0.19 toorcamp-2026 2026-06-24 2026-06-28 5 00:05 https://talks.toorcon.net https://talks.toorcon.net/media/toorcamp-2026/img/null_5C1yqPF_OF2WzWZ.webp US/Pacific Prime Dome Workshop 2026-06-24T20:00:00-07:00 20:00 02:00 Annihilation is a 2018 science fiction cosmic horror film written and directed by Alex Garland, loosely based on the 2014 novel by Jeff VanderMeer. It stars Natalie Portman, Jennifer Jason Leigh, Gina Rodriguez, Tessa Thompson, Tuva Novotny, and Oscar Isaac. https://en.wikipedia.org/wiki/Annihilation_(film) toorcamp-2026-446-toorcamp-movie-night-annihilation-2018 Talks - Prime Dome /media/toorcamp-2026/submissions/BCXV3C/image_Rr7UCJb.webp Carlos De Leon en The story follows a group of scientists who enter the Shimmer, a mysterious quarantined zone of mutating plants and animals caused by an alien presence. https://www.imdb.com/title/tt2798920/ false https://talks.toorcon.net/toorcamp-2026/talk/BCXV3C/ https://talks.toorcon.net/toorcamp-2026/talk/BCXV3C/feedback/ Hardware Hacking Stage Workshop 2026-06-24T13:30:00-07:00 13:30 01:00 This session offers a practical introduction to fiber optic splicing, with an emphasis on achieving low-loss, reliable connections. Participants will gain hands-on experience with fiber preparation, fusion splicing, visual inspection, and basic testing, using industry-standard tools and guided demonstrations to build confidence in real-world splicing techniques. toorcamp-2026-434-fiber-splicing-workshop Workshops - Hardware Hacking Stage Caleb Pal en Caleb a technician for the local island ISP (Rockisland) will give a hands-on introduction to fiber optic splicing, covering the tools, techniques, and best practices used to create low-loss, reliable fiber connections. Participants will learn the basics of fiber preparation, fusion splicing, inspection, and testing through practical demonstrations and guided practice. false https://talks.toorcon.net/toorcamp-2026/talk/YHQ37L/ https://talks.toorcon.net/toorcamp-2026/talk/YHQ37L/feedback/ Prime Dome 20-Min Talk 2026-06-25T10:30:00-07:00 10:30 00:20 TBA toorcamp-2026-388-opening-remarks Talks - Prime Dome David Hulton en false https://talks.toorcon.net/toorcamp-2026/talk/T7LN8M/ https://talks.toorcon.net/toorcamp-2026/talk/T7LN8M/feedback/ Prime Dome 50-Min Talk 2026-06-25T11:00:00-07:00 11:00 00:50 My friend was disappeared by ICE for three days after a traffic stop in Nevada. He was arrested by Sheriffs, released, re-arrested by ICE in the parking lot, then held off the record. I built a jail roster monitor the next morning to find him. It alerted our Signal group the day that we was in jail under an ICE hold. Not a detention center. Jail. While I was building the jail roster scanner I noticed a data mining hook with Equifax on their recommended web portal "Vinelink", and warned my friends to NOT install the Sheriff app they require you to run to find someone that might be in their jail system. I later found that anyone searching for a loved one gave them access to read your SMS, phone history, location, and even activate your mic. Our friend group was being tracked the moment we started searching. Thus began a month-long struggle to know where my friend was being held: their chain of custody is non-existent, but spying ever-present in these law enforcement portals. This talk presents what I found inside 8 sheriff's apps, how the 287(g) program turns county jails into ICE infrastructure, and the zero-knowledge alternative I built so families can search without becoming targets. toorcamp-2026-370-breaking-the-ice-the-surveillance-stack-behind-your-sheriff-s-community-app Talks - Prime Dome Aaron Markham en In February 2026, my friend was picked up by Sheriffs in Nevada on a traffic violation. He was placed on an ICE hold, released, then arrested in the parking lot by ICE agents and handed back to the sheriffs, who held him off the record. He disappeared for three days. No one could find him in any system. I had a standing promise: if he was ever detained, I’d get him out, but I had to find him first. So I built the first version of a jail roster monitor that Sunday morning. It was simple: poll the 2 nearby County sheriff’s app APIs and 2 other nearby county web APIs, match against his name, alert our Signal group. Monday morning it found him. They had finally re-registered him into the system on an ICE hold. This is ICE's 287(g) program at work: local sheriffs operating as ICE’s distributed detention infrastructure. Then he was transferred to a multi-agency detention center in Washoe County, mixed into general population on an ICE hold. He disappeared from the Douglas County system but never appeared in Washoe’s. Gone again. While looking for other ways to find him, I looked into VINELink, a self-styled national victim notification system, and discovered it’s operated by Appriss Inc., a subsidiary of Equifax since 2020. Later, when I audited the sheriff’s apps, I found VINE integration baked directly into the app platform: the apps are silently routing inmate search data to Equifax’s infrastructure whether the user knows it or not. Nevada had terminated their own VINE agreement in August 2025 and replaced it with SAVE (save.nv.gov), so I built a scanner for that instead. But the bigger realization shaped everything that followed: the data aggregators aren’t the source. The source is better. Harder to maintain, but better. Every layer between you and the data is another entity logging your query. So we went direct: raw sheriff APIs, raw booking systems, raw state databases. I saw a clear pattern: the app that Douglas County uses, OCV, aka “TheSheriffApp”, is the same platform serving hundreds of agencies. I used Claude to scale the monitor across Nevada and California the next day. Within a week it covered 55 sources across 9 states. Then I started auditing the apps themselves. **What I found inside** I reverse-engineered 8 OCV sheriff apps across Texas, Florida, Georgia, and Nevada. Every one shares the same backend, the same hardcoded API keys, the same analytics infrastructure. Independent county branding over a single private company’s servers. The findings: - 8/8 ship Firebase Analytics, Google AdMob with persistent advertising ID, and GPS location services; three independent tracking pipelines in a “community safety” app - 8/8 request fine GPS location, phone state, and contacts access. One requests SMS read/send, microphone, and call log interception - TagAlong: continuous GPS surveillance that uploads point-by-point coordinates to OCV’s servers; not the county’s. The code tracks “UserView” objects through “Trip” sessions in real time. This is person tracking, not asset management - Appriss VINE integration embedded in the apps themselves: OCV routes inmate search data through vine.prod3.myocv.com to Appriss Inc., an Equifax subsidiary. Users of these “community” sheriff apps are unknowingly feeding query data to a credit bureau; this isn’t a service you opt into, it’s baked into the platform - All 8 apps share the same AWS Cognito identity pool and the same hardcoded YouTube API key — a single backend operating behind the branding of independent county sheriffs - 52 hardcoded secrets extracted across 8 apps; API keys, AWS credentials, Firebase project IDs, all sitting in the bytecode The combination is the point: fine GPS + advertising ID + Equifax-owned search logging means that the act of looking for your loved one creates a location-tagged, ad-network-linked record at a credit bureau. I discovered over 1,000 agencies signed up for 287(g) agreements with ICE, 137 operating under the jail enforcement model. I added this data plus ICE detention facility locations to a [coverage map](https://frio.help/map). **What I built instead** [Frio](https://frio.help/) monitors the same data sources with a zero-knowledge architecture: the operator cannot read the queries, cannot see who is searching, and cannot access the results. I’ll walk through the design — NaCl sealed-box encryption, content-addressed memory shards with time-based decay, and the Spiritwriter agent governance framework that delegates work to untrusted agents with cryptographic accountability. The search service is live and free. I’ll close with where this is going: Percival (camouflage nodes disguised as local news sites), distributed contributor networks where even adversarial participants are forced to contribute real value, and the tension between zero-knowledge design and the aggregate intelligence needed to measure the scope of illegal detention nationally. **What the audience takes away** - How a real surveillance stack works at the bytecode level — and how one person audited 8 apps in parallel using AI agents - The zero-knowledge architecture patterns behind Frio and Spiritwriter (Frio's back-end memory architecture will be open sourced) - A framework for thinking about when the act of searching is itself the threat model - How the 287(g) program turns county sheriffs into ICE’s distributed detention infrastructure, and what the technical countermeasures look like false https://talks.toorcon.net/toorcamp-2026/talk/EVVKG7/ https://talks.toorcon.net/toorcamp-2026/talk/EVVKG7/feedback/ Prime Dome 50-Min Talk 2026-06-25T12:00:00-07:00 12:00 00:50 These days it seems like any hacker worth their salt cares about AT&T's microwave long distance network. Microwave is neither the beginning nor the end of long distance telephony, though. In this talk, we'll discuss the other kinds of Long Lines - long distance telephone leads that used hundreds of miles of copper. Along the way, we'll learn about AT&T's extensive program to build a coast-to-coast coaxial cable hardened against nuclear attack, complete with an underground fallout shelter every 150 miles. You'll learn to recognize historic telephone infrastructure that you can find throughout the US. toorcamp-2026-378-the-telephone-underground Talks - Prime Dome /media/toorcamp-2026/submissions/SATVGJ/image_0i1h3ur.webp J. B. Crawford en Talk by J. B. Crawford, author of Computers Are Bad (https://computer.rip). I hope to leverage the increasing interest in telecommunications history to bring attention to the enduring impact that underground and pole-line long distance leads have had on our nation. We'll also look at specific details of the multiplexing and protection systems, from which we can learn some lessons about reliable communications infrastructure today. false https://talks.toorcon.net/toorcamp-2026/talk/SATVGJ/ https://talks.toorcon.net/toorcamp-2026/talk/SATVGJ/feedback/ Prime Dome 50-Min Talk 2026-06-25T13:00:00-07:00 13:00 00:50 Yes, Mainframes are still around. They make up the core of a suprising number of large fortune 500 companies . I will cover what a Mainframe is at a high level, how they tend to work, and regular security flaws that we see on a daily basis when testing these systems. If you've ever saw a movie and they say 'theyre hacking the mainframe', now you'll know what theyre talking about! By the end of this talk you'll know what a dataset is, how to test Unix (yes, Unix), and what these acronyms mean: JES2, RACF, NJE, TSO, OMVS. toorcamp-2026-385-the-dinosaur-in-the-room-mainframe-hacking-in-2026 Talks - Prime Dome /media/toorcamp-2026/submissions/WCKANP/HEIF_Image_Large_BPZKY7s_0a5HqbQ_i7bu0eU_FzetGIQ.webp David M. N. Bryan - Aka VideoMan en Do you want to learn about security testing mainframes? This talk is for you. Are you mainframe curious? This will be a good intro to common things that are identified when doing Mainframe testing. There will also be a rant about CVEs, or that lack thereof in the z/OS world. Look, mainframes aren't going away, and the number of people who can secure them