Not just specs

Issues & Camp Impact

Safety warnings, delivery problems, app-store gaps, team-process history, and first-hand reports are tracked as sourced records.

Reset
2208 matching issue record(s)

pre-production assembly defects · first-hand designer writeup · fixed before the production run

The designer reports that in the EVT an inductor labelled 10u was filled with a 10 µF capacitor (shorted as a workaround) and the chosen NFC chip was a tag rather than a reader; an EasyEDA import problem then forced white-only silkscreen. In the 50-unit PVT, batteries inserted the wrong way turned the badge into a smoke machine and the NFC chip and one power chip were placed rotated, so every board was reworked by hand (all 50 ended up working). The production design added a reverse-polarity FET with a bypass jumper, and checking JLCPCB's placement render caught the new FET rotated before production.

The shipped production boards include reverse-battery protection; earlier prototype boards may lack it. The account is the designer's own and is not independently audited.

Source note: va3ndf.com Making 1,750 programmable PCB badges, checked 2026-10-21.

pre-sale capacity, availability, and pickup fulfillment boundary · primary maker marketplace payload and maker technical archive · 125-total pre-sale; current 125-sold/zero-remaining snapshot

The marketplace payload reports a 125-total $55 pre-sale, 125 sold, zero remaining, no shipping options, and DEF CON 34 contest-booth pickup. The source repository says its production files are the exact outputs from which a run was built, but neither source proves payment settlement, assembly/quality control of all 125, pickup logistics, customer notice, collection, replacement, refund, delivery, or a post-event outcome.

The catalogue records both the observable availability snapshot and the maker-published production-file claim without translating either into a sold-and-delivered production report.

Source note: Darknet-NG SMAO Uberflux product page/payload and dcbokonon/darknet-smao v1.4 README.

pre-sale version and flashing boundary · maker README and v1.1 release · some pre-sale versions named; affected issue and upgrade outcome unspecified

The v1.1 release says pre-sale badges with firmware 1.0 or 1.01 should flash an update to fix an unspecified issue, while the README describes an acrylic-dependent manual boot-button path. It does not identify the issue, which serials were affected, firmware integrity, backed-up state, user-data effects, failure recovery, rollback, host compatibility, support, or the number of badges successfully upgraded.

The catalogue preserves a documented corrective-update trail without claiming the issue's severity, universal applicability, successful remediation, or a risk-free flashing process.

Source note: Initial Release - v1.1 and im-redactd/dantes_inferno README.

pre-sale, pickup, shipping, and fulfillment boundary · primary live maker marketplace payload · 100-total pre-sale; observed 41-sold snapshot

The maker payload reports a $120 100-unit presale with 41 sold, DC34 pickup, post-con shipping, an at-con price plan, and an uncollected-pickup donation statement. It does not establish a final production count, paid-order ledger, shipping window, pickup location/time, booth authorization, recipient, forfeiture process, donation recipient/amount, delivery, refund, replacement, or post-event result.

The catalogue retains the seller's current acquisition terms without presenting them as a completed run, confirmed onsite sale, guaranteed shipping/pickup, or verified charitable transfer.

Source note: Wordweaving Badge Uberflux product page/payload.

pre-sale, pickup, winner-copy, and fulfillment boundary · primary marketplace payload and repository · 150-total pre-sale; observed 28-sold snapshot

The marketplace payload reports $45, 150 total, 28 sold, 122 remaining, no shipping, and two future DEF CON 34 pickup labels, while the repository says winners receive copies while supplies last. Neither source establishes final manufacture, paid-order ledger, inventory allocation, pickup execution, delivery, winner count, award outcome, refund/replacement, or post-event availability.

The catalogue preserves announced independent acquisition paths without converting a live counter or contest promise into a confirmed completed distribution.

Source note: The Beer SAO Uberflux product payload and BCCC Temperature SAO repository.

premium-tier technical and variant boundary · official product and ticket-category wording · electronic and upgraded-PCB terms documented; physical implementation unrecovered

The organizer describes a unique collectible electronic badge and an exclusive upgraded PCB, but does not define what is electronic, what is upgraded, whether the terms refer to one artifact or several, or whether the item differs from the Digital / Circuit Badge. No final board, component set, revision, schematic, BOM, artwork, firmware, protocol, source, license, manufacturing record, or named badge team was recovered.

The premium offering remains a distinct ticket-form record without being reconstructed as a particular electronic device, established board variant, released program, or source-backed technical upgrade.

