers, BOM/CPL data, a case STL, and a detailed 555/74LS README. The repository was published six days after the event, has no tag or release, and does not establish a production total, source-to-unit mapping, individual configuration, or whether every event badge matched the photographed board.

The catalogue can document the verified discrete clock module while avoiding claims about universal deployment, event-day source availability, firmware, radio, or an exact recipient ledger.

Source note: bsidesbrisbane/badge-2026 commit 58a7d9b2e9502cb689f52f1f6826bfcaa90e214c, BSides Brisbane 2026 prospectus, Humanitix ticketing, and event-day updates.

official organizer-to-source archive association boundary · official event and convergent public project sources · event and physical badge trail supported; organizer repository link unrecovered

Official Open Sauce pages establish the event but do not directly link the Caleb Marting or putnam repositories. Those public archives independently and specifically identify the 2026 Open Sauce badge, physical modules, and event hacking, but they do not demonstrate that Open Sauce controlled their publication, approved every current source change, or declared a standard attendee-credential policy.

The catalogue records a real event badge and public source trail without turning a convergent designer/attendee archive into an organizer-owned project or general credential claim.

Source note: Open Sauce overview, schedule, and tickets; Caleb Marting archive; putnam attendee archive.

official repository-association boundary · primary repository self-description plus official event context · direct organizer link unrecovered

Electronic Cats calls its repository the official UnknownSecurity Conference 2026 badge archive, and the event site names its CTO and co-founder as 2026 speakers. This pass did not recover a direct event-organizer link to the repository.

The catalogue can report the repository's own official-project claim and its corroborating event relationship without asserting an unproven publication path by the organizer.

Source note: UnknownCon 2026 event page and ElectronicCats Badge-UnknownSecurity-Conference-2026 README.

official timeline date discrepancy · official page plus IEEE partner listing · official home timeline has a year typo; date corroborated externally

The live BUG HUNT 2026 site shows January 10, 2025 next to Final Round - Onsite, while the surrounding named 2026 event context and the IEEE club-partner listing identify January 10, 2026 as the on-site final and conference date. The official site does not explain the stale year in its timeline.

The catalogue uses the corroborated January 10, 2026 event date while preserving the primary-page discrepancy instead of silently converting a likely typo into an unverified second event.

Source note: BUG HUNT 2026 official timeline and IEEE club-partner schedule.

official-source caveat · builder-log backed · needs deeper archive recovery

The badge record relies on a public builder log that frames the work as an official-badge request, but this pass did not recover an official ToorCon badge guide, repository, schematic set, or firmware archive.

The catalogue keeps the official-badge wording tied to the cited log and avoids claiming complete production ownership, final challenge rules, or released design files.

Source note: Hackaday.io Official Toorcon Badge? log and InfoconDB event metadata.

official-source publication and deployment boundary · commit-pinned official GitHub publication · documented; public source release is post-event

The official nsec/badge-2026 repository appeared publicly after NorthSec 2026. Its March-to-May authored commit history documents development chronology but does not establish public availability during the May event. The reviewed repository has no tag, GitHub release, or published binary, and no source maps a specific commit to a physical attendee unit or deployed CTF state.

Readers can inspect a real official source release while the catalogue avoids backdating its publication, claiming a particular factory image, or treating one source revision as proof for every badge handed out.

Source note: nsec/badge-2026 commit 4dab9e6c4c0b8efc9a643ee646a49550453ea22c repository tree, commit history, and releases/tags surfaces reviewed 2026-08-04.

online-cap, pickup, QR-claim, and fulfillment boundary · official checkout and Team announcement · online allocation exhausted; handoff still pre-event

The official checkout says online stock is exhausted and no shipping is offered; the Team describes a capped paid allocation, meetup/arranged handoff, and offline QR claims. The future pickup dates and community terms do not prove paid orders, production completion, QR receipt, collector identity, pickup, alternate handoff, delivery, refund, or support outcome.

The catalogue records a real sold-out online offer without converting it into a complete production or fulfillment report.

Source note: Puzzled Hackers CTF badge checkout and Team meetup announcement.

online-edition distribution caveat · event listing and badge-team source · documented with limits

The event listing presents NoNameCon 2020 as online and the TechMaker article says some CTF tasks were reworked because of COVID social distancing and the absence of the offline part of the conference.

