2.0 -//Pentabarf//Schedule//EN PUBLISH BCXV3C@@talks.toorcon.net -BCXV3C ToorCamp Movie Night: Annihilation (2018) en en 20260624T200000 20260624T220000 020000

ToorCamp Movie Night: Annihilation (2018)

The story follows a group of scientists who enter the Shimmer, a mysterious quarantined zone of mutating plants and animals caused by an alien presence. https://www.imdb.com/title/tt2798920/ PUBLIC CONFIRMED Workshop https://talks.toorcon.net/toorcamp-2026/talk/BCXV3C/ Prime Dome Carlos De Leon PUBLISH YHQ37L@@talks.toorcon.net -YHQ37L Fiber Splicing Workshop en en 20260624T133000 20260624T143000 010000

Fiber Splicing Workshop

Caleb a technician for the local island ISP (Rockisland) will give a hands-on introduction to fiber optic splicing, covering the tools, techniques, and best practices used to create low-loss, reliable fiber connections. Participants will learn the basics of fiber preparation, fusion splicing, inspection, and testing through practical demonstrations and guided practice. PUBLIC CONFIRMED Workshop https://talks.toorcon.net/toorcamp-2026/talk/YHQ37L/ Hardware Hacking Stage Caleb Pal PUBLISH T7LN8M@@talks.toorcon.net -T7LN8M Opening Remarks en en 20260625T103000 20260625T105000 002000

Opening Remarks

PUBLIC CONFIRMED 20-Min Talk https://talks.toorcon.net/toorcamp-2026/talk/T7LN8M/ Prime Dome David Hulton PUBLISH EVVKG7@@talks.toorcon.net -EVVKG7 Breaking the ICE: The Surveillance Stack Behind Your Sheriff’s “Community” App en en 20260625T110000 20260625T115000 005000

Breaking the ICE: The Surveillance Stack Behind Your Sheriff’s “Community” App

In February 2026, my friend was picked up by Sheriffs in Nevada on a traffic violation. He was placed on an ICE hold, released, then arrested in the parking lot by ICE agents and handed back to the sheriffs, who held him off the record. He disappeared for three days. No one could find him in any system. I had a standing promise: if he was ever detained, I’d get him out, but I had to find him first. So I built the first version of a jail roster monitor that Sunday morning. It was simple: poll the 2 nearby County sheriff’s app APIs and 2 other nearby county web APIs, match against his name, alert our Signal group. Monday morning it found him. They had finally re-registered him into the system on an ICE hold. This is ICE's 287(g) program at work: local sheriffs operating as ICE’s distributed detention infrastructure. Then he was transferred to a multi-agency detention center in Washoe County, mixed into general population on an ICE hold. He disappeared from the Douglas County system but never appeared in Washoe’s. Gone again. While looking for other ways to find him, I looked into VINELink, a self-styled national victim notification system, and discovered it’s operated by Appriss Inc., a subsidiary of Equifax since 2020. Later, when I audited the sheriff’s apps, I found VINE integration baked directly into the app platform: the apps are silently routing inmate search data to Equifax’s infrastructure whether the user knows it or not. Nevada had terminated their own VINE agreement in August 2025 and replaced it with SAVE (save.nv.gov), so I built a scanner for that instead. But the bigger realization shaped everything that followed: the data aggregators aren’t the source. The source is better. Harder to maintain, but better. Every layer between you and the data is another entity logging your query. So we went direct: raw sheriff APIs, raw booking systems, raw state databases. I saw a clear pattern: the app that Douglas County uses, OCV, aka “TheSheriffApp”, is the same platform serving hundreds of agencies. I used Claude to scale the monitor across Nevada and California the next day. Within a week it covered 55 sources across 9 states. Then I started auditing the apps themselves. **What I found inside** I reverse-engineered 8 OCV sheriff apps across Texas, Florida, Georgia, and Nevada. Every one shares the same backend, the same hardcoded API keys, the same analytics infrastructure. Independent county branding over a single private company’s servers. The findings: - 8/8 ship Firebase Analytics, Google AdMob with persistent advertising ID, and GPS location services; three independent tracking pipelines in a “community safety” app - 8/8 request fine GPS location, phone state, and contacts access. One requests SMS read/send, microphone, and call log interception - TagAlong: continuous GPS surveillance that uploads point-by-point coordinates to OCV’s servers; not the county’s. The code tracks “UserView” objects through “Trip” sessions in real time. This is person tracking, not asset management - Appriss VINE integration embedded in the apps themselves: OCV routes inmate search data through vine.prod3.myocv.com to Appriss Inc., an Equifax subsidiary. Users of these “community” sheriff apps are unknowingly feeding query data to a credit bureau; this isn’t a service you opt into, it’s baked into the platform - All 8 apps share the same AWS Cognito identity pool and the same hardcoded YouTube API key — a single backend operating behind the branding of independent county sheriffs - 52 hardcoded secrets extracted across 8 apps; API keys, AWS credentials, Firebase project IDs, all sitting in the bytecode The combination is the point: fine GPS + advertising ID + Equifax-owned search logging means that the act of looking for your loved one creates a location-tagged, ad-network-linked record at a credit bureau. I discovered over 1,000 agencies signed up for 287(g) agreements with ICE, 137 operating under the jail enforcement model. I added this data plus ICE detention facility locations to a [coverage map](https://frio.help/map). **What I built instead** [Frio](https://frio.help/) monitors the same data sources with a zero-knowledge architecture: the operator cannot read the queries, cannot see who is searching, and cannot access the results. I’ll walk through the design — NaCl sealed-box encryption, content-addressed memory shards with time-based decay, and the Spiritwriter agent governance framework that delegates work to untrusted agents with cryptographic accountability. The search service is live and free. I’ll close with where this is going: Percival (camouflage nodes disguised as local news sites), distributed contributor networks where even adversarial participants are forced to contribute real value, and the tension between zero-knowledge design and the aggregate intelligence needed to measure the scope of illegal detention nationally. **What the audience takes away** - How a real surveillance stack works at the bytecode level — and how one person audited 8 apps in parallel using AI agents - The zero-knowledge architecture patterns behind Frio and Spiritwriter (Frio's back-end memory architecture will be open sourced) - A framework for thinking about when the act of searching is itself the threat model - How the 287(g) program turns county sheriffs into ICE’s distributed detention infrastructure, and what the technical countermeasures look like PUBLIC CONFIRMED 50-Min Talk https://talks.toorcon.net/toorcamp-2026/talk/EVVKG7/ Prime Dome Aaron Markham PUBLISH SATVGJ@@talks.toorcon.net -SATVGJ The Telephone Underground en en 20260625T120000 20260625T125000 005000

The Telephone Underground

Talk by J. B. Crawford, author of Computers Are Bad (https://computer.rip). I hope to leverage the increasing interest in telecommunications history to bring attention to the enduring impact that underground and pole-line long distance leads have had on our nation. We'll also look at specific details of the multiplexing and protection systems, from which we can learn some lessons about reliable communications infrastructure today. PUBLIC CONFIRMED 50-Min Talk https://talks.toorcon.net/toorcamp-2026/talk/SATVGJ/ Prime Dome J. B. Crawford PUBLISH WCKANP@@talks.toorcon.net -WCKANP The Dinosaur in the Room: Mainframe Hacking in 2026 en en 20260625T130000 20260625T135000 005000

The Dinosaur in the Room: Mainframe Hacking in 2026

Do you want to learn about security testing mainframes? This talk is for you. Are you mainframe curious? This will be a good intro to common things that are identified when doing Mainframe testing. There will also be a rant about CVEs, or that lack thereof in the z/OS world. Look, mainframes aren't going away, and the number of people who can secure them is shrinking, its time for like minded people to rise up and help keep this critical platform safe. PUBLIC CONFIRMED 50-Min Talk https://talks.toorcon.net/toorcamp-2026/talk/WCKANP/ Prime Dome David M. N. Bryan - Aka VideoMan PUBLISH MES9MQ@@talks.toorcon.net -MES9MQ Environmental DNA in Near-Real Time en en 20260625T140000 20260625T145000 005000