Source note: CypherCon 2026 registration and official badge ticket category.

preorder fulfillment, allocation, and DEF CON credential boundary · official programme site, current sold-out listing, and past-dated pickup schedules · sold-out preorder and planned September shipping published; delivery outcome unrecovered

The listing says paid orders will be assembled and shipped by September 30 and schedules offered blank-PCB pickup during DEF CON 2026. It does not publish an order or recipient ledger, run size, production status, per-order payment, assembly record, shipment tracking, delivery, collected-versus-uncollected blank count, replacement policy, or completed handoff. The listing expressly says this badge does not get a holder into DEF CON.

The catalogue retains the current sold-out preorder and stated fulfillment window without calling it a shipped badge, a completed recipient allocation, a DEF CON Human badge, or a DEF CON admission credential.

Source note: DEFCON Furs 2026 official site and schedules; Hack Your Lives DEFCON Furs 2026 badge listing, retrieved 2026-09-03.

preorder price, inventory, and fulfillment boundary · first-party seller listing · preorder pickup wording published; outcome unconfirmed

The product page shows a $150 price and says it is a preorder for Defcon pickup with leftovers to be posted after the con. It does not establish paid orders, final stock, pickup timing, handoff, shipment, refund, replacement, support, or completed fulfillment.

The catalogue records source-provided seller terms without treating a planned pickup or retail price as a proven completed distribution.

Source note: Submarine Badge & Pirate SAO product listing.

preorder, extras, pickup, and fulfillment boundary · primary maker storefront and corroborating first-person post · preorders stated sold out; possible extras mentioned

The maker currently says preorders are sold out, may have a few extras to trade in person, and will email pickup details to preorder customers; a linked first-person post says no shipping and DEF CON pickups. The sources do not identify a final production quantity, availability of extras, payment state, recipient list, pickup location/time, event authorization, trade terms, handoff, delivery, replacement, refund, or post-event outcome.

The catalogue records a live sold-out and pickup-oriented source state without turning it into a confirmed fulfilled run or a guaranteed opportunity to acquire an extra.

Source note: Zach's Hacks product page/payload and first-person r/Defcon announcement.

price, stock, and fulfillment boundary · first-party seller listing · sold-out state published; allocation and delivery unconfirmed

The product page shows $150, an out-of-stock notice, and sold-out-since-August-11-2025 wording. It does not establish final stock, number of orders, payment, pickup, shipment, refunds, replacements, support, resale, or completed distribution.

The catalogue preserves a dated seller availability statement rather than treating sold out as proof that every unit reached the scheduled event or every buyer received a badge.

Source note: FightDystopia 2025 Badge product listing.

price, stock, and fulfillment boundary · separate seller and vendor-list sources · published price and stock states; inventory relationship and delivery unconfirmed

The DEF CON 33 vendor list names a $140 Gunslinger-B-Gone Badge, while the Tindie page later shows $100 and sold-out-since-September-13-2025 wording. The sources do not explain shared batches, stock, price changes, payment, pickup, shipping, refunds, replacements, or completed fulfillment.

The catalogue keeps distinct source snapshots instead of merging them into a single asserted price, inventory, or distribution history.

Source note: Hacker Couture DEFCON 33 Product List and Gunslinger-B-Gone Tindie listing.

price, stock, and fulfillment boundary · maker listing and later vendor list · published $100 and 2024 sold-out state; inventory and delivery unconfirmed

The maker page shows $100 and says the badge has been sold out since September 7, 2024; the later Hacker Couture list also shows $100. Neither source establishes stock relationship, production quantity, buyers, payments, event pickup, shipment, refunds, replacements, resale, support, packaging completion, or completed delivery.

The catalogue keeps distinct seller/vendor snapshots instead of turning a displayed price or sold-out state into proof of event sale, recipient allocation, or fulfilled ownership.

Source note: Dante's Inferno Tindie listing and Hacker Couture DEFCON 33 Product List.

price, stock, proceeds, and fulfillment boundary · seller, maker profile, and vendor-list wording · published $125 and mission context; inventory and delivery unconfirmed

The product and vendor list show $125, and the profile says all proceeds support Hak4Kidz's mission and ethos. Sources do not establish inventory, units sold, buyers, payments, proceeds amount/destination, charitable accounting, pickup, shipment, refunds, replacements, support, resale, or completed fulfillment.

The catalogue keeps the published marketplace and mission wording without treating it as proof of sales, donation outcome, official fundraising, or final recipient delivery.

Source note: Masonic33 Tindie listing, Hak4Kidz Lab profile, and Hacker Couture DEFCON 33 Product List.

primary technical archive gap · credible secondary source but incomplete primary archive · needs official schematic or firmware recovery

The recovered source trail documents a NodeMCU ESP8266 handmade badge and badge-hack contest, but this pass did not recover an official 2018 schematic, PCB, BOM, firmware repository, or direct organizer badge writeup.