is shrinking, its time for like minded people to rise up and help keep this critical platform safe. false https://talks.toorcon.net/toorcamp-2026/talk/WCKANP/ https://talks.toorcon.net/toorcamp-2026/talk/WCKANP/feedback/ Prime Dome 50-Min Talk 2026-06-25T14:00:00-07:00 14:00 00:50 Every organism around you is shedding DNA right now. Into the water, into the air, everywhere. We built a system that captures it, sequences it on a device the size of a USB stick, and identifies species live on screen. No lab. No internet. No waiting. At ToorCamp, we are pointing it at Doe Bay. Water goes in, and minutes later you are watching whales, sharks, fish, and birds appear on a dashboard as their DNA gets read in real time. We have run this on research ships, coral reefs, and in rainforest canopies. This time, you get to watch it happen. Come see what’s lurking around you. toorcamp-2026-409-environmental-dna-in-near-real-time Talks - Prime Dome /media/toorcamp-2026/submissions/MES9MQ/collab_hex_stripes_lighter_tnMMIfB_ZhRSIFk.webp Ryan KellyAden Ip en Scientists from the University of Washington's eDNA Collaborative work to move environmental DNA analysis out of the lab and into the field. Here, we are working to do this without a lab and without a net. There are lots of interesting engineering and computational problems to be solved, and we welcome all suggestions (or any help!) as we work to crack this field wide open and show everyone that they are surrounded by an ocean of DNA. false https://talks.toorcon.net/toorcamp-2026/talk/MES9MQ/ https://talks.toorcon.net/toorcamp-2026/talk/MES9MQ/feedback/ Prime Dome 20-Min Talk 2026-06-25T15:00:00-07:00 15:00 00:20 I count bees with a doohickey attached to my bee hive! Let me show you all the fun to be had with an ESP32 and custom board and how to send data via MQTT to Postgres and then pull it into Grafana for the most glorious graphs and analysis of what the bees are doing. There are a surprising number of things that you can tell from the data. toorcamp-2026-406-always-bee-counting Talks - Prime Dome Benjamin Foote en false https://talks.toorcon.net/toorcamp-2026/talk/YED9CM/ https://talks.toorcon.net/toorcamp-2026/talk/YED9CM/feedback/ Prime Dome 20-Min Talk 2026-06-25T15:30:00-07:00 15:30 00:20 The organizational technologies of democratic politics — parties, platforms, elections — compress citizens' high-dimensional policy preferences into a low-dimensional menu, destroying most of the information in transit. The result is a system that cannot represent what anyone actually thinks, cannot communicate the necessity of compromise, and cannot process warnings that do not arrive in partisan packaging. This is not a failure of voters or politicians. It is a failure of architecture. What If We Actually Tried? quantifies this dimensional compression, traces its consequences through the political system — from the manufactured homelessness of the "centrist" to the comfort trap that blinds the affluent to the conditions of the poor — and proposes a specific architectural alternative. The deliberation layer replaces the party platform with self-organizing interest groups that produce structured policy analysis, evaluated by other groups and by citizens along multiple independent dimensions. Critic groups, whose authority may derive from lived experience rather than credentials, stress-test every proposal. A cryptographic identity system — personal certificates, unlinkable shards, zero-knowledge attestation — ensures that every participant is a verified unique human being while revealing nothing about who they are, making honest participation possible without professional or social risk. The book engages directly with the Abundance discourse (Klein, Thompson, Dunkelman), arguing that their unsolved question — who decides what gets built, and how? — has an answer: citizens decide, through structured deliberation, with results bridged into existing politics. It engages with the far left, the far right, and the anarchist critique through the lens of Jason Pargin's diagnosis of why mainstream America fears the left, showing that the "dealbreaker idea" — the perceived denial of human agency — is a communication failure that the dimensional model resolves by allowing agency and structural analysis to coexist on separate dimensions rather than being collapsed into a false binary. The book is honest about its limitations: the bootstrap problem, class capture, agenda-setting power. Its closing argument is that dissatisfaction with the current system has converged across communities that see themselves as enemies — progressive, conservative, libertarian, apolitical — and that this convergence, arising from perspectives that share almost no surface-level overlap, is itself evidence that the dimensional diagnosis is correct. The conditions for structural reform exist. The work is not finished. Neither are we at liberty to neglect it. toorcamp-2026-392-what-if-we-actually-tried-renovating-the-ethical-foundation-of-democracy Talks - Prime Dome Alex Cruise en A systems engineer who grew up poor and got rich argues that democracy isn't failing because people are broken — it's failing because the machinery is. The book diagnoses a specific, measurable information-theoretic failure (political parties compress a fourteen-dimensional policy space into a two-option menu), proposes a concrete alternative (a deliberation layer where citizens express their actual views, paired with a cryptographic identity system that makes honest participation safe), and makes the case that dissatisfaction with the current system has converged so broadly — across communities that consider each other enemies — that the conditions for structural reform exist for the first time in decades. false https://talks.toorcon.net/toorcamp-2026/talk/BUVLFU/ https://talks.toorcon.net/toorcamp-2026/talk/BUVLFU/feedback/ Prime Dome 20-Min Talk 2026-06-25T16:00:00-07:00 16:00 00:20 Severely burnt out after seven years working in DFIR consulting, and at the onset of the pandemic, I needed an excuse to get me outside away from people and computers. I ended up diving deep into a hobby I never thought I'd get into: exploring abandoned mines. Six years into this, I've spent hundreds of hours studying maps, tagged coordinates of over 10,000 tunnels, researched how to do this as safely as possible, almost gotten stranded in the wildness twice, hiked over 50 miles entirely underground, taken explosives training which aided me in helping with an EOD mission at a mine, and found a small cross-section of hackers also into this hobby who introduced me to an amazing community of passionate explorers. toorcamp-2026-411-a-better-life-underground Talks - Prime Dome polack en This talk will roughly cover: 1. How I got into this & identifying signs of burnout 2. How to do this safely, real-world risks & essential gear 3. My research process for identifying mines incl data sources 4. The mine exploring communities I've discovered incl one with hacker friends in it, and the wild people I've made connections with through these communities 5. How taking explosives training lead to an opportunity to connect with another hacker also into this hobby and assist with disposal of hundreds of sticks of old/unstable dynamite 6. Misc stories and unique content: detailed underground maps of select mines made by a friend, cool historical artifacts found incl 100 year old newspapers & miner's art drawn with carbide lamps, crazy crystal formations stumbled on, etc true https://talks.toorcon.net/toorcamp-2026/talk/E7HBMS/ https://talks.toorcon.net/toorcamp-2026/talk/E7HBMS/feedback/ Prime Dome 20-Min Talk 2026-06-25T16:30:00-07:00 16:30 00:20 A single wheel. No handlebars. No seat (usually). No brakes, in the traditional sense. 55 mph & 50 miles on a charge. Fits under a desk, charges from a wall outlet, and makes you look like a wizard, a lunatic, or both, depending on the lighting. I won't be giving lessons at this talk, but I'm happy to teach throughout the weekend! If you'd like to give it a try, please fill out **[this liability release](https://docs.google.com/forms/d/e/1FAIpQLSfwaKKr6HXyjpnr6Z_j_M2DdxTYssDo9mfTa4x0M4btabbKyw/viewform?usp=preview)**. toorcamp-2026-418-yes-an-electric-unicycle-is-the-most-practical-way-to-get-around-a-love-letter-and-an-incident-report Talks - Prime Dome Dustin en I've been riding EUCs as primary transport for a couple years. It comes inside with me. The grocery store, the bar, the office, the bus, the train. Which means I've never circled the block for parking, never locked anything to a rack, never registered the vehicle with anyone, and never been doored by a car (yet). I'm here to convince you it's the most practical personal vehicle ever built. Then I'll spend the rest of the talk undermining my own argument: firmware you flash at your own risk, BMS protection circuits and the manufacturers who decided to skip them, the lithium fire math (it's fine, it's fine, it's mostly fine), why controller tuning matters more than motor size, the telemetry ecosystem, what "cut-out" means and exactly how I learned it (badly, at speed, with my face), the ER visit, the months of physical therapy, the couple of teeth that are no longer original equipment, the insurance question, and the small global community of people who looked at all of that and decided this is still a normal way to live. Live demo all week. I'm the one going up the Doe Bay hill without pedaling, wearing more protective gear than seems strictly necessary, for reasons you can probably guess by now. false https://talks.toorcon.net/toorcamp-2026/talk/BFUU9K/ https://talks.toorcon.net/toorcamp-2026/talk/BFUU9K/feedback/ Prime Dome 20-Min Talk 2026-06-25T17:00:00-07:00 17:00 00:20 LoRA has been a significant force within the low-power, long-range radio space, enabling many protocols built on top from Reticulum to Meshtastic. But, the underlying protocol has some major shortcomings including susceptibility to jamming, sender detection and collisions. Let's explore what would be possible if we have more than some $4 radio silicon to play with. I hope to find other people in this space interested in working together to see what could be done. toorcamp-2026-374-what-s-after-lora Talks - Prime Dome CNLohr en LoRA is a spread-spectrum protocol, designed for use in negative signal-to-noise ratio applications and in environments with other intentional radiators. While very low data rate, it's impressive just how much LoRA can cut through to deliver the message. Because LoRA targets inexpensive transceiver chips, compromises had to be made with the protocol. But, what if we didn't have that restriction? What if we had some more umph behind it. Could we more effectively hide the LoRA signals, allow signals to be received even when collisions happen with more powerful stations? We will discuss what other people are doing in this space with curved chirps, and mixing in frequency hopping as well as a number of other approaches that can solve problems you probably didn't even know LoRA has! false https://talks.toorcon.net/toorcamp-2026/talk/8KCDJS/ https://talks.toorcon.net/toorcamp-2026/talk/8KCDJS/feedback/ Prime Dome 20-Min Talk 2026-06-25T17:30:00-07:00 17:30 00:20 In 2024 the Portland Hacker Foundation was founded with the goal of accelerating security research in the Portland area and delivering asymmetric impact to the local community. This is that story. How the Foundation was set up, the research we've funded, and how you can go out and build similar systems to empower your local community. toorcamp-2026-401-hacker-foundation-hijinks Talks - Prime Dome /media/toorcamp-2026/submissions/LZFP7G/pdxhf.hb2025_6DVwyXY_GYUZTq9.webp