Environmental DNA in Near-Real Time

Scientists from the University of Washington's eDNA Collaborative work to move environmental DNA analysis out of the lab and into the field. Here, we are working to do this without a lab and without a net. There are lots of interesting engineering and computational problems to be solved, and we welcome all suggestions (or any help!) as we work to crack this field wide open and show everyone that they are surrounded by an ocean of DNA. PUBLIC CONFIRMED 50-Min Talk https://talks.toorcon.net/toorcamp-2026/talk/MES9MQ/ Prime Dome Ryan Kelly Aden Ip PUBLISH YED9CM@@talks.toorcon.net -YED9CM Always Bee Counting en en 20260625T150000 20260625T152000 002000

Always Bee Counting

PUBLIC CONFIRMED 20-Min Talk https://talks.toorcon.net/toorcamp-2026/talk/YED9CM/ Prime Dome Benjamin Foote PUBLISH BUVLFU@@talks.toorcon.net -BUVLFU WHAT IF WE ACTUALLY TRIED? Renovating the Ethical Foundation of Democracy en en 20260625T153000 20260625T155000 002000

WHAT IF WE ACTUALLY TRIED? Renovating the Ethical Foundation of Democracy

A systems engineer who grew up poor and got rich argues that democracy isn't failing because people are broken — it's failing because the machinery is. The book diagnoses a specific, measurable information-theoretic failure (political parties compress a fourteen-dimensional policy space into a two-option menu), proposes a concrete alternative (a deliberation layer where citizens express their actual views, paired with a cryptographic identity system that makes honest participation safe), and makes the case that dissatisfaction with the current system has converged so broadly — across communities that consider each other enemies — that the conditions for structural reform exist for the first time in decades. PUBLIC CONFIRMED 20-Min Talk https://talks.toorcon.net/toorcamp-2026/talk/BUVLFU/ Prime Dome Alex Cruise PUBLISH E7HBMS@@talks.toorcon.net -E7HBMS A Better Life Underground en en 20260625T160000 20260625T162000 002000

A Better Life Underground

This talk will roughly cover: 1. How I got into this & identifying signs of burnout 2. How to do this safely, real-world risks & essential gear 3. My research process for identifying mines incl data sources 4. The mine exploring communities I've discovered incl one with hacker friends in it, and the wild people I've made connections with through these communities 5. How taking explosives training lead to an opportunity to connect with another hacker also into this hobby and assist with disposal of hundreds of sticks of old/unstable dynamite 6. Misc stories and unique content: detailed underground maps of select mines made by a friend, cool historical artifacts found incl 100 year old newspapers & miner's art drawn with carbide lamps, crazy crystal formations stumbled on, etc PUBLIC CONFIRMED 20-Min Talk https://talks.toorcon.net/toorcamp-2026/talk/E7HBMS/ Prime Dome polack PUBLISH BFUU9K@@talks.toorcon.net -BFUU9K Yes, an electric unicycle is the most practical way to get around: a love letter and an incident report en en 20260625T163000 20260625T165000 002000

Yes, an electric unicycle is the most practical way to get around: a love letter and an incident report

I've been riding EUCs as primary transport for a couple years. It comes inside with me. The grocery store, the bar, the office, the bus, the train. Which means I've never circled the block for parking, never locked anything to a rack, never registered the vehicle with anyone, and never been doored by a car (yet). I'm here to convince you it's the most practical personal vehicle ever built. Then I'll spend the rest of the talk undermining my own argument: firmware you flash at your own risk, BMS protection circuits and the manufacturers who decided to skip them, the lithium fire math (it's fine, it's fine, it's mostly fine), why controller tuning matters more than motor size, the telemetry ecosystem, what "cut-out" means and exactly how I learned it (badly, at speed, with my face), the ER visit, the months of physical therapy, the couple of teeth that are no longer original equipment, the insurance question, and the small global community of people who looked at all of that and decided this is still a normal way to live. Live demo all week. I'm the one going up the Doe Bay hill without pedaling, wearing more protective gear than seems strictly necessary, for reasons you can probably guess by now. PUBLIC CONFIRMED 20-Min Talk https://talks.toorcon.net/toorcamp-2026/talk/BFUU9K/ Prime Dome Dustin PUBLISH 8KCDJS@@talks.toorcon.net -8KCDJS What's after LoRA? en en 20260625T170000 20260625T172000 002000

What's after LoRA?

LoRA is a spread-spectrum protocol, designed for use in negative signal-to-noise ratio applications and in environments with other intentional radiators. While very low data rate, it's impressive just how much LoRA can cut through to deliver the message. Because LoRA targets inexpensive transceiver chips, compromises had to be made with the protocol. But, what if we didn't have that restriction? What if we had some more umph behind it. Could we more effectively hide the LoRA signals, allow signals to be received even when collisions happen with more powerful stations? We will discuss what other people are doing in this space with curved chirps, and mixing in frequency hopping as well as a number of other approaches that can solve problems you probably didn't even know LoRA has! PUBLIC CONFIRMED 20-Min Talk https://talks.toorcon.net/toorcamp-2026/talk/8KCDJS/ Prime Dome CNLohr PUBLISH LZFP7G@@talks.toorcon.net -LZFP7G Hacker Foundation Hijinks en en 20260625T173000 20260625T175000 002000

Hacker Foundation Hijinks

PUBLIC CONFIRMED 20-Min Talk https://talks.toorcon.net/toorcamp-2026/talk/LZFP7G/ Prime Dome Dean Pierce PUBLISH EQMRXH@@talks.toorcon.net -EQMRXH Building a Kids-only Phone Network en en 20260625T180000 20260625T182000 002000

Building a Kids-only Phone Network

PUBLIC CONFIRMED 20-Min Talk https://talks.toorcon.net/toorcamp-2026/talk/EQMRXH/ Prime Dome n3wscott PUBLISH 9DAJWJ@@talks.toorcon.net -9DAJWJ Free! American Red Cross Adult CPR/AED training (+first aid option) en en 20260625T110000 20260625T123000 013000

Free! American Red Cross Adult CPR/AED training (+first aid option)

Karmic Project will be offering free training and certification with the Adult CPR/AED course by the American Red Cross. Advanced registration is helpful for ensuring the proper amount of training supplies but not required. Registration at: https://tally.so/r/RGk45Q If you wish to get your first aid certification or renew your existing certification, you can take the blended online course and complete the training at the end of the CPR/AED course. Registration *is required* for the first aid certification so that we can send you the voucher to access the online portion of the course *prior* to arrival for the in-person skills test. If you do not complete the online portion we will not be able to issue the first aid certification, but you still can earn the Adult CPR/AED certification. Karmic Project (501c3 non-profit organization) will be sponsoring and covering the costs the certifications ($50/student). Those that wish to donate to help cover the costs and supplies can do so at https://www.karmicproject.org and all donations are tax-deductible. PUBLIC CONFIRMED Workshop https://talks.toorcon.net/toorcamp-2026/talk/9DAJWJ/ Yoga Studio Sova (no pronouns / name only preferred) PUBLISH WJPJYT@@talks.toorcon.net -WJPJYT Breaking the ICE: Hands-On — Tear Down a Sheriff's App, Build the Replacement en en 20260625T160000 20260625T173000 013000