The record documents a real badge platform but avoids claiming ordinary on-site pickup, universal in-person attendee distribution, or full offline village behavior.

Source note: DOU NoNameCon 2020 listing and TechMaker NoNameBadge 2020 article.

open-hardware lineage caveat · source-backed but incomplete · documented with caution

The HOPE wiki links the HiP Badge repository as open hardware and notes repository uncertainty in the page text, so this pass treats it as linked lineage rather than a fully audited HOPE-specific release mirror.

The catalogue records the public open-hardware path while avoiding stronger claims about every production file until a deeper repository audit is done.

Source note: HOPE XV Electronic Badge wiki and tidklaas/hip-badge GitLab project.

optional add-on sale and fulfillment boundary · organizer ticket listing · offer documented; individual outcome unrecovered

The Eventbrite listing offered an optional $30 e-badge add-on for a June 6 event whose date is now past, but the reviewed sources do not show an order count, payment, production run, stock, add-on attachment to a particular ticket, pickup, shipment, recipient, replacement, refund, or completed handoff.

The catalogue can document the real e-badge offer without saying anyone purchased, received, used, or was universally issued the artifact.

Source note: BSides Fort Wayne 2026 organizer ticket listing and calendar timing.

organization-role and authorship boundary · source-stated organization-level roles · organization names public; task-level roles unpublished

The official event page attributes the edition's badge design to Comunidad DOJO, while Electronic Cats says it designed and made the badge exclusively for the edition. Fundación Comunidad DOJO is named as the event organizer. The recovered sources name no individuals, contracts, task-by-task design/manufacturing roles, intellectual-property ownership, endorsement scope, or image-reuse authority.

Credits remain limited to the named organizations and their source-stated roles rather than resolving a collaboration into unsupported individual authorship or ownership claims.

Source note: DOJOConf Panamá official event page and Electronic Cats public post.

organizer affiliation, allocation, handoff, and credential boundary · Retia source archive and DEF CON official archive · independent design documentation public; organizer relationship and distribution unverified

Retia's archive documents a badge design and source tree, but reviewed sources do not say DEF CON commissioned, approved, sold, issued, or distributed it. They do not identify a price, quantity, sale, giveaway, ticket tier, pickup, booth, recipient, delivery, replacement, admission, access-control, Human-badge, or Black-badge role.

The catalogue treats this as an independently documented event-associated badge, not an official DEF CON 32 attendee badge, credential, universal handout, completed distribution, or organizer-endorsed artifact.

Source note: Retia repository, immutable 2024-labelled source snapshot, and DEF CON 32 official archive.

organizer archive gap · official repositories and designer writeup · hardware and firmware published; BOM file and hardware licence absent

Hack the North published the KiCad hardware project and GPL-3.0 firmware on October 13-14, 2026, but the hardware repository has no licence and no BOM file, and both repositories were released as single squashed commits. The designer's October 13 writeup now gives the production quantity (1,750 populated plus 750 blank boards) and says the hardware is open source to use as licensed, without naming a hardware licence. The README's interactive BOM link points at a different GitHub account and was not used.

The catalogue cites organizer engineering detail and the designer's quantity directly and leaves hardware reuse terms open.

Source note: hackthenorth/badge-hardware, hackthenorth/badge-firmware, and va3ndf.com writeup, checked 2026-10-21.

organizer association, allocation, and credential boundary · official event home and maker-published repository · event and maker archive documented; organizer linkage and distribution unrecovered

The official TROPICON home establishes the completed Cozumel event, while Electronic Cats' repository describes its project as the official badge. The event page does not itself link or confirm that repository, and reviewed sources do not establish a sponsorship agreement, organizer ownership, attendee eligibility, ticket inclusion, quantity, price, purchase, pickup, shipment, completed handoff, admission role, or recipient ledger.

The catalogue records a real source-documented event artifact without converting a maker description into organizer confirmation, universal issuance, a credential claim, or a completed fulfilment record.

Source note: TROPICON official event home and ElectronicCats/Badge_Tropicon-2026 repository.

organizer documentation and completion gap · attendee sources plus official site · attendee-documented; official wrap-up and allocation unpublished

All technical detail comes from attendee research published September 26-28, 2026. GrrCON's official homepage still read pre-event on October 1 and names no badge, and no source gives a production count, whether every attendee received one, variants, or the designer's own documentation.