Dean Pierce en false https://talks.toorcon.net/toorcamp-2026/talk/LZFP7G/ https://talks.toorcon.net/toorcamp-2026/talk/LZFP7G/feedback/ Prime Dome 20-Min Talk 2026-06-25T18:00:00-07:00 18:00 00:20 There is nothing worse than being asked to text your kid's friends mom to see if they are free to hangout. Being a huge fan of ShadyTel, I built a kid only phone network with phones and open-source to solve the problem! I will show how I have been building this, the protocol behind it, and some of the tools that I have built to manage it along the way! toorcamp-2026-356-building-a-kids-only-phone-network Talks - Prime Dome n3wscott en false https://talks.toorcon.net/toorcamp-2026/talk/EQMRXH/ https://talks.toorcon.net/toorcamp-2026/talk/EQMRXH/feedback/ Yoga Studio Workshop 2026-06-25T11:00:00-07:00 11:00 01:30 Join Sova and Karmic Project for a free training and certification in CPR and using an AED through the American Red Cross training course. toorcamp-2026-424-free-american-red-cross-adult-cpr-aed-training-first-aid-option Workshops - Yoga Studio /media/toorcamp-2026/submissions/9DAJWJ/image_O8FSwdL.webp Sova (no pronouns / name only preferred) en Karmic Project will be offering free training and certification with the Adult CPR/AED course by the American Red Cross. Advanced registration is helpful for ensuring the proper amount of training supplies but not required. Registration at: https://tally.so/r/RGk45Q If you wish to get your first aid certification or renew your existing certification, you can take the blended online course and complete the training at the end of the CPR/AED course. Registration *is required* for the first aid certification so that we can send you the voucher to access the online portion of the course *prior* to arrival for the in-person skills test. If you do not complete the online portion we will not be able to issue the first aid certification, but you still can earn the Adult CPR/AED certification. Karmic Project (501c3 non-profit organization) will be sponsoring and covering the costs the certifications ($50/student). Those that wish to donate to help cover the costs and supplies can do so at https://www.karmicproject.org and all donations are tax-deductible. false https://talks.toorcon.net/toorcamp-2026/talk/9DAJWJ/ https://talks.toorcon.net/toorcamp-2026/talk/9DAJWJ/feedback/ Yoga Studio Workshop 2026-06-25T16:00:00-07:00 16:00 01:30 Your government publishes data you need to monitor, but searching for it creates a trail you can't afford. In this workshop, you'll build a zero-knowledge notification service from scratch: encrypted queries, fuzzy matching against a live data source, and result delivery where the operator never sees what was searched or who asked. Then you'll flip sides: use Rizin to tear apart a real sheriff's app APK, extract hardcoded secrets and tracking infrastructure, and have an AI agent classify findings against a threat registry. You leave with both the surveillance-resistant alternative and the skills to audit what it replaces. The patterns come from Frio, a live system monitoring county jail rosters for families of ICE detainees, but the architecture generalizes to any public dataset where the act of searching is itself sensitive. toorcamp-2026-371-breaking-the-ice-hands-on-tear-down-a-sheriff-s-app-build-the-replacement Workshops - Yoga Studio Aaron Markham en This workshop stands on its own, but pairs with my talk submission covering the surveillance findings that motivated this architecture. The short version: I reverse-engineered the sheriff's apps that families are told to install to check on detained loved ones and found GPS surveillance, ad tracking, and inmate searches routed to a credit bureau. This workshop is the constructive response: you'll build the kind of system that should exist instead. What you'll build: 1. **Keypair generation:** NaCl sealed-box encryption with dual keys (service key for processing, requestor key for results) 2. **Encrypted intake:** a requestor submits a query that the system can process but never read 3. **Fuzzy matching:** search a simulated data source with privacy-preserving name matching and configurable thresholds 4. **Encrypted result delivery:** matches are encrypted to the requestor's key; the operator sees only that a match occurred, not the content 5. **Shard decay:** data doesn't persist indefinitely; implement time-based expiration classes so the system forgets 6. **Agent skill:** use Claude Code to write a skill that can audit, scrape, or extend your service, then run it against your prototype 7. **Binary audit (capstone):** use Rizin to extract strings, permissions, and hardcoded secrets from a real sheriff's app APK, then have your agent classify the findings against a canonical threat registry. This is the same workflow used to audit 8 OCV sheriff apps in parallel What you'll take away: - A working prototype you can extend for your own use case - Understanding of zero-knowledge service architecture - Practical NaCl/libsodium usage patterns - A framework for thinking about surveillance-resistant system design - Experience using Claude Code skills as a force multiplier — the same approach used to audit 8 APKs in parallel and build scrapers for 55 data sources - Exposure to Spiritwriter's shard and entitlement model for building governed agent systems Prerequisites: - Laptop with Python 3.12+ and Rizin installed (rizin.re — we'll have install instructions for all platforms) - Claude Code CLI installed (API credits — we'll have a limited number of $10 starter credits available for attendees who need them) - Familiarity with Python helpful but not required — we'll explain as we go - No prior crypto or reverse engineering experience needed Materials provided: - Starter code repo with scaffolding and test data (built on spiritwriter-core) - Reference architecture diagram - Cheat sheet: NaCl sealed-box operations in PyNaCl - Claude Code skill templates for extending the prototype - Spiritwriter quick-start guide for turning the prototype into a distributed system false https://talks.toorcon.net/toorcamp-2026/talk/WJPJYT/ https://talks.toorcon.net/toorcamp-2026/talk/WJPJYT/feedback/ Yoga Studio Front Lawn Music / DJ Set 2026-06-25T19:00:00-07:00 19:00 01:00 Join 0xfff3 for a relatively chill dj set featuring some breakcore, dnb, maybe jungle and a healthy amount of ambient. toorcamp-2026-381-0xfff3-plays-a-chill-daytime-set Music m en dj 0xfff3 is a seattle local borne out of the raver queer hacker scene, with close ties to the /dev/hack hackerspace and impact! foundations, and is challenging every assumption when it comes to djing with both track selection, hardware (mixing on a self-programmed steam deck!), ‚�舐Þ¥¿Þ¥¿???? false https://talks.toorcon.net/toorcamp-2026/talk/GLJMQL/ https://talks.toorcon.net/toorcamp-2026/talk/GLJMQL/feedback/ Yoga Studio Front Lawn Music / DJ Set 2026-06-25T20:00:00-07:00 20:00 01:00 A eurorack techno set, featuring thundering bass, squelchy acid leads, and strange samples toorcamp-2026-400-echo-s-techno Music echo en false https://talks.toorcon.net/toorcamp-2026/talk/BBDTEN/ https://talks.toorcon.net/toorcamp-2026/talk/BBDTEN/feedback/ Yoga Studio Front Lawn Music / DJ Set 2026-06-25T21:00:00-07:00 21:00 01:00 DnB + Viz with Luna toorcamp-2026-393-syntax-luna Music syntax en DnB and Viz false https://talks.toorcon.net/toorcamp-2026/talk/JKRLWX/ https://talks.toorcon.net/toorcamp-2026/talk/JKRLWX/feedback/ Volleyball Court - NightMrkt After Dark Workshop 2026-06-25T21:00:00-07:00 21:00 05:00 Thursday and Friday 9p-2a at the volleyball courts! Trade your warez! toorcamp-2026-430-nightmrkt Workshops - NightMrkt / Volleyball Court pinguino kolb en false https://talks.toorcon.net/toorcamp-2026/talk/8D73ZG/ https://talks.toorcon.net/toorcamp-2026/talk/8D73ZG/feedback/ Hardware Hacking Stage 50-Min Talk 2026-06-25T09:30:00-07:00 09:30 00:50 I gave a coffee roasting workshop / talk last camp, and have learned even more about roasting that I'm happy to share with you all. I'll talk a bit about my own coffee hobby journey, roasting basics (and a little bit beyond), and a little bit about bean varieties. We'll roast a few batches and will have some coffee to share (bring a mug!). We'll be roasting and brewing at the House of Pong as well, so stop by for a chat and some coffee even if you can't make the workshop! toorcamp-2026-405-coffee-roasting-101-the-reckoning Workshops - Hardware Hacking Stage Dylan McNamee en false https://talks.toorcon.net/toorcamp-2026/talk/F87RSR/ https://talks.toorcon.net/toorcamp-2026/talk/F87RSR/feedback/ Hardware Hacking Stage Workshop 2026-06-25T11:00:00-07:00 11:00 02:30 Learn the fine art of lock bypass with a drill from a professional locksmith. When lockpicking fails it's good to know the nuclear kinetic option. toorcamp-2026-435-lock-drilling-class Workshops - Hardware Hacking Stage qweary en Come learn how to use a drill to open a door. One on one lesson from a locksmith on using a drill bit to defeat a lock. Drill, bits, gloves, and safety glasses provided. Join us to drill, stop by to pick up a practice cylinder to pick. false https://talks.toorcon.net/toorcamp-2026/talk/C3B9AT/ https://talks.toorcon.net/toorcamp-2026/talk/C3B9AT/feedback/ Hardware Hacking Stage Workshop 2026-06-25T14:00:00-07:00 14:00 02:00 Badge assembly. Learn to solder using two different custom badges from past ToorCamps. Teens or older or with parental supervision. 2 sessions toorcamp-2026-439-badge-soldering-workshop Workshops - Hardware Hacking Stage Curtis Mack en Badge assembly. Learn to solder using two different custom badges from past ToorCamps. Teens or older or with parental supervision. 2 sessions false https://talks.toorcon.net/toorcamp-2026/talk/FP9TLA/ https://talks.toorcon.net/toorcamp-2026/talk/FP9TLA/feedback/ Hardware Hacking Stage Workshop 2026-06-25T16:00:00-07:00 16:00 01:30 Want to get started with Meshtastic, and other off-grid LoRa mesh protocols? Learn the key differences between Meshcore, Meshtastic, and Reticulum, and how to customize your custom Meshtastic node to join your local community mesh network. You'll set up your node, learn to customize settings, use your node with your smartphone, and adapt your setup for specific environments. We’ll also cover common attacks against mesh networks and how to defend against them! toorcamp-2026-452-meshtastic-for-beginners-join-your-local-community-mesh-net Workshops - Hardware Hacking Stage Kody Kinzie en Want to get started with Meshtastic, and other off-grid LoRa mesh protocols? Learn the key differences between Meshcore, Meshtastic, and Reticulum, and how to customize your custom Meshtastic node to join your local community mesh network. You'll set up your node, learn to customize settings, use your node with your smartphone, and adapt your setup for specific environments. We’ll also cover common attacks against mesh networks and how to defend against them! false https://talks.toorcon.net/toorcamp-2026/talk/AKFMKU/ https://talks.toorcon.net/toorcamp-2026/talk/AKFMKU/feedback/ Hardware Hacking Stage Workshop 2026-06-25T18:00:00-07:00 18:00 01:30 Build your own cat-themed Nibble Mesh node and join the massive off-grid LoRa mesh networks popping up worldwide! In this class, you will learn to solder and flash Meshcore and Meshtastic onto your device, allowing you to connect, message, and explore independent networks. You will also build an environmental sensor to create your own remote weather station. For beginners to intermediate soldering skills. https://retia.io/toorcamp toorcamp-2026-449-meshcore-meshtastic-for-beginners-solder-your-encrypted-off-grid-node-soldering Workshops - Hardware