Breaking the ICE: Hands-On — Tear Down a Sheriff's App, Build the Replacement

This workshop stands on its own, but pairs with my talk submission covering the surveillance findings that motivated this architecture. The short version: I reverse-engineered the sheriff's apps that families are told to install to check on detained loved ones and found GPS surveillance, ad tracking, and inmate searches routed to a credit bureau. This workshop is the constructive response: you'll build the kind of system that should exist instead. What you'll build: 1. **Keypair generation:** NaCl sealed-box encryption with dual keys (service key for processing, requestor key for results) 2. **Encrypted intake:** a requestor submits a query that the system can process but never read 3. **Fuzzy matching:** search a simulated data source with privacy-preserving name matching and configurable thresholds 4. **Encrypted result delivery:** matches are encrypted to the requestor's key; the operator sees only that a match occurred, not the content 5. **Shard decay:** data doesn't persist indefinitely; implement time-based expiration classes so the system forgets 6. **Agent skill:** use Claude Code to write a skill that can audit, scrape, or extend your service, then run it against your prototype 7. **Binary audit (capstone):** use Rizin to extract strings, permissions, and hardcoded secrets from a real sheriff's app APK, then have your agent classify the findings against a canonical threat registry. This is the same workflow used to audit 8 OCV sheriff apps in parallel What you'll take away: - A working prototype you can extend for your own use case - Understanding of zero-knowledge service architecture - Practical NaCl/libsodium usage patterns - A framework for thinking about surveillance-resistant system design - Experience using Claude Code skills as a force multiplier — the same approach used to audit 8 APKs in parallel and build scrapers for 55 data sources - Exposure to Spiritwriter's shard and entitlement model for building governed agent systems Prerequisites: - Laptop with Python 3.12+ and Rizin installed (rizin.re — we'll have install instructions for all platforms) - Claude Code CLI installed (API credits — we'll have a limited number of $10 starter credits available for attendees who need them) - Familiarity with Python helpful but not required — we'll explain as we go - No prior crypto or reverse engineering experience needed Materials provided: - Starter code repo with scaffolding and test data (built on spiritwriter-core) - Reference architecture diagram - Cheat sheet: NaCl sealed-box operations in PyNaCl - Claude Code skill templates for extending the prototype - Spiritwriter quick-start guide for turning the prototype into a distributed system PUBLIC CONFIRMED Workshop https://talks.toorcon.net/toorcamp-2026/talk/WJPJYT/ Yoga Studio Aaron Markham PUBLISH GLJMQL@@talks.toorcon.net -GLJMQL 0xfff3 plays a chill daytime set en en 20260625T190000 20260625T200000 010000

0xfff3 plays a chill daytime set

dj 0xfff3 is a seattle local borne out of the raver queer hacker scene, with close ties to the /dev/hack hackerspace and impact! foundations, and is challenging every assumption when it comes to djing with both track selection, hardware (mixing on a self-programmed steam deck!), ‚�舐Þ¥¿Þ¥¿???? PUBLIC CONFIRMED Music / DJ Set https://talks.toorcon.net/toorcamp-2026/talk/GLJMQL/ Yoga Studio Front Lawn m PUBLISH BBDTEN@@talks.toorcon.net -BBDTEN Echo's techno en en 20260625T200000 20260625T210000 010000

Echo's techno

PUBLIC CONFIRMED Music / DJ Set https://talks.toorcon.net/toorcamp-2026/talk/BBDTEN/ Yoga Studio Front Lawn echo PUBLISH JKRLWX@@talks.toorcon.net -JKRLWX Syntax + Luna en en 20260625T210000 20260625T220000 010000

Syntax + Luna

DnB and Viz PUBLIC CONFIRMED Music / DJ Set https://talks.toorcon.net/toorcamp-2026/talk/JKRLWX/ Yoga Studio Front Lawn syntax PUBLISH 8D73ZG@@talks.toorcon.net -8D73ZG NightMrkt en en 20260625T210000 20260626T020000 050000

NightMrkt

PUBLIC CONFIRMED Workshop https://talks.toorcon.net/toorcamp-2026/talk/8D73ZG/ Volleyball Court - NightMrkt After Dark pinguino kolb PUBLISH F87RSR@@talks.toorcon.net -F87RSR Coffee Roasting 101 - the reckoning en en 20260625T093000 20260625T102000 005000

Coffee Roasting 101 - the reckoning

PUBLIC CONFIRMED 50-Min Talk https://talks.toorcon.net/toorcamp-2026/talk/F87RSR/ Hardware Hacking Stage Dylan McNamee PUBLISH C3B9AT@@talks.toorcon.net -C3B9AT Lock Drilling Class en en 20260625T110000 20260625T133000 023000

Lock Drilling Class

Come learn how to use a drill to open a door. One on one lesson from a locksmith on using a drill bit to defeat a lock. Drill, bits, gloves, and safety glasses provided. Join us to drill, stop by to pick up a practice cylinder to pick. PUBLIC CONFIRMED Workshop https://talks.toorcon.net/toorcamp-2026/talk/C3B9AT/ Hardware Hacking Stage qweary PUBLISH FP9TLA@@talks.toorcon.net -FP9TLA Badge Soldering Workshop en en 20260625T140000 20260625T160000 020000

Badge Soldering Workshop

Badge assembly. Learn to solder using two different custom badges from past ToorCamps. Teens or older or with parental supervision. 2 sessions PUBLIC CONFIRMED Workshop https://talks.toorcon.net/toorcamp-2026/talk/FP9TLA/ Hardware Hacking Stage Curtis Mack PUBLISH AKFMKU@@talks.toorcon.net -AKFMKU Meshtastic for Beginners: Join Your Local Community Mesh Net! en en 20260625T160000 20260625T173000 013000

Meshtastic for Beginners: Join Your Local Community Mesh Net!

Want to get started with Meshtastic, and other off-grid LoRa mesh protocols? Learn the key differences between Meshcore, Meshtastic, and Reticulum, and how to customize your custom Meshtastic node to join your local community mesh network. You'll set up your node, learn to customize settings, use your node with your smartphone, and adapt your setup for specific environments. We’ll also cover common attacks against mesh networks and how to defend against them! PUBLIC CONFIRMED Workshop https://talks.toorcon.net/toorcamp-2026/talk/AKFMKU/ Hardware Hacking Stage Kody Kinzie PUBLISH 9SYKGX@@talks.toorcon.net -9SYKGX Meshcore & Meshtastic for Beginners: Solder Your Encrypted Off-Grid Node! (soldering) en en 20260625T180000 20260625T193000 013000

Meshcore & Meshtastic for Beginners: Solder Your Encrypted Off-Grid Node! (soldering)

Build your own cat-themed Nibble Mesh node and join the massive off-grid LoRa mesh networks popping up worldwide! In this class, you will learn to solder and flash Meshcore and Meshtastic onto your device, allowing you to connect, message, and explore independent networks. You will also build an environmental sensor to create your own remote weather station. For beginners to intermediate soldering skills. https://retia.io/toorcamp PUBLIC CONFIRMED Workshop https://talks.toorcon.net/toorcamp-2026/talk/9SYKGX/ Hardware Hacking Stage Kody Kinzie PUBLISH F8FXEL@@talks.toorcon.net -F8FXEL Bronze metal clay jewelry en en 20260625T103000 20260625T120000 013000

Bronze metal clay jewelry

Come make a pendant or charm using molds, texture sheets and other clay tools. This process includes forming your metal clay piece, letting it dry to the greenware stage, then cleaning it up and carving details. After it gets fired in the kiln, you'll do final finishing work on your solid metal piece. Bring your Toorcamp passport stamp or other favorite rubber stamps to impress the clay with if you'd like. One-on-one or small group sessions available to create more elaborate or specific pieces from silver or base metal clay for material costs plus a small class fee. Message me for details. PUBLIC CONFIRMED Workshop https://talks.toorcon.net/toorcamp-2026/talk/F8FXEL/ Great Faerie Crafting Yurt Amy Johnston PUBLISH P3W8HM@@talks.toorcon.net -P3W8HM Decorate your own dragon puppet en en 20260625T130000 20260625T143000 013000

Decorate your own dragon puppet

PUBLIC CONFIRMED Workshop https://talks.toorcon.net/toorcamp-2026/talk/P3W8HM/ Great Faerie Crafting Yurt Sonya PUBLISH PA9AUD@@talks.toorcon.net -PA9AUD Creative Mask Making en en 20260625T170000 20260625T180000 010000