The record keeps component claims to the published NodeMCU ESP8266 detail and avoids assigning unverified display, battery, schedule, or CTF features.

Source note: Australian Cyber Security Magazine 2018 report and BSides Perth 2021 sponsor-pack retrospective.

primary-source archive gap · reviewed public-source boundary · current official home has rolled to 0x9

The live PWNEDCR home currently presents 0x9, while no retained public 0x08 official event page, badge announcement, technical repository, or historical organizer archive was recovered. The named Fluid Attacks report is the available artifact-level evidence.

The dossier treats that report as enough to establish a real 2025 electronic badge without representing it as an official 0x08 archive or independent technical corroboration.

Source note: Current PWNEDCR home and Fluid Attacks' named post-event account.

print form, data, consent, and access-function gap · official app page · networking purpose named; artifact and data model unreleased

The source says the Networking Badge facilitates attendee connections and is printable with the digital badge, but does not identify medium, dimensions, design, personal-data fields, QR/barcode/RFID/NFC behavior, app-to-print data flow, consent/opt-in controls, visibility settings, contact sharing, retention, security, accessibility, credential authentication, venue-access role, challenge role, or privacy terms specific to the printable artifact.

The dossier does not turn a networking purpose into a claim about badge technology, identity verification, data handling, contact exchange, physical construction, or permission to access the venue.

Source note: Barcelona Cybersecurity Congress app and networking badge page.

prior-year badge non-transferability · local project policy · lineage context only

The Supercon lineage includes deeply documented prior badges such as the 2025 Communicator Badge with ESP32-S3, LoRa, keyboard, and MicroPython, and the author comment that the 2026 badge must have an add-on. None of that is 2026 evidence, and no prior-year component, radio, connector, or firmware stack may be read into the unrevealed design.

Readers can follow the documented lineage without assuming the tenth-anniversary badge repeats any earlier platform or feature.

Source note: badge.gallery Supercon lineage records and the reviewed 2026 Hackaday sources.

prior-year technology non-transferability · official 2026 page and 2025 retrospective · 2025 technical trail retained as historical context only

A credible 2025 retrospective describes a workshop-only Electronic Cats NFC/OLED badge with a 100-unit run. The official 2026 diploma page does not name Electronic Cats, reuse that hardware description, state a recipient count, or say the badge is a revision of the 2025 artifact.

Known 2025 NFC/OLED details cannot be presented as the 2026 diploma badge's components, maker, challenge, quantity, or eligibility conditions.

Source note: DragonJARCON 2026 official pages and Fluid Attacks' DragonJARCON 2025 retrospective.

privacy and sensor caveat · official research statement · documented

The study context involved VR goggles, physiological sensors, questionnaires, challenge activity, and researcher check-ins, with the recruitment statement explaining data collection and participant procedures.

The badge dossier preserves the research-study context while avoiding unrelated claims about public badge behavior, firmware, or attendee monitoring outside SaikoCTF participation.

Source note: HITB Recruitment statement.

privacy-sensitive ticketing · official ticketing page · documented

The ticket page says registration required no personal data, generated random ticket IDs were checked by the campsite, reception saw only the random ID, and submitted ticketing information would be destroyed by the end of the event.

This is useful lore for an identity-artifact dossier because the access marker deliberately minimized personal-data handling while satisfying campsite logistics.

Source note: Camp++ 2022 tickets page.

privacy-sensitive ticketing · official ticketing page · documented

The ticket page says registration required no personal data, random ticket IDs were shared with campsite reception for entry checking, and submitted ticketing information would be destroyed by the end of the event.

This is useful lore for an identity-artifact dossier because the access marker deliberately minimized personal-data handling while still satisfying campsite logistics.

Source note: Camp++ 2023 tickets page.

privacy-sensitive ticketing · official ticketing page · documented

The ticket page says registration required no personal data, generated random ticket IDs were checked by the campsite, and submitted ticketing information would be destroyed by the end of the event.

This is useful lore for an identity-artifact dossier because the access marker deliberately minimized personal-data handling while satisfying campsite logistics.

Source note: Camp++ 2024 tickets page.

proceeds, beneficiary, and accounting boundary · primary maker product statement · stated excess-proceeds intention only

The maker says proceeds in excess of manufacturing costs are intended to support Bind's family and remaining medical costs. The public page does not identify a recipient/legal entity, authorization, cost basis, amount, transfer mechanism, payment timing, tax treatment, accounting, audit, or post-event disbursement result.