Hacking Stage Kody Kinzie en Build your own cat-themed Nibble Mesh node and join the massive off-grid LoRa mesh networks popping up worldwide! In this class, you will learn to solder and flash Meshcore and Meshtastic onto your device, allowing you to connect, message, and explore independent networks. You will also build an environmental sensor to create your own remote weather station. For beginners to intermediate soldering skills. https://retia.io/toorcamp false https://talks.toorcon.net/toorcamp-2026/talk/9SYKGX/ https://talks.toorcon.net/toorcamp-2026/talk/9SYKGX/feedback/ Great Faerie Crafting Yurt Workshop 2026-06-25T10:30:00-07:00 10:30 01:30 Metal clay combines fine metal particles in an organic clay base. In this workshop, we'll be making copper or bronze metal clay charms. No experience needed. If you need help with hand tools or following directions, please bring someone to assist you. toorcamp-2026-360-bronze-metal-clay-jewelry Arts & Crafts - Faerie Yurt Amy Johnston en Come make a pendant or charm using molds, texture sheets and other clay tools. This process includes forming your metal clay piece, letting it dry to the greenware stage, then cleaning it up and carving details. After it gets fired in the kiln, you'll do final finishing work on your solid metal piece. Bring your Toorcamp passport stamp or other favorite rubber stamps to impress the clay with if you'd like. One-on-one or small group sessions available to create more elaborate or specific pieces from silver or base metal clay for material costs plus a small class fee. Message me for details. false https://talks.toorcon.net/toorcamp-2026/talk/F8FXEL/ https://talks.toorcon.net/toorcamp-2026/talk/F8FXEL/feedback/ Great Faerie Crafting Yurt Workshop 2026-06-25T13:00:00-07:00 13:00 01:30 Join us to create and decorate your own scaly friend in our dragon puppet workshop. No eperience required. toorcamp-2026-395-decorate-your-own-dragon-puppet Arts & Crafts - Faerie Yurt /media/toorcamp-2026/submissions/P3W8HM/1000018002_axPjZde_Cys93TZ_BHI71lm_mnpKqpp_CCG6B1S.webp Sonya en false https://talks.toorcon.net/toorcamp-2026/talk/P3W8HM/ https://talks.toorcon.net/toorcamp-2026/talk/P3W8HM/feedback/ Great Faerie Crafting Yurt Kid Friendly Workshop 2026-06-25T17:00:00-07:00 17:00 01:00 Come join me for a hands-on mask-making workshop! Masks are a fun way to express your creativity - and maybe even a part of your identity. We’ll be making masks of all kinds, magically transforming basic cat mask bases into all kinds of animals, characters you love or have invented, something for a formal masquerade or just let your creativity loose! toorcamp-2026-367-creative-mask-making Arts & Crafts - Faerie Yurt /media/toorcamp-2026/submissions/PA9AUD/IMG_3814_FwUu2pY_KvxzgYF_fB8DJFV_A77uSWi.webp viper en Everyone is welcome, no matter your experience level. We'll be using various materials and tools, including adhesives, sharp tools, and hot tools. false https://talks.toorcon.net/toorcamp-2026/talk/PA9AUD/ https://talks.toorcon.net/toorcamp-2026/talk/PA9AUD/feedback/ OlyMEGA Village Workshop 2026-06-25T12:00:00-07:00 12:00 04:00 OlyMEGA brought a laser engraver / cutter, vinyl cutter, 3-D printer' and other tools. Bring your own SVGs, images, and ideas and work with an Olymegan to burn or cut them into whatever material you choose. We will provide boards or vinyl sheets if you need them. First come first served. We can actively work with around three people at a time. @ OlyMEGA Village toorcamp-2026-443-makerspace-open-house Workshops - Villages Curtis Mack en OlyMEGA brought a laser engraver / cutter, vinyl cutter, 3-D printer' and other tools. Bring your own SVGs, images, and ideas and work with an Olymegan to burn or cut them into whatever material you choose. We will provide boards or vinyl sheets if you need them. First come first served. We can actively work with around three people at a time. false https://talks.toorcon.net/toorcamp-2026/talk/VWKEZN/ https://talks.toorcon.net/toorcamp-2026/talk/VWKEZN/feedback/ OlyMEGA Village Workshop 2026-06-25T16:00:00-07:00 16:00 02:00 Intro to sewing - Learn the basics In the cabin 4 people at a time. Teen or older. @ OlyMEGA Village toorcamp-2026-440-intro-to-sewing-workshop Workshops - Villages Angela Livermore en Intro to sewing - Learn the basics In the cabin 4 people at a time. Teen or older. @ OlyMEGA Village false https://talks.toorcon.net/toorcamp-2026/talk/9NE7PU/ https://talks.toorcon.net/toorcamp-2026/talk/9NE7PU/feedback/ Prime Dome 50-Min Talk 2026-06-26T11:00:00-07:00 11:00 00:50 Jack will tell you a story and give you free chemicals. His operating system of choice is wetware, and he will demonstrate how hackable it is. toorcamp-2026-387-keynote-jack-rhysider-darknet-diaries Talks - Prime Dome Jack Rhysider en Jack Rhysider is the creator and host of the podcast Darknet Diaries. And he says the best place on earth is ToorCamp. false https://talks.toorcon.net/toorcamp-2026/talk/LDJF3A/ https://talks.toorcon.net/toorcamp-2026/talk/LDJF3A/feedback/ Prime Dome 50-Min Talk 2026-06-26T12:00:00-07:00 12:00 00:50 I spent years installing Trilogy Alarm Locks for the military. Other locksmiths asked for recommendations, I let them know of Trilogy's fast response to responsible disclosures (at that time), and I soon started seeing them in pharmacies, more government buildings, and banks. Then, after the company stopped responding to my vulnerability disclosures, I spent a year figuring out how to hack them. Nearly every angle I approached it from, I found a new vulnerability. The company never responded, despite acknowledging through a third party. This talk walks through a five-layer attack chain against the T2/T3 lock platform: physical bypasses that leave little to no trace, NAND flash manipulation that injects ghost users with master privileges, a firmware hook on the MSP430 microcontroller that writes a persistent backdoor code during factory reset (using hand-patched TI assembly, because apparently that's a thing I do now), and USB emulation of the proprietary audit cable using FaceDancer and a GreatFET One. Over a year later, I was able to prove that a lock deployed in critical infrastructure has credentials that can be cloned from the trash, firmware that can be rewritten through an unblown JTAG fuse, and whose audit trail (the one used as legal evidence) can be fooled by a device that costs less than the lock itself. I'm not a firmware engineer; I'm a locksmith who got curious, bricked a lot of boards, filled a notebook with bad hypotheses, and eventually taught myself enough TI assembly to write a 38-byte payload that survives every factory reset method. The tools were a $30 flash programmer, a soldering iron, and an unreasonable amount of stubbornness. The talk closes with a constructive argument: self-auditing endpoints are fundamentally broken. If the lock controls access AND writes the audit log, you have a suspect writing their own alibi, not a log that should be used in legal evidence. I'll propose an Observer System Model where independent sensors verify what the lock claims, and discuss why even cheap mitigations (blow the JTAG fuse, encrypt the NAND, authenticate the cable, use a TPM) would have stopped every attack in this chain. Everything is published: code, dumps, patches, pcaps, 33 pages of handwritten notes, and a 4,000-word research journal documenting every wrong turn. Repo: https://github.com/Qweary/T2-T3-Lock-Exploitation-Research Blog: https://qweary.github.io/backburner/ toorcamp-2026-365-physical-access-digital-lies-how-a-locksmith-hacked-his-recommended-lock Talks - Prime Dome /media/toorcamp-2026/submissions/MJBZNN/20241115_190129_ADji0js_GmFBWxf_Qqg84kZ.webp qweary en The five attack layers, in order of escalation: **Layer 1 — Physical:** Acoustic side-channel keylogging through speaker voltage leakage. Tailpiece deflection with a stiff wire. Factory reset triggered by freezing battery leads with an inverted compressed air can. Remote unlock via bridging always-hot wires accessible through an external comm port. None of these generate audit events. **Layer 2 — NAND Flash (Adesto AT45DB041E):** Complete reverse engineering of the 264-byte page layout storing 50 users per page. User codes stored as ASCII nibbles in plain decimal for the user codes (“0” substituted with “B” due to TI assembly conflicts with the microprocessor). Permission flags with easy to understand byte sequences (F1=Master, E1=Elevated, C1=Supervisor). Lazy write model where the MSP430 only commits RAM to NAND on battery removal. Arbitrary privilege escalation and user code injection via a $30 universal programmer and SOP8 clip. Injected codes appear in "Print Users" but not "Export Users,” presenting a stealth window for forensic evasion. **Layer 3 — Firmware (MSP430F2418 via JTAG):** The JTAG fuse was never blown. Full read/write access to firmware. Located SetMasterCode() at 0x9ECA. Hijacked execution at 0x9EE8 with a BR opcode redirecting to unused space at 0xFA20. The 38-byte payload writes an elevated user code (696969) to slot 49 during every factory reset. Survived multiple resets across multiple boards. Video demo available. **Layer 4 — USB Cable Emulation (CP2102 via FaceDancer):** Built a GreatFET-based emulator matching the Silicon Labs VID/PID, device descriptors, vendor requests, and bulk endpoints of the proprietary programming cable. DL-Windows recognizes the emulated device and interacts with it. Partial pass of the software's Loopback Test (~40 of 303 packets). Vendor audit software performs no cryptographic authentication — trust is based entirely on USB descriptors, then happily passes data back and forth with the cable. **Layer 5 — Audit Trail Subversion:** The synthesis of all four layers. NAND injection creates users invisible to some export methods. Firmware injection creates codes invisible until queried. Cable emulation opens the door to intercepting or forging audit data between lock and PC. Combined: a lock whose credentials, firmware, and audit trail can all be manipulated by an attacker with physical access and modest tools. The fact that these locks are shipped over international waters before being installed in the most sensitive areas leaves many opportunities, and motivation, for a bad actor to inject a phantom into the pipeline. Target hardware: Alarm Lock Trilogy T2/T3 (MSP430F2418 + Adesto AT45DB041E + CP2102 USB interface). Deployed widely in US healthcare, education, government, and financial sectors. Blog series: https://qweary.github.io/backburner/ Repository: https://github.com/Qweary/T2-T3-Lock-Exploitation-Research false https://talks.toorcon.net/toorcamp-2026/talk/MJBZNN/ https://talks.toorcon.net/toorcamp-2026/talk/MJBZNN/feedback/ Prime Dome 50-Min Talk 2026-06-26T13:00:00-07:00 13:00 00:50 Remotely operated vehicles are increasingly integral to modern operations, with bomb disposal robots serving as some of the earliest pioneers of robotics. This presentation provides a deep technical analysis into the architecture and 25-year evolution of iRobot’s PackBot. Originally developed by iRobot, creators of the Roomba vacuum, the PackBot saw extensive use while keeping operators safe. However, beneath its ruggedized exterior lies an ecosystem built on legacy open-source software, and commercial off-the-shelf hardware. Despite two decades of iterative hardware improvements, the PackBot’s software stack has remained largely static, running on legacy distributions of Linux and relying heavily on Python 2.5 for core functionality in its second-generation and later models. Attendees will be taken through a comprehensive hardware teardown and introduction to my PackBot. We will map the system across the Operator Control Unit (OCU), the radio links, and the robot itself. Finally, we will detail the reverse-engineering process used to gain access to each component, analyze the control protocols, and demonstrate how a hacker can customize and make a PackBot into something new. **My PackBot, Boomba, will also be present at the talk and be available the entire week for autographs or to pass the butter.