Creative Mask Making

Everyone is welcome, no matter your experience level. We'll be using various materials and tools, including adhesives, sharp tools, and hot tools. PUBLIC CONFIRMED Kid Friendly Workshop https://talks.toorcon.net/toorcamp-2026/talk/PA9AUD/ Great Faerie Crafting Yurt viper PUBLISH VWKEZN@@talks.toorcon.net -VWKEZN Makerspace Open House en en 20260625T120000 20260625T160000 040000

Makerspace Open House

OlyMEGA brought a laser engraver / cutter, vinyl cutter, 3-D printer' and other tools. Bring your own SVGs, images, and ideas and work with an Olymegan to burn or cut them into whatever material you choose. We will provide boards or vinyl sheets if you need them. First come first served. We can actively work with around three people at a time. PUBLIC CONFIRMED Workshop https://talks.toorcon.net/toorcamp-2026/talk/VWKEZN/ OlyMEGA Village Curtis Mack PUBLISH 9NE7PU@@talks.toorcon.net -9NE7PU Intro to Sewing Workshop en en 20260625T160000 20260625T180000 020000

Intro to Sewing Workshop

Intro to sewing - Learn the basics In the cabin 4 people at a time. Teen or older. @ OlyMEGA Village PUBLIC CONFIRMED Workshop https://talks.toorcon.net/toorcamp-2026/talk/9NE7PU/ OlyMEGA Village Angela Livermore PUBLISH LDJF3A@@talks.toorcon.net -LDJF3A KEYNOTE: Jack Rhysider, Darknet Diaries en en 20260626T110000 20260626T115000 005000

KEYNOTE: Jack Rhysider, Darknet Diaries

Jack Rhysider is the creator and host of the podcast Darknet Diaries. And he says the best place on earth is ToorCamp. PUBLIC CONFIRMED 50-Min Talk https://talks.toorcon.net/toorcamp-2026/talk/LDJF3A/ Prime Dome Jack Rhysider PUBLISH MJBZNN@@talks.toorcon.net -MJBZNN Physical Access, Digital Lies: How a Locksmith Hacked His Recommended Lock en en 20260626T120000 20260626T125000 005000

Physical Access, Digital Lies: How a Locksmith Hacked His Recommended Lock

The five attack layers, in order of escalation: **Layer 1 — Physical:** Acoustic side-channel keylogging through speaker voltage leakage. Tailpiece deflection with a stiff wire. Factory reset triggered by freezing battery leads with an inverted compressed air can. Remote unlock via bridging always-hot wires accessible through an external comm port. None of these generate audit events. **Layer 2 — NAND Flash (Adesto AT45DB041E):** Complete reverse engineering of the 264-byte page layout storing 50 users per page. User codes stored as ASCII nibbles in plain decimal for the user codes (“0” substituted with “B” due to TI assembly conflicts with the microprocessor). Permission flags with easy to understand byte sequences (F1=Master, E1=Elevated, C1=Supervisor). Lazy write model where the MSP430 only commits RAM to NAND on battery removal. Arbitrary privilege escalation and user code injection via a $30 universal programmer and SOP8 clip. Injected codes appear in "Print Users" but not "Export Users,” presenting a stealth window for forensic evasion. **Layer 3 — Firmware (MSP430F2418 via JTAG):** The JTAG fuse was never blown. Full read/write access to firmware. Located SetMasterCode() at 0x9ECA. Hijacked execution at 0x9EE8 with a BR opcode redirecting to unused space at 0xFA20. The 38-byte payload writes an elevated user code (696969) to slot 49 during every factory reset. Survived multiple resets across multiple boards. Video demo available. **Layer 4 — USB Cable Emulation (CP2102 via FaceDancer):** Built a GreatFET-based emulator matching the Silicon Labs VID/PID, device descriptors, vendor requests, and bulk endpoints of the proprietary programming cable. DL-Windows recognizes the emulated device and interacts with it. Partial pass of the software's Loopback Test (~40 of 303 packets). Vendor audit software performs no cryptographic authentication — trust is based entirely on USB descriptors, then happily passes data back and forth with the cable. **Layer 5 — Audit Trail Subversion:** The synthesis of all four layers. NAND injection creates users invisible to some export methods. Firmware injection creates codes invisible until queried. Cable emulation opens the door to intercepting or forging audit data between lock and PC. Combined: a lock whose credentials, firmware, and audit trail can all be manipulated by an attacker with physical access and modest tools. The fact that these locks are shipped over international waters before being installed in the most sensitive areas leaves many opportunities, and motivation, for a bad actor to inject a phantom into the pipeline. Target hardware: Alarm Lock Trilogy T2/T3 (MSP430F2418 + Adesto AT45DB041E + CP2102 USB interface). Deployed widely in US healthcare, education, government, and financial sectors. Blog series: https://qweary.github.io/backburner/ Repository: https://github.com/Qweary/T2-T3-Lock-Exploitation-Research PUBLIC CONFIRMED 50-Min Talk https://talks.toorcon.net/toorcamp-2026/talk/MJBZNN/ Prime Dome qweary PUBLISH JQ9XNX@@talks.toorcon.net -JQ9XNX Owning the Packbot: A full stack teardown of an EOD robot. en en 20260626T130000 20260626T135000 005000

Owning the Packbot: A full stack teardown of an EOD robot.

To my knowledge, this research represents the first time a widely deployed Explosive Ordnance Disposal (EOD) robot has been publicly reverse-engineered. Historically, offensive research into tactical robotics is shrouded in security-by-obscurity, restricted by classification, or kept behind closed doors. The primary novelty of this work lies in demystifying a battlefield 'black box.' It diverges from the industry assumption that high-stakes robotic systems rely on bespoke, highly secure architectures. Instead, I reveal that beneath its ruggedized exterior, the PackBot is built on accessible and easily understood technology, specifically, 802.11 hardware, Intel architecture, Linux and legacy Python. ToorCamp will be the first time I am discussing this research publicly PUBLIC CONFIRMED 50-Min Talk https://talks.toorcon.net/toorcamp-2026/talk/JQ9XNX/ Prime Dome Gigstorm astradotpng PUBLISH VZSJRP@@talks.toorcon.net -VZSJRP Skip the Breadboard: Designing Eurorack with Simulation and SMT en en 20260626T140000 20260626T145000 005000

Skip the Breadboard: Designing Eurorack with Simulation and SMT

PUBLIC CONFIRMED 50-Min Talk https://talks.toorcon.net/toorcamp-2026/talk/VZSJRP/ Prime Dome Aaron St. John PUBLISH UNYSYR@@talks.toorcon.net -UNYSYR Dubious Computing Conventions -- that hurt us. en en 20260626T150000 20260626T152000 002000

Dubious Computing Conventions -- that hurt us.

PUBLIC CONFIRMED 20-Min Talk https://talks.toorcon.net/toorcamp-2026/talk/UNYSYR/ Prime Dome Aaron Peterson PUBLISH ZFEDDB@@talks.toorcon.net -ZFEDDB No GPS, No Problem! en en 20260626T153000 20260626T155000 002000

No GPS, No Problem!