The record treats the badge as a real event artifact without asserting universal allocation, and the edition is not marked completed on official wrap-up evidence.

Source note: GrrCON official site; Redline Cyber Security writeup; securekomodo firmware archive.

organizer issuance and allocation boundary · official event pages plus attributed post-event app documentation · event completed; organizer badge issuance unverified

Workday's official event materials establish the completed DevCon dates, venue, and developer-conference context, but do not directly mention a Blinky 2350 badge, badge eligibility, recipient scope, ticket inclusion, quantity, pickup, delivery, fulfilment, designer, manufacturer, or a completed distribution ledger. Mainak Sarkar's public post-event README identifies a device as handed out at the event, which supports this bounded artifact record but not a claim that every attendee or pass holder received one.

The catalogue distinguishes attributed post-event device evidence from official organizer confirmation and does not promote the badge into an attendee-wide entitlement or a Workday-published hardware release.

Source note: Workday DevCon official event, pricing, and justification-letter pages plus Mainak Sarkar's devcon-badge-pet README.

organizer-to-maker association, issuance, and allocation boundary · official organizer pages plus maker-published repository · event and electronic-badge context verified; direct project link unrecovered

BSides Peoria's official sources establish the completed October 2025 event and later state that its electronic badges were memorable, while Technet8394's repository self-identifies as a BSides Peoria Badge Challenge 2025 project. No reviewed organizer source links the repository, names this device, identifies its author, calls it an official main badge, or records a ticket tier, distribution count, recipient group, pickup, sale, giveaway, or completed handoff.

The catalogue models a real maker-declared event-associated challenge artifact rather than presenting it as organizer-issued, attendee-wide, admission-bearing, or independently confirmed electronic hardware.

Source note: BSides Peoria 2025 ticket announcement; BSides Peoria 2026 sponsor retrospective; Technet8394/HackTheBadge.

package allocation boundary · official conference and diploma pages · diploma scope explicit; standard-ticket equivalence unproven

The official diploma benefits list calls the item an exclusive electronic badge, while the official conference page separately advertises a 2026 kit and CTF for standard admission. The reviewed sources do not identify a general-attendee electronic badge, compare the kit to the diploma artifact, or establish who ultimately receives either item.

The entry remains limited to the named diploma package and does not convert general conference-kit, CTF, or entry language into an electronic-badge allocation.

Source note: DragonJARCON 2026 conference and diploma page and official event home.

page-media rights boundary · source-backed but no reusable image basis · needs licensed original replacement

No BSidesROC 2019 badge image is published because the recovered official page and website repository did not provide a rights-cleared badge photo or official raster render with source URL, license or permission basis, attribution, and processing notes.

The record remains image-free rather than copying page media, repository assets, screenshots, social photos, or generated approximations without complete provenance.

Source note: BSidesROC 2019 badge page, BSidesROC.github.io repository metadata, and badge.gallery image policy.

page-media rights boundary · local image policy · image withheld

The SecOps page includes media and an Open Graph image, but this pass did not recover a reusable license or explicit permission basis for publishing a badge image in the catalogue.

The record remains text-and-source only rather than copying page media, screenshots, social photos, or generated badge art.

Source note: badge.gallery image policy, BSides Goa official site, and SecOps Hack the Badge page.

participant allocation and credential boundary · official organizer announcement and maker record · electronic-badge takeaway documented; individual allocation unverified

NUS Greyhats' official announcement says participants could take home electronic badges, and the maker says the Hackbadge was intended for Greycademy participants. Neither source publishes a recipient list, ticket/registration mapping, quantity, pickup record, allocation rule, official credential role, access-control function, or delivery ledger for this specific badge.

The catalogue documents a real event-specific electronic artifact without presenting it as a universal attendee entitlement, admission credential, official hardware release, or completed allocation account.

Source note: NUS Greyhats A.YCEP × Greycademy 2026 announcement and Terence Chan Zun Mun's public maker record.

party access and DEF CON credential boundary · official event/storefront wording · independent party access context

FloridaMan's official pages frame it as a Florida-themed party at DEF CON and say party entry is badge-only, but do not identify the party as a DEF CON-organized event, describe coordination with DEF CON registration, say the listed product is DEF CON's Human badge, or grant access to DEF CON itself.