** toorcamp-2026-359-owning-the-packbot-a-full-stack-teardown-of-an-eod-robot Talks - Prime Dome /media/toorcamp-2026/submissions/JQ9XNX/IMG_1816_ElPFahp_xwmWIL1_uKiDpr6.webp Gigstormastradotpng en To my knowledge, this research represents the first time a widely deployed Explosive Ordnance Disposal (EOD) robot has been publicly reverse-engineered. Historically, offensive research into tactical robotics is shrouded in security-by-obscurity, restricted by classification, or kept behind closed doors. The primary novelty of this work lies in demystifying a battlefield 'black box.' It diverges from the industry assumption that high-stakes robotic systems rely on bespoke, highly secure architectures. Instead, I reveal that beneath its ruggedized exterior, the PackBot is built on accessible and easily understood technology, specifically, 802.11 hardware, Intel architecture, Linux and legacy Python. ToorCamp will be the first time I am discussing this research publicly true https://talks.toorcon.net/toorcamp-2026/talk/JQ9XNX/ https://talks.toorcon.net/toorcamp-2026/talk/JQ9XNX/feedback/ Prime Dome 50-Min Talk 2026-06-26T14:00:00-07:00 14:00 00:50 Analog synthesizers have become a playground for DIY electronics builders, but the traditional playbook - breadboard everything and build through-hole prototypes - is slow, messy, and increasingly out of date. Modern tools make it possible for a single hacker to design and manufacture professional-quality surface-mount modules quickly and cheaply. In this talk I’ll walk through my end-to-end workflow for designing Eurorack modules without breadboards. Using real modules as a case study, I’ll cover circuit simulation in LTspice, schematic capture and PCB layout in KiCad, and low-cost manufacturing with JLCPCB. I’ll also show the inevitable mistakes: debugging first prototypes, tweaking component values, and refining the design. The goal is to demystify modern PCB development and show how approachable it is to go from idea to fully manufactured hardware. If you’ve ever wanted to design your own synth module - or any small electronic gadget - this talk will show how modern tools and manufacturing make it easier than ever. toorcamp-2026-364-skip-the-breadboard-designing-eurorack-with-simulation-and-smt Talks - Prime Dome Aaron St. John en false https://talks.toorcon.net/toorcamp-2026/talk/VZSJRP/ https://talks.toorcon.net/toorcamp-2026/talk/VZSJRP/feedback/ Prime Dome 20-Min Talk 2026-06-26T15:00:00-07:00 15:00 00:20 Our computer systems will fail, without trying. We can and should save the user from unexpected errors and lost data. We can categorize these as: Physical, Legacy, New for Newness, Cultural, and Security, Some gotcha corner cases are so hard to deal with, we just ignore them. We would have to add extra evaluations at many layers in the system and interact with the user, which may cause complications, but with sane defaults we can manage Filesystem case sensitivity, character encoding, miss clicks, focus change, system lag, the cat walks across the keyboard and starts batting the touch screen, and you should have known better. toorcamp-2026-453-dubious-computing-conventions-that-hurt-us Talks - Prime Dome Aaron Peterson en false https://talks.toorcon.net/toorcamp-2026/talk/UNYSYR/ https://talks.toorcon.net/toorcamp-2026/talk/UNYSYR/feedback/ Prime Dome 20-Min Talk 2026-06-26T15:30:00-07:00 15:30 00:20 Mariners have been crossing the seas guided by nothing more than precise measurement of star positions for centuries. This talk will discuss automating the process of celestial navigation so that you or your robot can navigate without the aid of GPS or other navigation aids. toorcamp-2026-376-no-gps-no-problem Talks - Prime Dome Pierce Nichols en false https://talks.toorcon.net/toorcamp-2026/talk/ZFEDDB/ https://talks.toorcon.net/toorcamp-2026/talk/ZFEDDB/feedback/ Prime Dome 20-Min Talk 2026-06-26T16:00:00-07:00 16:00 00:20 Automatic Identification System (AIS) is a radio protocol used for marine traffic management. This talk introduces the basics of AIS and its obvious use: tracking ships! We will then nerd out on more obscure applications, technical details, and their security implications. The talk will end with a guide to low-cost tools and open source resources to kickstart your own shipspotting adventure. toorcamp-2026-355-shipspotting-an-introduction-to-ais Talks - Prime Dome Adrian Studer en false https://talks.toorcon.net/toorcamp-2026/talk/XFELFJ/ https://talks.toorcon.net/toorcamp-2026/talk/XFELFJ/feedback/ Prime Dome 20-Min Talk 2026-06-26T16:30:00-07:00 16:30 00:20 Discussion on the history of RDS technology, as well as recent developments in and applications of RDS-2. Presented by Tycho Pendraig, in collaboration with Allen Hartle of KIXP and the StayAlert system. toorcamp-2026-419-radio-technologies-rds-and-rds-2 Talks - Prime Dome Tycho Pendraig en false https://talks.toorcon.net/toorcamp-2026/talk/YGLRJZ/ https://talks.toorcon.net/toorcamp-2026/talk/YGLRJZ/feedback/ Prime Dome 20-Min Talk 2026-06-26T17:00:00-07:00 17:00 00:20 This talk introduces rtlsdr.tv and will cover the basics of digital video streams, programmatically feeding live content to <video> tags through Media Source Extensions, and using WebUSB to interact with devices that previously required kernel drivers. We will also dive into a few "vibe-porting" tricks used to automatically convert tedious portions of Linux drivers to JavaScript. toorcamp-2026-368-rtlsdr-tv-broadcast-tv-in-your-browser Talks - Prime Dome Karl Koscher en false https://talks.toorcon.net/toorcamp-2026/talk/D9PLH8/ https://talks.toorcon.net/toorcamp-2026/talk/D9PLH8/feedback/ Prime Dome Lightning Talk 2026-06-26T17:30:00-07:00 17:30 00:05 The spectrum around you is crowded - phones hunting for known networks, wearables advertising themselves, mesh routers gossiping in the background. None of it is visible, and the tools we have are built for analysis, not atmosphere. I wanted an ambient display driven by the spectrum. In this system, each node senses, passively listening for the wireless traffic that betrays nearby devices. It coordinates, sharing what it sees with the other nodes. It expresses, driving a layered animation engine where device counts, traffic bursts, proximity, and movement through the space all become inputs that shape color and motion. toorcamp-2026-420-visualizing-the-invisible-rendering-spectrum-as-light Talks - Prime Dome Paul Carrigg en false https://talks.toorcon.net/toorcamp-2026/talk/WTRZUH/ https://talks.toorcon.net/toorcamp-2026/talk/WTRZUH/feedback/ Prime Dome 20-Min Talk 2026-06-26T18:00:00-07:00 18:00 00:20 We've all done it, you walk out of the store and the exit portals start beeping.... So you just keep walking. Tag-based retail anti-theft systems have been with us for decades, and there are several distinct generations of technology in use. Some of them rely on interesting physics, others use state of the art RFID technology for integrating into point of sale and supply chain systems. All of them are, almost universally, hated and ignored. We'll learn about magnetostriction, visibility networks, and shopping carts that form mesh network swarms while they wait in the parking lot. toorcamp-2026-379-gatekeeping-the-exit-retail-loss-prevention-technology Talks - Prime Dome /media/toorcamp-2026/submissions/UYADKX/image_pTiK67w.webp J. B. Crawford en This talk will cover a timeline of retail loss prevention technology, and then focus on the current generation of mesh networking, IP-integrated systems with surveillance and marketing implications. We'll also discuss the business and technology reasons that loss prevention technology is widely installed but very inconsistently used, and efforts to apply similar technology to problems like armory and nuclear material management. false https://talks.toorcon.net/toorcamp-2026/talk/UYADKX/ https://talks.toorcon.net/toorcamp-2026/talk/UYADKX/feedback/ Prime Dome 20-Min Talk 2026-06-26T18:30:00-07:00 18:30 00:20 Sign up for the Stupid Shit No One Needs & Terrible Ideas Hackathon, a time-limited event that gives creators the opportunity to produce variously useless, horrifying, boring, and/or bad things. Create terrible things alone or with a group! After 24 hours of production time, bring your terrible thing to our Stupid Hackathon showcase for judging. toorcamp-2026-408-stupid-hackathon-kickoff Talks - Prime Dome /media/toorcamp-2026/submissions/PCPLST/StupidHackathon_2022_JlGkV6K_hnFmNYl.webp Moonrock en false https://talks.toorcon.net/toorcamp-2026/talk/PCPLST/ https://talks.toorcon.net/toorcamp-2026/talk/PCPLST/feedback/ Prime Dome Lightning Talk 2026-06-26T19:00:00-07:00 19:00 00:05 Have an idea for a lighting talk? Email david@toorcon.org so we can add you to the schedule or just show up and be prepared to talk for 5 minutes on a subject. toorcamp-2026-428-lightning-talks Talks - Prime Dome David Hulton en false https://talks.toorcon.net/toorcamp-2026/talk/MDBZLQ/ https://talks.toorcon.net/toorcamp-2026/talk/MDBZLQ/feedback/ Prime Dome Music / DJ Set 2026-06-26T19:30:00-07:00 19:30 01:00 For the first time in more than thirty years... Republic Dogs will be performed live. This scintillating modernist reinterpretation of Plato's Republic has been hidden away in the depths of the Internet for decades, but this Toorcamp, it will emerge back into the light. toorcamp-2026-377-republic-dogs Talks - Prime Dome Pierce Nichols en false https://talks.toorcon.net/toorcamp-2026/talk/7U7MTC/ https://talks.toorcon.net/toorcamp-2026/talk/7U7MTC/feedback/ Yoga Studio Workshop 2026-06-26T11:00:00-07:00 11:00 01:30 Join Sova and Karmic Project for a free training and certification in CPR and using an AED through the American Red Cross training course. toorcamp-2026-426-free-american-red-cross-adult-cpr-aed-training-first-aid-option Workshops - Yoga Studio /media/toorcamp-2026/submissions/TDJVGB/image_FI8GOn0.webp Sova (no pronouns / name only preferred) en Karmic Project will be offering free training and certification with the Adult CPR/AED course by the American Red Cross. Advanced registration is helpful for ensuring the proper amount of training supplies but not required. Registration at: https://tally.so/r/RGk45Q If you wish to get your first aid certification or renew your existing certification, you can take the blended online course and complete the training at the end of the CPR/AED course. Registration *is required* for the first aid certification so that we can send you the voucher to access the online portion of the course *prior* to arrival for the in-person skills test. If you do not complete the online portion we will not be able to issue the first aid certification, but you still can earn the Adult CPR/AED certification. Karmic Project (501c3 non-profit organization) will be sponsoring and covering the costs the certifications ($50/student). Those that wish to donate to help cover the costs and supplies can do so at https://www.karmicproject.org and all donations are tax-deductible. false https://talks.toorcon.net/toorcamp-2026/talk/TDJVGB/ https://talks.toorcon.net/toorcamp-2026/talk/TDJVGB/feedback/ Yoga Studio Workshop 2026-06-26T13:00:00-07:00 13:00 01:30 Storytelling through games doesn't have to be complicated! Come on down and scribble