PUBLIC CONFIRMED 20-Min Talk https://talks.toorcon.net/toorcamp-2026/talk/ZFEDDB/ Prime Dome Pierce Nichols PUBLISH XFELFJ@@talks.toorcon.net -XFELFJ Shipspotting - An Introduction to AIS en en 20260626T160000 20260626T162000 002000

Shipspotting - An Introduction to AIS

PUBLIC CONFIRMED 20-Min Talk https://talks.toorcon.net/toorcamp-2026/talk/XFELFJ/ Prime Dome Adrian Studer PUBLISH YGLRJZ@@talks.toorcon.net -YGLRJZ Radio Technologies: RDS and RDS-2 en en 20260626T163000 20260626T165000 002000

Radio Technologies: RDS and RDS-2

PUBLIC CONFIRMED 20-Min Talk https://talks.toorcon.net/toorcamp-2026/talk/YGLRJZ/ Prime Dome Tycho Pendraig PUBLISH D9PLH8@@talks.toorcon.net -D9PLH8 rtlsdr.tv: Broadcast TV in your browser en en 20260626T170000 20260626T172000 002000

rtlsdr.tv: Broadcast TV in your browser

PUBLIC CONFIRMED 20-Min Talk https://talks.toorcon.net/toorcamp-2026/talk/D9PLH8/ Prime Dome Karl Koscher PUBLISH WTRZUH@@talks.toorcon.net -WTRZUH Visualizing the Invisible: Rendering Spectrum As Light en en 20260626T173000 20260626T173500 000500

Visualizing the Invisible: Rendering Spectrum As Light

PUBLIC CONFIRMED Lightning Talk https://talks.toorcon.net/toorcamp-2026/talk/WTRZUH/ Prime Dome Paul Carrigg PUBLISH UYADKX@@talks.toorcon.net -UYADKX Gatekeeping the exit: retail loss prevention technology en en 20260626T180000 20260626T182000 002000

Gatekeeping the exit: retail loss prevention technology

This talk will cover a timeline of retail loss prevention technology, and then focus on the current generation of mesh networking, IP-integrated systems with surveillance and marketing implications. We'll also discuss the business and technology reasons that loss prevention technology is widely installed but very inconsistently used, and efforts to apply similar technology to problems like armory and nuclear material management. PUBLIC CONFIRMED 20-Min Talk https://talks.toorcon.net/toorcamp-2026/talk/UYADKX/ Prime Dome J. B. Crawford PUBLISH PCPLST@@talks.toorcon.net -PCPLST Stupid Hackathon Kickoff en en 20260626T183000 20260626T185000 002000

Stupid Hackathon Kickoff

PUBLIC CONFIRMED 20-Min Talk https://talks.toorcon.net/toorcamp-2026/talk/PCPLST/ Prime Dome Moonrock PUBLISH MDBZLQ@@talks.toorcon.net -MDBZLQ Lightning Talks en en 20260626T190000 20260626T190500 000500

Lightning Talks

PUBLIC CONFIRMED Lightning Talk https://talks.toorcon.net/toorcamp-2026/talk/MDBZLQ/ Prime Dome David Hulton PUBLISH 7U7MTC@@talks.toorcon.net -7U7MTC Republic Dogs en en 20260626T193000 20260626T203000 010000

Republic Dogs

PUBLIC CONFIRMED Music / DJ Set https://talks.toorcon.net/toorcamp-2026/talk/7U7MTC/ Prime Dome Pierce Nichols PUBLISH TDJVGB@@talks.toorcon.net -TDJVGB Free! American Red Cross Adult CPR/AED training (+first aid option) en en 20260626T110000 20260626T123000 013000

Free! American Red Cross Adult CPR/AED training (+first aid option)

Karmic Project will be offering free training and certification with the Adult CPR/AED course by the American Red Cross. Advanced registration is helpful for ensuring the proper amount of training supplies but not required. Registration at: https://tally.so/r/RGk45Q If you wish to get your first aid certification or renew your existing certification, you can take the blended online course and complete the training at the end of the CPR/AED course. Registration *is required* for the first aid certification so that we can send you the voucher to access the online portion of the course *prior* to arrival for the in-person skills test. If you do not complete the online portion we will not be able to issue the first aid certification, but you still can earn the Adult CPR/AED certification. Karmic Project (501c3 non-profit organization) will be sponsoring and covering the costs the certifications ($50/student). Those that wish to donate to help cover the costs and supplies can do so at https://www.karmicproject.org and all donations are tax-deductible. PUBLIC CONFIRMED Workshop https://talks.toorcon.net/toorcamp-2026/talk/TDJVGB/ Yoga Studio Sova (no pronouns / name only preferred) PUBLISH JWVAFF@@talks.toorcon.net -JWVAFF One Page One Shot Think Tank Madness en en 20260626T130000 20260626T143000 013000

One Page One Shot Think Tank Madness

PUBLIC CONFIRMED Workshop https://talks.toorcon.net/toorcamp-2026/talk/JWVAFF/ Yoga Studio Lesley Jones PUBLISH T9EB9D@@talks.toorcon.net -T9EB9D Hecate: A Trivial UART Tool en en 20260626T150000 20260626T163000 013000

Hecate: A Trivial UART Tool

Hardware Requirement: Bring a laptop with a USB port and a text editor, any operating system. Recommended: Mu-editor installed or Chrome/Chromium-based browser for https://circuitpy.dev in-browser editor Experience: Beginner friendly. Familiarity with python, experience with text consoles, and some fundamental UART understanding would all be very helpful, but not required. We'll bring all the hardware you'll need, and you'll get to keep one of the boards for your own use. Rough outline: Lab 1: Finding and Logging UART (15 minutes) Lecture 1: UART basics and Hecate intro (20 minutes) Lab 2: Dropping a crafted UART payload (20 minutes) Lab 3: Alerting on a UART pattern match (20 minutes) Lecture 2: Advanced Hecate usage (15 minutes) PUBLIC CONFIRMED Workshop https://talks.toorcon.net/toorcamp-2026/talk/T9EB9D/ Yoga Studio Joe FitzPatrick nyx PUBLISH ZYYNRP@@talks.toorcon.net -ZYYNRP Making Pizza... with Science! (Part 1 - Making the Dough) en en 20260626T100000 20260626T103000 003000

Making Pizza... with Science! (Part 1 - Making the Dough)

Have you ever wanted to cook a really good pizza while camping, but it seems like it would be too difficult? I'm going to show you all the tricks I've learned from making thousands of pizzas, and we're going to use the America's Test Kitchen method of scientific experimentation to compare all the different options. We'll try making sauce the simple way and the traditional (harder) way and taste test the difference. We'll cook pizza in a portable Ooni oven using propane gas, hardwood, and charcoal and taste them to find the best. We'll make our own dough from scratch and try that side-by-side with frozen Trader Joe's dough. Does it matter what kind of flour you use? We'll find out! What about sourdough crust? Why not? We'll try all kinds of toppings and different kinds of cheese (please bring toppings and cheeses you want to try). I'll teach you three different ways to throw the pizza from the peel into the oven without losing all the toppings, including a secret cheat code. Not only is this fun and educational, you will get to eat lots of pizza along the journey! Please bring: A plate, a clean cutting board, a bowl, a small bag of flour (or store-bought dough), some cheese, creative toppings you enjoy, your imagination and your appetite. Workshop size limited to about 30 people but if we get more, I'll stay later and we'll cook as long as we need to. Note that fire will be contained in the oven (no open flames) but the oven does get hot (up to 900F) so safety is important. Kid chefs are welcome if closely supervised by their adult. Note: If you are gluten free, get the King Arthur gluten free pizza dough mix and bring it! We'll make beautiful gluten free pizza for you! PUBLIC CONFIRMED Workshop https://talks.toorcon.net/toorcamp-2026/talk/ZYYNRP/ Yoga Studio Front Lawn Randy Pargman PUBLISH Y3QKPY@@talks.toorcon.net -Y3QKPY Making Pizza... with Science! en en 20260626T170000 20260626T183000 013000

Making Pizza... with Science!