The catalogue records a DEF CON-adjacent independent party badge rather than representing it as conference registration, an official convention credential, or a substitute for a valid DEF CON badge.

Source note: FloridaMan Party 2026 official page and FloridaMan 2026 storefront.

past-date completion and artifact boundary · official event pages rechecked after scheduled dates · scheduled dates elapsed; completion and issuance unconfirmed

The current official source set supports a planned Camp++ 2026 ticket-code, gate/reception, wristband, and Pretalx-coming-soon flow, but the scheduled August 6-9 dates have elapsed and the pages do not independently confirm completion, a shipped electronic badge, wristband issuance, or a post-event field report.

The page keeps the Hungarian outdoor camp lineage visible while preventing stale logistics pages from being presented as confirmed event completion, delivered identity artifacts, or PCB badgelife.

Source note: Camp++ 2026 home, ticket, how-to, and CfP pages rechecked 2026-08-25.

patron-tier, source-currency, and handoff boundary · official 2026 conference and ticket pages · past-date benefit statement retained; allocation and fulfillment unrecovered

The ticket page lists a Special badge as an additional benefit of being a 2026 patron and lists three patron tiers, but does not map the badge to a specific tier, provide a patron or recipient ledger, say how it was distributed, document an event-day pickup, confirm a physical handoff, describe replacement or loss handling, or report a completed delivery outcome. The listed event dates are now past at this source review.

The catalogue preserves a real organizer-published 2026 patron artifact statement without converting it into proof that every patron, or any particular patron, received a badge.

Source note: BSides Seattle 2026 official conference and ticket pages, reviewed 2026-08-05.

photo description typo · image source metadata · documented

The Commons/Flickr photo description contains the typo 'macjine code'; badge.gallery records the machine-code behavior in normalized wording while preserving the source title and provenance.

The image is still usable because the license, attribution, Flickr source, and review status are explicit; the typo is not treated as technical evidence beyond the intended machine-code description.

Source note: Wikimedia Commons File:Berlin, Mar-2023 (52930401548).jpg.

physical artifact and electronics documentation gap · primary product and storefront pages · identity/access artifact only

The official sources call the item a badge but provide no physical design or technical description. They do not document whether it is printed, wearable, token-like, electronic, programmable, connected, rechargeable, or capable of running the announced challenge.

The record does not invent a PCB, microcontroller, firmware, lanyard, RFID/NFC, app, radio, or other device properties from the word badge alone.

Source note: FloridaMan 2026 Badge product page and official storefront.

physical form and technical-specification gap · official ticket and credential-policy sources · documented source limitation

The reviewed official tickets and terms establish badge claiming and a visible-badge access rule, but do not identify materials, lanyard, artwork, barcode, QR/RFID/NFC, PCB, components, power, firmware, app, protocol, data behavior, source archive, manufacturing, or final credential design.

The catalogue classifies the record as a planned identity artifact and does not invent an electronic or otherwise specified physical badge from policy language.

Source note: DefCamp 2026 ticket page and DefCamp terms and conditions.

physical form, component parity, power, and safety boundary · maker README and source-tree review · high-level parts list visible; physical artifact details unrecovered

The maker identifies an ESP32, a TFT panel, wiring, and two batteries, and the later source configures an ILI9341 display. The public archive does not provide a schematic, PCB, Gerbers, enclosure/CAD, exact ESP32 module, wiring diagram, final component substitutions, battery chemistry/capacity, charge/protection design, power budget, electrical limits, assembly/test record, production count, physical photo provenance, or safety validation.

The entry records a narrow source-backed electronic challenge-device outline without treating it as a reproducible build, a safe assembly guide, a uniform physical badge, or a completed production run.

Source note: HackTheBadge event-period README, post-event main.ino source, and repository tree.

physical form, hardware, and software documentation gap · primary organizer sources · needs technical documentation

The Eventbrite material calls Electric Fist a BadgeLife design but does not describe its physical form, material, electronics, power, PCB, connector, firmware, source, binary, flashing path, protocol, interaction design, schematic, BOM, Gerbers, or license terms.

The record does not turn a BadgeLife title, fundraiser context, or pickup plan into an electronic-badge claim, engineering specification, software feature list, or reusable technical archive.