on some printer paper with friends! In this sort-of-guided-ish workshop experience, we'll build simple tabletop RPGs that can be played in 15 minutes, about whatever the heck we want! I'll bring the dice, let's get wierd. toorcamp-2026-417-one-page-one-shot-think-tank-madness Workshops - Yoga Studio Lesley Jones en false https://talks.toorcon.net/toorcamp-2026/talk/JWVAFF/ https://talks.toorcon.net/toorcamp-2026/talk/JWVAFF/feedback/ Yoga Studio Workshop 2026-06-26T15:00:00-07:00 15:00 01:30 Hecate is an open source UART implant framework designed to make common hardware hacking tasks easy with minimal code. It turns any CircuitPython microcontroller into a powerful, customizable UART implant. In this workshop, you'll get to use all the core features of Hecate and see how they work against multiple target devices. We'll start hands-on by listening to a device's UART output, and then configuring Hecate to operate in standalone mode and log it to a file. Once we've seen it in action, we'll step back for a bit of lecture about UART, what it's used for, and what we designed Hecate to be capable of. Armed with this knowledge, you'll dive into more hands-on labs: a payload dropper that will playback a custom transaction and a simple detector that will signal an alert when it detects a pattern. We'll reconvene for a last bit of lecture on Hecate's advanced features like in-flight implant-in-the-middle attacks in case you want to explore them after the workshop. Hecate makes developing embedded implants trivial, while remaining flexible enough for advanced research and rapid prototyping. You'll walk away with hands-on experience using the Hecate framework and a working understanding of what's possible with UART interception, manipulation, and exploitation. toorcamp-2026-397-hecate-a-trivial-uart-tool Workshops - Yoga Studio Joe FitzPatricknyx en Hardware Requirement: Bring a laptop with a USB port and a text editor, any operating system. Recommended: Mu-editor installed or Chrome/Chromium-based browser for https://circuitpy.dev in-browser editor Experience: Beginner friendly. Familiarity with python, experience with text consoles, and some fundamental UART understanding would all be very helpful, but not required. We'll bring all the hardware you'll need, and you'll get to keep one of the boards for your own use. Rough outline: Lab 1: Finding and Logging UART (15 minutes) Lecture 1: UART basics and Hecate intro (20 minutes) Lab 2: Dropping a crafted UART payload (20 minutes) Lab 3: Alerting on a UART pattern match (20 minutes) Lecture 2: Advanced Hecate usage (15 minutes) true https://talks.toorcon.net/toorcamp-2026/talk/T9EB9D/ https://talks.toorcon.net/toorcamp-2026/talk/T9EB9D/feedback/ Yoga Studio Front Lawn Workshop 2026-06-26T10:00:00-07:00 10:00 00:30 We'll use the America's Test Kitchen method of scientific experimentation to find the easiest and most fun ways to cook real pizza while camping, using different methods for crust, sauce making, cooking techniques, different fuels, different cheese and toppings. Please see the description for what you need to bring (gluten free is possible too) toorcamp-2026-425-making-pizza-with-science-part-1-making-the-dough Workshops - Picnic Tables (Outside Yoga Studio) Randy Pargman en Have you ever wanted to cook a really good pizza while camping, but it seems like it would be too difficult? I'm going to show you all the tricks I've learned from making thousands of pizzas, and we're going to use the America's Test Kitchen method of scientific experimentation to compare all the different options. We'll try making sauce the simple way and the traditional (harder) way and taste test the difference. We'll cook pizza in a portable Ooni oven using propane gas, hardwood, and charcoal and taste them to find the best. We'll make our own dough from scratch and try that side-by-side with frozen Trader Joe's dough. Does it matter what kind of flour you use? We'll find out! What about sourdough crust? Why not? We'll try all kinds of toppings and different kinds of cheese (please bring toppings and cheeses you want to try). I'll teach you three different ways to throw the pizza from the peel into the oven without losing all the toppings, including a secret cheat code. Not only is this fun and educational, you will get to eat lots of pizza along the journey! Please bring: A plate, a clean cutting board, a bowl, a small bag of flour (or store-bought dough), some cheese, creative toppings you enjoy, your imagination and your appetite. Workshop size limited to about 30 people but if we get more, I'll stay later and we'll cook as long as we need to. Note that fire will be contained in the oven (no open flames) but the oven does get hot (up to 900F) so safety is important. Kid chefs are welcome if closely supervised by their adult. Note: If you are gluten free, get the King Arthur gluten free pizza dough mix and bring it! We'll make beautiful gluten free pizza for you! false https://talks.toorcon.net/toorcamp-2026/talk/ZYYNRP/ https://talks.toorcon.net/toorcamp-2026/talk/ZYYNRP/feedback/ Yoga Studio Front Lawn Workshop 2026-06-26T17:00:00-07:00 17:00 01:30 We'll use the America's Test Kitchen method of scientific experimentation to find the easiest and most fun ways to cook real pizza while camping, using different methods for crust, sauce making, cooking techniques, different fuels, different cheese and toppings. Please see the description for what you need to bring (gluten free is possible too) toorcamp-2026-358-making-pizza-with-science Workshops - Picnic Tables (Outside Yoga Studio) /media/toorcamp-2026/submissions/Y3QKPY/IMG_5780_kRcSgQE_UiClaxB.webp Randy Pargman en Have you ever wanted to cook a really good pizza while camping, but it seems like it would be too difficult? I'm going to show you all the tricks I've learned from making thousands of pizzas, and we're going to use the America's Test Kitchen method of scientific experimentation to compare all the different options. We'll try making sauce the simple way and the traditional (harder) way and taste test the difference. We'll cook pizza in a portable Ooni oven using propane gas, hardwood, and charcoal and taste them to find the best. We'll make our own dough from scratch and try that side-by-side with frozen Trader Joe's dough. Does it matter what kind of flour you use? We'll find out! What about sourdough crust? Why not? We'll try all kinds of toppings and different kinds of cheese (please bring toppings and cheeses you want to try). I'll teach you three different ways to throw the pizza from the peel into the oven without losing all the toppings, including a secret cheat code. Not only is this fun and educational, you will get to eat lots of pizza along the journey! Please bring: A plate, a clean cutting board, a bowl, a small bag of flour (or store-bought dough), some cheese, creative toppings you enjoy, your imagination and your appetite. Workshop size limited to about 30 people but if we get more, I'll stay later and we'll cook as long as we need to. Note that fire will be contained in the oven (no open flames) but the oven does get hot (up to 900F) so safety is important. Kid chefs are welcome if closely supervised by their adult. Note: If you are gluten free, get the King Arthur gluten free pizza dough mix and bring it! We'll make beautiful gluten free pizza for you! false https://talks.toorcon.net/toorcamp-2026/talk/Y3QKPY/ https://talks.toorcon.net/toorcamp-2026/talk/Y3QKPY/feedback/ Yoga Studio Front Lawn Music / DJ Set 2026-06-26T20:00:00-07:00 20:00 01:00 I'd like to apply to be a DJ at the con! My DJ name is Kalikat (like Kali Linux) and I like to spin minimal house beats but can do other more experimental styles if necessary. Here is my latest SoundCloud set: - https://on.soundcloud.com/g197bQsNDAUjKM7dct Some other styles I can do (in a Spotify playlist): - https://open.spotify.com/playlist/4J5mMOFTGTuvKaVsJKqREe?si=Ihnhdug-RaKGjY2uiwEYpg&pi=BoU4DkiZRFqZe - https://open.spotify.com/playlist/7rc1J83yYHh8oJnhepTfS8?si=8xQpzoOPShmJNhfnVNPvtg&pi=uOY9JQjbQ_atL toorcamp-2026-382-kalikat-dj-set Music Jessa Gegax en false https://talks.toorcon.net/toorcamp-2026/talk/GMK3P3/ https://talks.toorcon.net/toorcamp-2026/talk/GMK3P3/feedback/ Yoga Studio Front Lawn Music / DJ Set 2026-06-26T21:00:00-07:00 21:00 01:00 PatAttack is a Security Engineer by day, and a DJ when he's not asleep. This year for ToorCamp, he's bringing you some delicious Liquid Drum and Bass! toorcamp-2026-353-patattack Music PatAttack en false https://talks.toorcon.net/toorcamp-2026/talk/9NXFAK/ https://talks.toorcon.net/toorcamp-2026/talk/9NXFAK/feedback/ Volleyball Court - NightMrkt After Dark Workshop 2026-06-26T21:00:00-07:00 21:00 05:00 Thursday and Friday 9p-2a at the volleyball courts! Trade your warez! toorcamp-2026-431-nightmrkt Workshops - NightMrkt / Volleyball Court pinguino kolb en false https://talks.toorcon.net/toorcamp-2026/talk/EREYCK/ https://talks.toorcon.net/toorcamp-2026/talk/EREYCK/feedback/ Hardware Hacking Stage Workshop 2026-06-26T10:30:00-07:00 10:30 02:00 Badge assembly. Learn to solder using two different custom badges from past ToorCamps. Teens or older or with parental supervision. 2 sessions toorcamp-2026-438-badge-soldering-workshop Workshops - Hardware Hacking Stage Curtis Mack en Badge assembly. Learn to solder using two different custom badges from past ToorCamps. Teens or older or with parental supervision. 2 sessions false https://talks.toorcon.net/toorcamp-2026/talk/BJANS9/ https://talks.toorcon.net/toorcamp-2026/talk/BJANS9/feedback/ Hardware Hacking Stage Workshop 2026-06-26T13:00:00-07:00 13:00 01:30 Get hands-on instruction on advanced Wi-Fi hacking while learning how to defend against common advanced techniques. You will learn essential skills for defending against five common, powerful Wi-Fi attacks. Explore how to physically track down any Wi-Fi device, detect Wi-Fi leaks, identify malicious QR codes and phishing networks, and defend against advanced Wi-Fi karma attacks. toorcamp-2026-451-wi-fi-self-defense-hacker-hunting-for-beginners-no-soldering Workshops - Hardware Hacking Stage Kody Kinzie en Get hands-on instruction on advanced Wi-Fi hacking while learning how to defend against common advanced techniques. You will learn essential skills for defending against five common, powerful Wi-Fi attacks. Explore how to physically track down any Wi-Fi device, detect Wi-Fi leaks, identify malicious QR codes and phishing networks, and defend against advanced Wi-Fi karma attacks. false https://talks.toorcon.net/toorcamp-2026/talk/BRV9KF/ https://talks.toorcon.net/toorcamp-2026/talk/BRV9KF/feedback/ Hardware Hacking Stage Workshop 2026-06-26T15:00:00-07:00 15:00 02:00 Badge assembly. Learn to solder using two different custom badges from past ToorCamps. Teens or older or with parental supervision. 2 sessions toorcamp-2026-437-badge-soldering-workshop Workshops - Hardware Hacking Stage Curtis Mack en Badge assembly. Learn to solder using two different custom badges from past ToorCamps. Teens or older or with parental supervision. 