Have you ever wanted to cook a really good pizza while camping, but it seems like it would be too difficult? I'm going to show you all the tricks I've learned from making thousands of pizzas, and we're going to use the America's Test Kitchen method of scientific experimentation to compare all the different options. We'll try making sauce the simple way and the traditional (harder) way and taste test the difference. We'll cook pizza in a portable Ooni oven using propane gas, hardwood, and charcoal and taste them to find the best. We'll make our own dough from scratch and try that side-by-side with frozen Trader Joe's dough. Does it matter what kind of flour you use? We'll find out! What about sourdough crust? Why not? We'll try all kinds of toppings and different kinds of cheese (please bring toppings and cheeses you want to try). I'll teach you three different ways to throw the pizza from the peel into the oven without losing all the toppings, including a secret cheat code. Not only is this fun and educational, you will get to eat lots of pizza along the journey! Please bring: A plate, a clean cutting board, a bowl, a small bag of flour (or store-bought dough), some cheese, creative toppings you enjoy, your imagination and your appetite. Workshop size limited to about 30 people but if we get more, I'll stay later and we'll cook as long as we need to. Note that fire will be contained in the oven (no open flames) but the oven does get hot (up to 900F) so safety is important. Kid chefs are welcome if closely supervised by their adult. Note: If you are gluten free, get the King Arthur gluten free pizza dough mix and bring it! We'll make beautiful gluten free pizza for you! PUBLIC CONFIRMED Workshop https://talks.toorcon.net/toorcamp-2026/talk/Y3QKPY/ Yoga Studio Front Lawn Randy Pargman PUBLISH GMK3P3@@talks.toorcon.net -GMK3P3 Kalikat DJ Set en en 20260626T200000 20260626T210000 010000

Kalikat DJ Set

PUBLIC CONFIRMED Music / DJ Set https://talks.toorcon.net/toorcamp-2026/talk/GMK3P3/ Yoga Studio Front Lawn Jessa Gegax PUBLISH 9NXFAK@@talks.toorcon.net -9NXFAK PatAttack! en en 20260626T210000 20260626T220000 010000

PatAttack!

PUBLIC CONFIRMED Music / DJ Set https://talks.toorcon.net/toorcamp-2026/talk/9NXFAK/ Yoga Studio Front Lawn PatAttack PUBLISH EREYCK@@talks.toorcon.net -EREYCK NightMrkt en en 20260626T210000 20260627T020000 050000

NightMrkt

PUBLIC CONFIRMED Workshop https://talks.toorcon.net/toorcamp-2026/talk/EREYCK/ Volleyball Court - NightMrkt After Dark pinguino kolb PUBLISH BJANS9@@talks.toorcon.net -BJANS9 Badge Soldering Workshop en en 20260626T103000 20260626T123000 020000

Badge Soldering Workshop

Badge assembly. Learn to solder using two different custom badges from past ToorCamps. Teens or older or with parental supervision. 2 sessions PUBLIC CONFIRMED Workshop https://talks.toorcon.net/toorcamp-2026/talk/BJANS9/ Hardware Hacking Stage Curtis Mack PUBLISH BRV9KF@@talks.toorcon.net -BRV9KF Wi-Fi Self Defense & Hacker Hunting For Beginners (no soldering) en en 20260626T130000 20260626T143000 013000

Wi-Fi Self Defense & Hacker Hunting For Beginners (no soldering)

Get hands-on instruction on advanced Wi-Fi hacking while learning how to defend against common advanced techniques. You will learn essential skills for defending against five common, powerful Wi-Fi attacks. Explore how to physically track down any Wi-Fi device, detect Wi-Fi leaks, identify malicious QR codes and phishing networks, and defend against advanced Wi-Fi karma attacks. PUBLIC CONFIRMED Workshop https://talks.toorcon.net/toorcamp-2026/talk/BRV9KF/ Hardware Hacking Stage Kody Kinzie PUBLISH VHDUG3@@talks.toorcon.net -VHDUG3 Badge Soldering Workshop en en 20260626T150000 20260626T170000 020000

Badge Soldering Workshop

Badge assembly. Learn to solder using two different custom badges from past ToorCamps. Teens or older or with parental supervision. 2 sessions PUBLIC CONFIRMED Workshop https://talks.toorcon.net/toorcamp-2026/talk/VHDUG3/ Hardware Hacking Stage Curtis Mack PUBLISH K773U8@@talks.toorcon.net -K773U8 Live Jam Session en en 20260626T200000 20260626T213000 013000

Live Jam Session

Live jam: Relax with classical and jazz music played on trombone by a guy named Piano (Qweary). Jazz backgrounds over speaker, bring an instrument if you want to join. PUBLIC CONFIRMED Music / DJ Set https://talks.toorcon.net/toorcamp-2026/talk/K773U8/ Hardware Hacking Stage qweary PUBLISH FWFMZL@@talks.toorcon.net -FWFMZL Flame Effects for the Hacker en en 20260626T123000 20260626T163000 040000

Flame Effects for the Hacker

PUBLIC CONFIRMED Workshop https://talks.toorcon.net/toorcamp-2026/talk/FWFMZL/ Moon Rock Village Jack Chatterton PUBLISH HLHAGB@@talks.toorcon.net -HLHAGB Open Craft Time en en 20260626T093000 20260626T110000 013000

Open Craft Time

PUBLIC CONFIRMED Workshop https://talks.toorcon.net/toorcamp-2026/talk/HLHAGB/ Great Faerie Crafting Yurt Amy Johnston PUBLISH WU9KDF@@talks.toorcon.net -WU9KDF Tapestry Weaving for Beginners en en 20260626T110000 20260626T123000 013000

Tapestry Weaving for Beginners

PUBLIC CONFIRMED Workshop https://talks.toorcon.net/toorcamp-2026/talk/WU9KDF/ Great Faerie Crafting Yurt Sonya PUBLISH W779BE@@talks.toorcon.net -W779BE Intro to Sewing Workshop en en 20260626T150000 20260626T170000 020000

Intro to Sewing Workshop

Intro to sewing - Learn the basics In the cabin 4 people at a time. Teen or older. @ OlyMEGA Village PUBLIC CONFIRMED Workshop https://talks.toorcon.net/toorcamp-2026/talk/W779BE/ OlyMEGA Village Angela Livermore PUBLISH 37GEJ8@@talks.toorcon.net -37GEJ8 The New War on Privacy, and How We Win -- Lessons from the History of Hacker Activism en en 20260627T110000 20260627T115000 005000

The New War on Privacy, and How We Win -- Lessons from the History of Hacker Activism

Intro: Who I Am, and Why I'm Standing Here Naomi Brockwell, President of the Ludlow Institute. Lead drafter of H.R. 8470. I. Why We're Losing the War on Privacy A. The surveillance state metastasized through doctrinal loopholes the courts refuse to close. B. Surveillance tech outpaces privacy protection from the courts. II. The War Just Escalated Three new fronts: • AI • ID mandates and age verification • Arresting developers of privacy tools I used to think we could just use privacy tools and reclaim privacy personally. But then developers of privacy tools started being arrested, and I realized these tools might cease to exist. Tech-only resistance is being criminalized. Without a simultaneous policy fight, we lose the right to build the tools at all. III. How We Win the War on Privacy History of how the hacker community has rallied support and succeeded in pushing for reform. Case I. Phil Zimmermann Case II. Cult of the Dead Cow Case III. The Clipper Chip IV. The Pattern: What Every Successful Hacker-Driven Reform Has in Common Takeaway: the hacker community has won this fight three times in three decades against opponents with more money, more lawyers, and more power. Let's do it again. V. Call to Action The surveillance state is real. It's been built by private companies and the government working together, and it's accelerating. We win the same way every previous generation of hackers has won. PUBLIC CONFIRMED 50-Min Talk https://talks.toorcon.net/toorcamp-2026/talk/37GEJ8/ Prime Dome Naomi Brockwell PUBLISH 8YMXFE@@talks.toorcon.net -8YMXFE The Toorcamp Pride Parade Start en en 20260627T115000 20260627T120000 001000

The Toorcamp Pride Parade Start

PUBLIC CONFIRMED Music / DJ Set https://talks.toorcon.net/toorcamp-2026/talk/8YMXFE/ Prime Dome Tendy PUBLISH B7HYFW@@talks.toorcon.net -B7HYFW WebPKI and You en en 20260627T120000 20260627T125000 005000

WebPKI and You

PUBLIC CONFIRMED 50-Min Talk https://talks.toorcon.net/toorcamp-2026/talk/B7HYFW/ Prime Dome Bryce PUBLISH CQDHLQ@@talks.toorcon.net -CQDHLQ Architectures of Autonomy: Adversarial Orchestration and the Collapse of "Human-in-the-Loop" Security en en 20260627T130000 20260627T135000 005000

Architectures of Autonomy: Adversarial Orchestration and the Collapse of "Human-in-the-Loop" Security