Source note: Eventbrite Electric Fist listing and H4r0ld & V3rbaal organizer profile.

physical hardware, MCU, power, and SAO-interface boundary · commit-pinned README and Arduino-source review · firmware source published; physical artifact and interface unverified

The README and sketch establish a named OWASP DefCon 34 SAO firmware project, 15 source-level pixel positions, three source-level PTC nodes, and an UPDI statement. They do not identify the microcontroller, LEDs, touch electrodes, PCB, schematic, BOM, board revision, SAO version or pinout, orientation, voltage/current budget, power source, protection, assembly, fabrication, test record, host compatibility, electrical safety, compliance, or a physical unit.

The catalogue records the actual firmware trail without treating source pins or library use as a finished, safe, fabricated, standard-compliant, or plug-and-play add-on.

Source note: DC34-OWASP-SAO commit-pinned README and main.ino source snapshot.

physical hardware, component, SAO interface, and safety boundary · commit-pinned KiCad, schematic, PCB, and Gerber review · design-source files published; physical build and compatibility unverified

The source tree contains KiCad/PCB/schematic/Gerber files with a generic 2×3 connector and LED/resistor-labelled entries, but no factual assembled-unit photo, component values, pinout, orientation, SAO version, voltage/current budget, polarity/protection, power source, controller, LED behavior, PCB revision, fabrication order, assembly record, electrical test, host test, safety/compliance evidence, or final-unit configuration. The files do not prove a working or compatible add-on.

The catalogue retains a concrete design-file trail without representing it as a fabricated, tested, safe, standards-compliant, or plug-and-play accessory.

Source note: narengogi/defcon-34-shitty-add-on commit-pinned source tree.

physical hardware, configuration, and production boundary · repository description, commit-pinned code review, and first-person commit history · source-level project with limited local-test claims; physical artifact unverified

The repository names a Waveshare RP2040-Zero and the publisher's dated commits report local hardware smoke, display, input, switch, and buzzer stages. The reviewed public material provides no factual assembled-unit photo, PCB, schematic, BOM, Gerber, power/battery design, component configuration, display selection, enclosure, fabrication record, production-test report, electrical-safety result, SAO interface/pinout, host test, run size, or delivery evidence. The catalogue does not turn source paths or first-person test claims into a confirmed physical badge.

Readers can discover the exact source project and its limited publisher-reported hardware work without mistaking either for a completed, compatible, safe, manufactured, or distributed event artifact.

Source note: MadmanTimmy3241/Defcon-badge-V2-RP2040 repository, commit-pinned tree, and 2026-07-21 hardware-test commit.

physical or electronic badge disclosure gap · official completed-event page audit · no physical or electronic conference badge disclosed by reviewed sources

The reviewed official HOPE 26 home, wiki, schedule, and ticket page identify the completed conference and its digital admission-ticket sale, but none identifies a physical badge, PCB, electronic badge, lanyard, wristband, ticket format, or technical badge specification. Historic HOPE X and HOPE XV records are not evidence for a 2026 recurrence.

The data model preserves the ticket as an identity artifact and prevents an unsupported claim that HOPE 26 had an electronic or physical conference badge.

Source note: HOPE 26 official event home, HOPE Wiki main page, official schedule, and 2600 ticket listing.

physical revision, production, and unit-configuration boundary · versioned public hardware sources · v1.0/v1.1 source releases public; event-unit mapping unrecovered

RIAT publishes versioned v1.0 and v1.1 hardware sources, KiCad fabrication material, cases, and documentation, but the reviewed public record does not map a specific release, component substitutions, test result, PCB lot, enclosure, battery, production quantity, factory/assembly path, or final configuration to each physical 39C3 unit.

Open hardware remains a preservation and reproduction trail without becoming a claim that every 39C3 badge exactly matches a current repository release or bill of materials.

Source note: riatlabs/cdc-badge repository and v1.1 release.

physical-archival status caveat · project docs · documented

The current source trail shows a complete project concept and extension design, but public recovery in this pass does not fully prove how broadly distributed Cyberwatch badges were or document a complete attendance-wide shipping ledger.

The dossier records what is sourced—badge architecture and shard concept—without over-claiming circulation or official distribution scope.

Source note: Cyberwatch project page and 39C3 codeberg documentation.