2 sessions false https://talks.toorcon.net/toorcamp-2026/talk/VHDUG3/ https://talks.toorcon.net/toorcamp-2026/talk/VHDUG3/feedback/ Hardware Hacking Stage Music / DJ Set 2026-06-26T20:00:00-07:00 20:00 01:30 Live jam: Relax with classical and jazz music played on trombone by a guy named Piano (Qweary). Jazz backgrounds over speaker, bring an instrument if you want to join. toorcamp-2026-436-live-jam-session Workshops - Hardware Hacking Stage qweary en Live jam: Relax with classical and jazz music played on trombone by a guy named Piano (Qweary). Jazz backgrounds over speaker, bring an instrument if you want to join. false https://talks.toorcon.net/toorcamp-2026/talk/K773U8/ https://talks.toorcon.net/toorcamp-2026/talk/K773U8/feedback/ Moon Rock Village Workshop 2026-06-26T12:30:00-07:00 12:30 04:00 This four-hour workshop will teach the legal basis of flame effect installation, including NFPA 160 and other codes, as well as some basic physical properties of LP gas. With that in place, we'll move on to constructing a simple static effect, i.e. a tiki torch, and then using that as the pilot light for an wifi-connected dynamic effect, i.e. a poofer. By the end of the course, you will have the basic knowledge necessary to add a flamethrower to your own network toorcamp-2026-414-flame-effects-for-the-hacker Workshops - Villages /media/toorcamp-2026/submissions/FWFMZL/DSC_0637-EDIT_CQmGH3w_n3ia32M.webp Jack Chatterton en false https://talks.toorcon.net/toorcamp-2026/talk/FWFMZL/ https://talks.toorcon.net/toorcamp-2026/talk/FWFMZL/feedback/ Great Faerie Crafting Yurt Workshop 2026-06-26T09:30:00-07:00 09:30 01:30 Come share in craft time. Bring your own project or work on a project you started during a craft workshop. We have an assortment of craft tools and supplies on hand to share. toorcamp-2026-403-open-craft-time Arts & Crafts - Faerie Yurt Amy Johnston en false https://talks.toorcon.net/toorcamp-2026/talk/HLHAGB/ https://talks.toorcon.net/toorcamp-2026/talk/HLHAGB/feedback/ Great Faerie Crafting Yurt Workshop 2026-06-26T11:00:00-07:00 11:00 01:30 Join us to learn the basics of tapestry weaving. Using a handheld loom you will create your own fabric using yarn, thread, and maybe even things from the world around you! No experience necessary. toorcamp-2026-396-tapestry-weaving-for-beginners Arts & Crafts - Faerie Yurt /media/toorcamp-2026/submissions/WU9KDF/1000018004_OtaOKA8_1Wprm7m.webp Sonya en false https://talks.toorcon.net/toorcamp-2026/talk/WU9KDF/ https://talks.toorcon.net/toorcamp-2026/talk/WU9KDF/feedback/ OlyMEGA Village Workshop 2026-06-26T15:00:00-07:00 15:00 02:00 Intro to sewing - Learn the basics In the cabin 4 people at a time. Teen or older. @ OlyMEGA Village toorcamp-2026-441-intro-to-sewing-workshop Workshops - Villages Angela Livermore en Intro to sewing - Learn the basics In the cabin 4 people at a time. Teen or older. @ OlyMEGA Village false https://talks.toorcon.net/toorcamp-2026/talk/W779BE/ https://talks.toorcon.net/toorcamp-2026/talk/W779BE/feedback/ Prime Dome 50-Min Talk 2026-06-27T11:00:00-07:00 11:00 00:50 The surveillance state is exploding. Flock cameras blanket the country. Palantir watches everything. ICE buys location data by the truckload. Age-verification mandates are being baked into operating systems. And the developers building tools to push back are getting arrested. We are losing this fight. But we don't have to. Past generations of hackers already wrote the playbook for winning fights like this one. Phil Zimmermann beat the U.S. export-control regime by publishing PGP source code. Cult of the Dead Cow forced Microsoft to take security seriously by handing out 10,000 CDs of a Windows exploit at DEF CON. Matt Blaze killed the Clipper Chip with a single peer-reviewed paper. We can follow the same playbook. This talk walks through how they succeeded, and what the community needs to do right now to win current surveillance war. toorcamp-2026-407-the-new-war-on-privacy-and-how-we-win-lessons-from-the-history-of-hacker-activism Talks - Prime Dome Naomi Brockwell en Intro: Who I Am, and Why I'm Standing Here Naomi Brockwell, President of the Ludlow Institute. Lead drafter of H.R. 8470. I. Why We're Losing the War on Privacy A. The surveillance state metastasized through doctrinal loopholes the courts refuse to close. B. Surveillance tech outpaces privacy protection from the courts. II. The War Just Escalated Three new fronts: • AI • ID mandates and age verification • Arresting developers of privacy tools I used to think we could just use privacy tools and reclaim privacy personally. But then developers of privacy tools started being arrested, and I realized these tools might cease to exist. Tech-only resistance is being criminalized. Without a simultaneous policy fight, we lose the right to build the tools at all. III. How We Win the War on Privacy History of how the hacker community has rallied support and succeeded in pushing for reform. Case I. Phil Zimmermann Case II. Cult of the Dead Cow Case III. The Clipper Chip IV. The Pattern: What Every Successful Hacker-Driven Reform Has in Common Takeaway: the hacker community has won this fight three times in three decades against opponents with more money, more lawyers, and more power. Let's do it again. V. Call to Action The surveillance state is real. It's been built by private companies and the government working together, and it's accelerating. We win the same way every previous generation of hackers has won. false https://talks.toorcon.net/toorcamp-2026/talk/37GEJ8/ https://talks.toorcon.net/toorcamp-2026/talk/37GEJ8/feedback/ Prime Dome Music / DJ Set 2026-06-27T11:50:00-07:00 11:50 00:10 The Toorcamp Pride Parade! Wear your proudest gear, bring your proudest flag, we will have temporary tattoos and body paint! As usual, it will begin above the Prime Dome, parade through camp, end with a group photo down at the end of the road near the Doe Bay Cafe, and have an after party at Beerocracy with beats, beverages (both alcoholic and non alcoholic), and our big gay selves! THIS IS A FAMILY FRIENDLY EVENT, all are welcome toorcamp-2026-383-the-toorcamp-pride-parade-start Talks - Prime Dome Tendy en false https://talks.toorcon.net/toorcamp-2026/talk/8YMXFE/ https://talks.toorcon.net/toorcamp-2026/talk/8YMXFE/feedback/ Prime Dome 50-Min Talk 2026-06-27T12:00:00-07:00 12:00 00:50 There’s been a push over the last twelve years to move web traffic off unencrypted HTTP to encrypted HTTPS, to protect the general public from dragnet surveillance, gaping assholes on public wifi, backhauls over unencrypted satellites, that kinda thing. HTTPS relies on a public key infrastructure to make sure only authorized servers have keys for specific websites. This public key infrastructure isn’t just a bunch of servers and vaults in datacenter cages around the world. It’s a social and political system operated and regulated by several parties with conflicting goals. We'll go over the high-level view (no math!) of how it works, various organizational failures and outcomes from these failures, and what we can do to make this system work better. toorcamp-2026-354-webpki-and-you Talks - Prime Dome Bryce en false https://talks.toorcon.net/toorcamp-2026/talk/B7HYFW/ https://talks.toorcon.net/toorcamp-2026/talk/B7HYFW/feedback/ Prime Dome 50-Min Talk 2026-06-27T13:00:00-07:00 13:00 00:50 The last two years represent a paradigm shift from AI as a "chat assistant" to an autonomous agentic workforce. Meanwhile, "vibe hacking" and prompt injection are rapidly evolving into machine-speed warfare driven by autonomous AI agents. As models continue their exponential parameter growth, threat actors are now leveraging agentic connectors for zero-click data exfiltration (AgentFlayer) and utilizing AI-orchestrated espionage campaigns (GTG-1002) that operate at speeds physically impossible for human defenders to counter. Furthermore, "semantic corruption" through disinformation networks, like Pravda, now target the models' internal logic by flooding and poisoning their training and retrieval data. This evolution is driven by persistent orchestration frameworks like GasTown and RalphWiggum, which move away from ephemeral sessions toward Git-backed work ledgers and the "GUPP" (Execute Immediately) principle. While these systems offer massive productivity gains, "vibe coding" builds software with intent rather than manual review. We have fundamentally expanded the attack surface while we have little visibility into the silent, machine-to-machine, exploitation of the "agent stack." This talk explores how these autonomous architectures have decoupled technical execution from human oversight, requiring a complete rethink of enterprise trust boundaries. [183] toorcamp-2026-389-architectures-of-autonomy-adversarial-orchestration-and-the-collapse-of-human-in-the-loop-security Talks - Prime Dome infosecanon en # High-Level Talk Outline - **The Death of the Chat Epoch**: Defining the shift from assistants to persistent agents. - **The Orchestration Stack**: How GasTown’s "Beads" ledger and RalphWiggum’s "Stop Hook" create recursive, autonomous execution loops. - **Zero-Click Exploitation**: Dissecting AgentFlayer—how indirect prompt injection triggers silent data harvesting via cloud connectors. - **Autonomous Adversaries**: Analysis of the GTG-1002 espionage lifecycle and AkiraBot’s industrialized spam generation. - **Semantic Corruption**: The Pravda network and the rise of LLM grooming. - **The Defensive Pivot**: Moving toward "Hard Boundaries," agentic auditing (Augustus), and trajectory-level risk assessment. false https://talks.toorcon.net/toorcamp-2026/talk/CQDHLQ/ https://talks.toorcon.net/toorcamp-2026/talk/CQDHLQ/feedback/ Prime Dome 50-Min Talk 2026-06-27T14:00:00-07:00 14:00 00:50 As humans, things have gotten pretty weird. What does the world look like when difficult work is increasingly delegated to machines that have no sense of ego? What does crime look like? How can organizations structure themselves to survive in these sorts of rapidly shifting environments, and how can these tools empower individuals and the communities they care about? toorcamp-2026-402-working-the-slop-mines Talks - Prime Dome /media/toorcamp-2026/submissions/VK9RN3/slop-mines_qGTFKCZ_NWjJNfA.webp Dean Pierce en This talk is going to cover a lot of SDLC hardening protips for creating development pipelines that can withstand firehoses of generative AI slop from all angles. From devs, from ops, from users, from bug bounty programs, and even from executives. Not by rejecting the slop, but by harnessing slop energy and riding it to new heights. I also fully intend to go off on wild futurist tangents related to autonomous incentive structures, using zero knowledge execution proofs to accelerate bug triage / feature development, and what human computer interaction looks like in a world where people can just do things, and access to technology approaches the asymptote. false https://talks.toorcon.net/toorcamp-2026/talk/VK9RN3/ https://talks.toorcon.net/toorcamp-2026/talk/VK9RN3/feedback/ Prime Dome 20-Min Talk 2026-06-27T15:00:00-07:00 15:00 00:20 This talk introduces, demonstrates, and explains the construction methodology of Andromeda; A command and control (C2) / implant framework that leverages large language models (LLMs) to dynamically instantiate position implicit byte code as a means of performing dynamic remote functionality execution. The implant works by transmitting a dynamically constructed collection of offsets to instrumented native library functions (along with some basic system metadata) to the C2. The C2 is an LLM agent that leverages a large collection of `AI skills` to take instructions from an operator in plain verbiage, before subsequently using it's skills collection to dynamically construct byte code designed to satisfy the operator's request. This byte code is then transmitted downstream to the implant instances that in turn execute the byte code in a continuous execution cycle. In the presentation, the novel-ness of this approach will be presented as an iteration on earlier capabilities (such as Metasploit's "Rail-Gun"), as well as the pros vs cons of transferring elements of runtime complexity (such as behavioral obfuscation) to the C2 vs the Implant, as is more typical in C2/Implant