# High-Level Talk Outline - **The Death of the Chat Epoch**: Defining the shift from assistants to persistent agents. - **The Orchestration Stack**: How GasTown’s "Beads" ledger and RalphWiggum’s "Stop Hook" create recursive, autonomous execution loops. - **Zero-Click Exploitation**: Dissecting AgentFlayer—how indirect prompt injection triggers silent data harvesting via cloud connectors. - **Autonomous Adversaries**: Analysis of the GTG-1002 espionage lifecycle and AkiraBot’s industrialized spam generation. - **Semantic Corruption**: The Pravda network and the rise of LLM grooming. - **The Defensive Pivot**: Moving toward "Hard Boundaries," agentic auditing (Augustus), and trajectory-level risk assessment. PUBLIC CONFIRMED 50-Min Talk https://talks.toorcon.net/toorcamp-2026/talk/CQDHLQ/ Prime Dome infosecanon PUBLISH VK9RN3@@talks.toorcon.net -VK9RN3 Working the Slop Mines en en 20260627T140000 20260627T145000 005000

Working the Slop Mines

This talk is going to cover a lot of SDLC hardening protips for creating development pipelines that can withstand firehoses of generative AI slop from all angles. From devs, from ops, from users, from bug bounty programs, and even from executives. Not by rejecting the slop, but by harnessing slop energy and riding it to new heights. I also fully intend to go off on wild futurist tangents related to autonomous incentive structures, using zero knowledge execution proofs to accelerate bug triage / feature development, and what human computer interaction looks like in a world where people can just do things, and access to technology approaches the asymptote. PUBLIC CONFIRMED 50-Min Talk https://talks.toorcon.net/toorcamp-2026/talk/VK9RN3/ Prime Dome Dean Pierce PUBLISH 3ZCJ3A@@talks.toorcon.net -3ZCJ3A Presenting, the Andromeda Strain en en 20260627T150000 20260627T152000 002000

Presenting, the Andromeda Strain

PUBLIC CONFIRMED 20-Min Talk https://talks.toorcon.net/toorcamp-2026/talk/3ZCJ3A/ Prime Dome Vyrus PUBLISH 7YV3SD@@talks.toorcon.net -7YV3SD The Other Disaster: from Ebola camps to a token factory en en 20260627T153000 20260627T155000 002000

The Other Disaster: from Ebola camps to a token factory

It's about what the job actually looks like from where I sit. A model that found zero-days in every major operating system, and a hard argument about who gets to use it. A company that got blacklisted by the Pentagon for refusing to enable mass surveillance and autonomous weapons. A fleet of agents I built to do my own job, which got good at it faster than I expected, which is how I know the timeline to a weird future is shorter than most people think. It's about a few of the things that scare me: the cyber capability that could have been handed to everyone with a grudge and a GPU, the mass surveillance infrastructure that someone is going to build unless enough people refuse, and the checks on concentrated power that are supposed to catch all of this and are not, currently, ready. And it's about leverage. This camp has more of it than it thinks: people who can build defenses and give them away, people who can refuse to build the bad thing, people who can show up when nobody else understands what's being bought. I want to spend the last part of the talk arguing about what to do with it. I used to arrive after the disaster. I would like, just once, to get ahead of one. PUBLIC CONFIRMED 20-Min Talk https://talks.toorcon.net/toorcamp-2026/talk/7YV3SD/ Prime Dome Dustin PUBLISH 8XA9ZL@@talks.toorcon.net -8XA9ZL Crypto Engineering in Practice en en 20260627T160000 20260627T162000 002000

Crypto Engineering in Practice

PUBLIC CONFIRMED 20-Min Talk https://talks.toorcon.net/toorcamp-2026/talk/8XA9ZL/ Prime Dome SalusaSecondus PUBLISH 7LZ8EM@@talks.toorcon.net -7LZ8EM DIY Smart Chicken Coop en en 20260627T163000 20260627T165000 002000

DIY Smart Chicken Coop

A few years ago we started with a stock automated chicken coop door. When it eventually failed, annoyed by the limitations and quality of cheap consumer IoT products, we engineered our own using an ESP32 microcontroller, Home Assistant, and ESPHome. We then added sensors for drinking water and feed levels, and have since iterated on several design choices. In this talk, we’d like to share our experience — what worked, what didn’t — and discuss the hardware, software, and mechanical aspects of the implementation. After this talk you should be able to recreate our design for your own coop. PUBLIC CONFIRMED 20-Min Talk https://talks.toorcon.net/toorcamp-2026/talk/7LZ8EM/ Prime Dome Sebastian Noack rosie PUBLISH RRZMSH@@talks.toorcon.net -RRZMSH The Time Is Now, The Person Is You en en 20260627T170000 20260627T172000 002000

The Time Is Now, The Person Is You

PUBLIC CONFIRMED 20-Min Talk https://talks.toorcon.net/toorcamp-2026/talk/RRZMSH/ Prime Dome D PUBLISH CM3Y8M@@talks.toorcon.net -CM3Y8M Closing Remarks en en 20260627T173000 20260627T175000 002000

Closing Remarks

PUBLIC CONFIRMED 20-Min Talk https://talks.toorcon.net/toorcamp-2026/talk/CM3Y8M/ Prime Dome David Hulton PUBLISH DFW8YP@@talks.toorcon.net -DFW8YP Dead Bytes Tell No Lies: Hands-On NAND Flash Decoding for Access Control Locks en en 20260627T110000 20260627T123000 013000

Dead Bytes Tell No Lies: Hands-On NAND Flash Decoding for Access Control Locks

Workshop structure (approximate): **0:00-0:15 — Context and architecture.** Brief overview of the Alarm Lock T3 hardware: MSP430F2418 microcontroller, Adesto AT45DB041E SPI flash (4 Mbit, 264-byte pages), and the lazy write model. Why NAND is the target (it stores the secrets, it's physically accessible, and it has zero protection). How to connect to it with a universal programmer and SOP8 test clip. **0:15-0:50 — Hands-on decoding.** Participants work through provided binary dumps using hex editors and the printed reference sheet. Exercises include: locating the FD page header and identifying page boundaries; extracting the first, second, and third bytes of user codes from their interleaved positions; converting encoded bytes back to decimal codes (accounting for the B-for-zero quirk); reading active/inactive status flags; identifying permission levels (F1=Master, E1=Elevated, C1=Supervisor, 01=Normal); and comparing a "normal" dump against a dump with injected elevated privileges to spot the differences. **0:50-1:10 — Forensic artifacts and attack scenarios.** Examining what audits actually show (and hide) when NAND data is manipulated. The "Print Users vs. Export Users" discrepancy. The "Code Audit After Unexpected Values" artifact where 300 user entries turn into a garbled mess. Discussion of the discarded lock scenario: recovering credentials from disposed hardware, code reuse across sites, and the insider threat implications. **1:10-1:30 — Live demo and Q&A.** If conditions allow, live NAND read from a lock board using the T48 programmer. Walkthrough of the dump in real time. Open discussion of remediation (encrypt the flash, authenticate writes, establish hardware disposal protocols) and how this methodology applies to other MSP430 + NAND-based embedded systems. Skill level: Comfortable reading hexadecimal. No prior hardware hacking experience needed. Prior experience with hex editors is helpful but not required — we'll cover the basics. Materials provided: Printed NAND page layout reference sheets, sample .BIN dumps on USB drives (or downloadable from the GitHub repository), and a decode walkthrough guide. Repository with all dumps and documentation: https://github.com/Qweary/T2-T3-Lock-Exploitation-Research PUBLIC CONFIRMED Workshop https://talks.toorcon.net/toorcamp-2026/talk/DFW8YP/ Yoga Studio qweary PUBLISH JDG8DU@@talks.toorcon.net -JDG8DU Red, Green, and Blue, And So Can You en en 20260627T133000 20260627T150000 013000