The catalogue preserves the public maker intention without presenting it as a completed charitable transfer, family endorsement, financial audit, tax determination, or quantified benefit.

Source note: Whose Slide maker product page.

production and fulfillment gap · official current package and event pages · conference and diploma dates elapsed; badge delivery unverified

The official page advertises an exclusive electronic badge as a diploma-package benefit. The official home now marks the September 10-11 conference as a completed past event and pivots to 2027, but no reviewed source reports the September 14-18 diploma outcome, final fabrication, package sales, recipient count, handoff, pickup, shipment, replacements, variants, losses, or completed recipient allocation.

The record preserves a concrete announced offer without representing commercial copy as a completed build or universal fulfillment.

Source note: DragonJARCON 2026 conference and diploma page and official event home, rechecked 2026-09-23.

production triage caveat · primary production log · documented

The production log records initial triage failures including no serial on 6 of 28 sampled badges, no LEDs on 13 of 28, capacitive-touch failures on 6 of 28, cannot-flash failures on 10 of 28, and BMD-340 soldering issues that required manual diagnosis and rework.

The record preserves the badge as a real distributed artifact with documented production yield and rework constraints rather than treating the design as frictionless reference hardware.

Source note: AND!XOR DC27 production log.

production-board and physical-configuration boundary · public hardware documentation · documented REV 2 outline; complete production record unrecovered

The public hardware reference names the 2025-05-05 REV 2 board and its component outline, but reviewed sources do not establish a reconciled manufacturing BOM, component substitutions, production test result, fabrication count, final assembled photographs, board-revision distribution, or complete physical-unit configuration.

Source-backed board details remain useful without becoming a claim of every produced badge's exact bill of materials, layout, quality, or final physical state.

Source note: BSides Vancouver badge HARDWARE.md and first-party 2025 binary bundle.

production-depth caveat · source-backed but historical · needs board-revision audit

The public trail documents kit features, workshop software, pin assignments, attendee use, repository license context, and an official render, but this pass did not audit exact production-board revision, BOM completeness, manufacturing quantity, or whether every repository image maps to distributed LCA2018 kits.

The dossier records verified hardware/software behavior and image provenance while avoiding unsupported production-run or board-revision claims.

Source note: CCHS Melbourne LoliBot repository, Freetronics product page, and MicroPython tutorial.

production-panel and final-unit variation boundary · first-person maker-project observation · limited panel-quality observation published; aggregate outcome unrecovered

The first-person project notes that some transparent panels overheated or wrinkled during production while units were worked on at camp. The reviewed sources do not quantify affected units, identify all causes, describe final remediation, publish quality-control results, or establish that every distributed unit had the same condition or configuration.

The catalogue retains a narrow documented production caveat without presenting it as a defect rate, recall, safety finding, or universal final-unit characteristic.

Source note: Jacopo Franco's Fully Transparent Folded Cube Badge Hackaday.io project.

project-builder confirmation and official-archive gap · direct project-builder post plus community sources · direct build/CTF confirmation; official archive unrecovered

The TechFrontiers write-up directly attributes the PACMAN Ghost badge build and CTF design to David Melendez Cano and Gabriela G., while community reversals independently document several component and firmware details. Neither source set supplies an official RootedCON design repository, complete schematic/PCB/BOM/Gerber archive, production ledger, final revision map, battery/charger documentation, backend/protocol source, release, or license.

The catalogue now records direct builder attribution and event architecture without portraying a personal project post or community reverse-engineering tree as an official RootedCON source release, complete production specification, firmware security audit, or reusable-image permission.

Source note: David Melendez Cano / TechFrontiers RootedCON badge write-up; RootedCON 2026 community reversing, custom-firmware, and repurpose repositories.

prospectus, publication, and allocation boundary · official event sources plus post-event repository · documented caveat

The prospectus describes electronic badge design/build for 500 delegates, ticketing and event updates establish badge pickup, and the later repository documents an event-specific Clock Module. None of those sources maps the prospectus quantity to completed units, distinguishes a physical VIP variant, or proves that the public July 10 source snapshot was the exact design used by every attendee on July 4.

The record combines corroborating event and hardware evidence without converting sponsor wording, later source publication, or one photo into a universal fulfillment or configuration claim.

Source note: BSides Brisbane 2026 prospectus, Humanitix ticketing, BSides Brisbane LinkedIn updates, and bsidesbrisbane/badge-2026 commit 58a7d9b2e9502cb689f52f1f6826bfcaa90e214c.