Red, Green, and Blue, And So Can You

Animated RGB LEDs are becoming ubiquitous. And yet, getting started can be an overload. We'll talk about the hardware, controllers, and software options to crack open the exciting field of lightenblinken. We'll go beyond WLED and get into what can really be done with very cheap, capable hardware and a little bit of brain grease. Have a laptop handy, because real code will be part of this work--though you don't have to be an expert. Kits will be available (in limited supply; no soldering required) and photons will be shot right out of diodes at your command. Some familiarity with code will be helpful, as will the Arduino IDE. We'll mostly focus on ESP32, but the basics can be made to work on most microcontrollers. Even if it's intimidating, come learn how it's done (or at least, how I do it). PUBLIC CONFIRMED Workshop https://talks.toorcon.net/toorcamp-2026/talk/JDG8DU/ Yoga Studio Trevor Schrock - spacemeat PUBLISH RZCCZB@@talks.toorcon.net -RZCCZB Binary Jiujitsu: White Belt Fundamentals en en 20260627T153000 20260627T173000 020000

Binary Jiujitsu: White Belt Fundamentals

Binary Jiujitsu is an RPG style training platform developed to help ease hackers into the complicated and overwhelming world of binary exploitation and reverse engineering. The White Belt Fundamentals workshop is geared towards introducing players to the game environment and guiding them through their first binary exploit. PUBLIC CONFIRMED Workshop https://talks.toorcon.net/toorcamp-2026/talk/RZCCZB/ Yoga Studio Joshua Connolly PUBLISH VBTVEX@@talks.toorcon.net -VBTVEX Saturday Night Party \w Keith Myers and Friends en en 20260627T220000 20260628T020000 040000

Saturday Night Party \w Keith Myers and Friends

PUBLIC CONFIRMED Music / DJ Set https://talks.toorcon.net/toorcamp-2026/talk/VBTVEX/ Yoga Studio David Hulton PUBLISH 9VPQ87@@talks.toorcon.net -9VPQ87 Anything but Ethernet en en 20260627T110000 20260627T112000 002000

Anything but Ethernet

Too many kids, and a fair share of old farts, think the world runs on cat-5. It just ain't so! From the first smoke-signals and drumbeats of prehistory, to modern multi-gigabit optical links, there's a lot more to communication than just Ethernet frames riding twisted pair. This contest aims to celebrate the long and varied history of communication. PUBLIC CONFIRMED 20-Min Talk https://talks.toorcon.net/toorcamp-2026/talk/9VPQ87/ Yoga Studio Front Lawn Ben Kurtz PUBLISH EZVX7V@@talks.toorcon.net -EZVX7V Nerd Culture in Dance Music en en 20260627T190000 20260627T200000 010000

Nerd Culture in Dance Music

There is a plenty of cross-pollination in nerdy subcultures, and plenty of musicians have brought their own geeky interests into the beats that they create. From samples of Star Trek episodes, remixes of movie themes, or directly singing about hacking culture, there are scores of examples of all varieties of nerd culture being expressed as dance music. This is a danceable exploration of some of these themes. Partly video games, partly songs about digital interfaces, some acknowledgement of meme culture, and certainly sci-fi references- all done with a groove that makes you want to move around. PUBLIC CONFIRMED Music / DJ Set https://talks.toorcon.net/toorcamp-2026/talk/EZVX7V/ Yoga Studio Front Lawn noise PUBLISH KGUFZ3@@talks.toorcon.net -KGUFZ3 Music en en 20260627T200000 20260627T210000 010000

Music

DJ mattrix PUBLIC CONFIRMED Music / DJ Set https://talks.toorcon.net/toorcamp-2026/talk/KGUFZ3/ Yoga Studio Front Lawn mattrix PUBLISH LQC9K3@@talks.toorcon.net -LQC9K3 bash explode (LOVE+FEAR+HATE live set) en en 20260627T210000 20260627T220000 010000

bash explode (LOVE+FEAR+HATE live set)

🤘😤 PUBLIC CONFIRMED Music / DJ Set https://talks.toorcon.net/toorcamp-2026/talk/LQC9K3/ Yoga Studio Front Lawn bash explode PUBLISH SXQQCE@@talks.toorcon.net -SXQQCE Blade Runners: The ToorCamp Trail Half-Marathon en en 20260627T080000 20260627T110000 030000

Blade Runners: The ToorCamp Trail Half-Marathon

PUBLIC CONFIRMED Workshop https://talks.toorcon.net/toorcamp-2026/talk/SXQQCE/ Volleyball Court - NightMrkt After Dark David Hulton PUBLISH EWSGJZ@@talks.toorcon.net -EWSGJZ li-nk : develop your interests, find your community en en 20260627T160000 20260627T163000 003000

li-nk : develop your interests, find your community

With only 20 minutes there's quite a few directions we could go. Our OSS contributions. The provenance of li-nk and our motivations for developing it. Etc. Feel free to leave comments on what you want to hear about on the event page !! https://li-nk.social/e/li-nk-discover-your-interests-find-your-community PUBLIC CONFIRMED 20-Min Talk https://talks.toorcon.net/toorcamp-2026/talk/EWSGJZ/ Volleyball Court - NightMrkt After Dark Colin Williams PUBLISH L8JNN3@@talks.toorcon.net -L8JNN3 Solder Your Very Own IoT Purrsheen Cat Lamp with WLED! (soldering) en en 20260627T113000 20260627T130000 013000

Solder Your Very Own IoT Purrsheen Cat Lamp with WLED! (soldering)

Learn rapid prototyping and build your own open-source, internet-controlled LED art! In this class, you will solder and assemble an adorable, squishy "Purrsheen" Wi-Fi lamp. Once built, you'll learn how to control your new glowing cat baby via Wi-Fi or Home Assistant using WLED. For beginners! https://retia.io/toorcamp PUBLIC CONFIRMED Workshop https://talks.toorcon.net/toorcamp-2026/talk/L8JNN3/ Hardware Hacking Stage Kody Kinzie PUBLISH AJQ7V7@@talks.toorcon.net -AJQ7V7 AIS Hacking Session en en 20260627T133000 20260627T150000 013000

AIS Hacking Session

PUBLIC CONFIRMED Workshop https://talks.toorcon.net/toorcamp-2026/talk/AJQ7V7/ Hardware Hacking Stage Adrian Studer PUBLISH UNPADC@@talks.toorcon.net -UNPADC Solder Your Own Cat-Themed Wi-Fi Hacking Tool! (soldering) en en 20260627T150000 20260627T163000 013000

Solder Your Own Cat-Themed Wi-Fi Hacking Tool! (soldering)

Test out your soldering skills to create your own open-source, cat-themed hacking tool! In this class, we’ll create a microcontroller-powered hacking tool called the Wi-Fi Nugget that allows us to track down suspicious Wi-Fi devices, attack and defend networks, and even spoof drone signals! Beginners in this class will practice soldering while creating a cute and powerful IoT device in a beautiful 3d printed case! For intermediate soldering skills. https://retia.io/toorcamp PUBLIC CONFIRMED Workshop https://talks.toorcon.net/toorcamp-2026/talk/UNPADC/ Hardware Hacking Stage Kody Kinzie PUBLISH 7EGMWT@@talks.toorcon.net -7EGMWT Intro to Sewing Workshop en en 20260627T130000 20260627T150000 020000

Intro to Sewing Workshop

Intro to sewing - Learn the basics In the cabin 4 people at a time. Teen or older. @ OlyMEGA Village PUBLIC CONFIRMED Workshop https://talks.toorcon.net/toorcamp-2026/talk/7EGMWT/ OlyMEGA Village Angela Livermore PUBLISH 7997EE@@talks.toorcon.net -7997EE Makerspace Open House en en 20260627T150000 20260627T180000 030000

Makerspace Open House

OlyMEGA brought a laser engraver / cutter, vinyl cutter, 3-D printer' and other tools. Bring your own SVGs, images, and ideas and work with an Olymegan to burn or cut them into whatever material you choose. We will provide boards or vinyl sheets if you need them. First come first served. We can actively work with around three people at a time. @ OlyMEGA Village PUBLIC CONFIRMED Workshop https://talks.toorcon.net/toorcamp-2026/talk/7997EE/ OlyMEGA Village Curtis Mack