frameworks. toorcamp-2026-422-presenting-the-andromeda-strain Talks - Prime Dome Vyrus en false https://talks.toorcon.net/toorcamp-2026/talk/3ZCJ3A/ https://talks.toorcon.net/toorcamp-2026/talk/3ZCJ3A/feedback/ Prime Dome 20-Min Talk 2026-06-27T15:30:00-07:00 15:30 00:20 I used to do emergency telecommunications for the United Nations. The satellite link, the field network, the thing the medics and the logisticians and the press and everyone else needs before they can do anything at all. Ebola response in West Africa. The earthquake in Haiti. Puerto Rico after Maria. The work was triage in the literal sense: not enough bandwidth, not enough power, not enough time, who gets the link first. Then I left to do [stuff] at a token factory. People ask why. There's usually an unspoken second half to the question still hanging in the air. This talk is the long version of the answer. toorcamp-2026-421-the-other-disaster-from-ebola-camps-to-a-token-factory Talks - Prime Dome Dustin en It's about what the job actually looks like from where I sit. A model that found zero-days in every major operating system, and a hard argument about who gets to use it. A company that got blacklisted by the Pentagon for refusing to enable mass surveillance and autonomous weapons. A fleet of agents I built to do my own job, which got good at it faster than I expected, which is how I know the timeline to a weird future is shorter than most people think. It's about a few of the things that scare me: the cyber capability that could have been handed to everyone with a grudge and a GPU, the mass surveillance infrastructure that someone is going to build unless enough people refuse, and the checks on concentrated power that are supposed to catch all of this and are not, currently, ready. And it's about leverage. This camp has more of it than it thinks: people who can build defenses and give them away, people who can refuse to build the bad thing, people who can show up when nobody else understands what's being bought. I want to spend the last part of the talk arguing about what to do with it. I used to arrive after the disaster. I would like, just once, to get ahead of one. true https://talks.toorcon.net/toorcamp-2026/talk/7YV3SD/ https://talks.toorcon.net/toorcamp-2026/talk/7YV3SD/feedback/ Prime Dome 20-Min Talk 2026-06-27T16:00:00-07:00 16:00 00:20 Many of us enjoy a peek behind the curtains to see how things are made. Unfortunately, if we aren't one of those specialists, we rarely get the chance. Come listen to a real-world story of how SalusaSecondus designed a new cryptographic construction (FLOE) and proved it secure. The focus of this talk isn't the details of cryptography, but instead an opportunity to hear the considerations and strategies of a less common engineering practice. toorcamp-2026-391-crypto-engineering-in-practice Talks - Prime Dome SalusaSecondus en false https://talks.toorcon.net/toorcamp-2026/talk/8XA9ZL/ https://talks.toorcon.net/toorcamp-2026/talk/8XA9ZL/feedback/ Prime Dome 20-Min Talk 2026-06-27T16:30:00-07:00 16:30 00:20 This talk covers how we brought home automation into our chicken coop — from building an automated door to adding sensors that monitor feed and drinking water — all powered by an ESP32 microcontroller running ESPHome. toorcamp-2026-394-diy-smart-chicken-coop Talks - Prime Dome /media/toorcamp-2026/submissions/7LZ8EM/PXL_20241222_200746954.MP_Gu1Dz0a_yknMzyY.webp Sebastian Noackrosie en A few years ago we started with a stock automated chicken coop door. When it eventually failed, annoyed by the limitations and quality of cheap consumer IoT products, we engineered our own using an ESP32 microcontroller, Home Assistant, and ESPHome. We then added sensors for drinking water and feed levels, and have since iterated on several design choices. In this talk, we’d like to share our experience — what worked, what didn’t — and discuss the hardware, software, and mechanical aspects of the implementation. After this talk you should be able to recreate our design for your own coop. false https://talks.toorcon.net/toorcamp-2026/talk/7LZ8EM/ https://talks.toorcon.net/toorcamp-2026/talk/7LZ8EM/feedback/ Prime Dome 20-Min Talk 2026-06-27T17:00:00-07:00 17:00 00:20 Boy, things sure are bad! But as the line famously goes - "don't mourn, organize!" This talk is about getting involved and building community. You'll get an introduction to a variety of groups in the Puget Sound area that are working toward a future where we can all thrive, with pointers for the types of work each is doing and how you can help. Joining things can be intimidating, so we'll finish with some advice about what to expect when you're getting started and some basics on the dynamics of organizing. toorcamp-2026-386-the-time-is-now-the-person-is-you Talks - Prime Dome D en true https://talks.toorcon.net/toorcamp-2026/talk/RRZMSH/ https://talks.toorcon.net/toorcamp-2026/talk/RRZMSH/feedback/ Prime Dome 20-Min Talk 2026-06-27T17:30:00-07:00 17:30 00:20 TBA toorcamp-2026-427-closing-remarks Talks - Prime Dome David Hulton en false https://talks.toorcon.net/toorcamp-2026/talk/CM3Y8M/ https://talks.toorcon.net/toorcamp-2026/talk/CM3Y8M/feedback/ Yoga Studio Workshop 2026-06-27T11:00:00-07:00 11:00 01:30 Somewhere in a pharmacy right now, there's a lock protecting a drug cabinet. The lock stores every user code, privilege level, and active flag in plaintext on a NAND flash chip. No encryption. No MAC. No checksums. No TPM. Just raw bytes in a predictable layout, readable with a $30 programmer and a clip. In this workshop, you'll learn to decode that layout by hand. We'll work through real NAND dumps extracted from Alarm Lock Trilogy T3 units; the same locks deployed across healthcare, government, and financial facilities in the US. You'll learn how to identify page boundaries (hint: look for 0xFD), decode 6-digit user codes stored as interleaved ASCII nibbles with a delightful quirk where zero is encoded as “B”, parse permission flags to determine who has master access, and spot the forensic artifacts that indicate flash tampering (like the "Power Up Complete, Data Restored From Flash Memory" audit entry that appears after injection). Along the way, I'll explain the lazy write model that makes all of this possible: the MSP430 microcontroller only commits volatile RAM to NAND on battery removal or low-voltage interrupt, creating a window where the flash doesn't reflect the lock's current state. We'll also look at what happens when you inject malformed data: some edits will show injected codes in its "Print Users" output (using the vendor's older and less used infrared printer) but silently omit them from "Export Users” in DL-Windows (the vendor audit software used on a computer), creating a stealth window where printed and digital records disagree. No soldering required. Bring a laptop with a hex editor (HxD, wxHexEditor, or whatever you prefer). I'll provide printed reference sheets with the full NAND page layout and sample binary dumps to work through. If time permits and curiosity demands, I'll have a T48 universal programmer and a lock board on hand for a live read/write demo. You'll leave knowing how to read embedded flash memory from a class of devices that assumed nobody would bother, and take part in showing that assumption is a security failure. toorcamp-2026-366-dead-bytes-tell-no-lies-hands-on-nand-flash-decoding-for-access-control-locks Workshops - Yoga Studio /media/toorcamp-2026/submissions/DFW8YP/20241002_205355_sUn3MO7_1p3c1Po.webp qweary en Workshop structure (approximate): **0:00-0:15 — Context and architecture.** Brief overview of the Alarm Lock T3 hardware: MSP430F2418 microcontroller, Adesto AT45DB041E SPI flash (4 Mbit, 264-byte pages), and the lazy write model. Why NAND is the target (it stores the secrets, it's physically accessible, and it has zero protection). How to connect to it with a universal programmer and SOP8 test clip. **0:15-0:50 — Hands-on decoding.** Participants work through provided binary dumps using hex editors and the printed reference sheet. Exercises include: locating the FD page header and identifying page boundaries; extracting the first, second, and third bytes of user codes from their interleaved positions; converting encoded bytes back to decimal codes (accounting for the B-for-zero quirk); reading active/inactive status flags; identifying permission levels (F1=Master, E1=Elevated, C1=Supervisor, 01=Normal); and comparing a "normal" dump against a dump with injected elevated privileges to spot the differences. **0:50-1:10 — Forensic artifacts and attack scenarios.** Examining what audits actually show (and hide) when NAND data is manipulated. The "Print Users vs. Export Users" discrepancy. The "Code Audit After Unexpected Values" artifact where 300 user entries turn into a garbled mess. Discussion of the discarded lock scenario: recovering credentials from disposed hardware, code reuse across sites, and the insider threat implications. **1:10-1:30 — Live demo and Q&A.** If conditions allow, live NAND read from a lock board using the T48 programmer. Walkthrough of the dump in real time. Open discussion of remediation (encrypt the flash, authenticate writes, establish hardware disposal protocols) and how this methodology applies to other MSP430 + NAND-based embedded systems. Skill level: Comfortable reading hexadecimal. No prior hardware hacking experience needed. Prior experience with hex editors is helpful but not required — we'll cover the basics. Materials provided: Printed NAND page layout reference sheets, sample .BIN dumps on USB drives (or downloadable from the GitHub repository), and a decode walkthrough guide. Repository with all dumps and documentation: https://github.com/Qweary/T2-T3-Lock-Exploitation-Research false https://talks.toorcon.net/toorcamp-2026/talk/DFW8YP/ https://talks.toorcon.net/toorcamp-2026/talk/DFW8YP/feedback/ Yoga Studio Workshop 2026-06-27T13:30:00-07:00 13:30 01:30 Learn the basics of the hardware and software / source code needed to drive animated LED strips and matrices. Interested folk can walk away with a working kit, ready to be used or modified. We shall demystify the art and craft of custom programmed LED animations. toorcamp-2026-410-red-green-and-blue-and-so-can-you Workshops - Yoga Studio /media/toorcamp-2026/submissions/JDG8DU/Pentaphilia-cnw17_PSVbijM_K2WhGs8.webp Trevor Schrock - spacemeat en Animated RGB LEDs are becoming ubiquitous. And yet, getting started can be an overload. We'll talk about the hardware, controllers, and software options to crack open the exciting field of lightenblinken. We'll go beyond WLED and get into what can really be done with very cheap, capable hardware and a little bit of brain grease. Have a laptop handy, because real code will be part of this work--though you don't have to be an expert. Kits will be available (in limited supply; no soldering required) and photons will be shot right out of diodes at your command. Some familiarity with code will be helpful, as will the Arduino IDE. We'll mostly focus on ESP32, but the basics can be made to work on most microcontrollers. Even if it's intimidating, come learn how it's done (or at least, how I do it). false https://talks.toorcon.net/toorcamp-2026/talk/JDG8DU/ https://talks.toorcon.net/toorcamp-2026/talk/JDG8DU/feedback/ Yoga Studio Workshop 2026-06-27T15:30:00-07:00 15:30 02:00 Breaking into binary exploitation can feel overwhelming — the tools are unfamiliar, the concepts are low-level, and it's hard to know where to start. This hands-on workshop cuts through the noise and gets you exploiting real binaries from minute one using Binary Jiu-Jitsu, a gamified learning platform built specifically for the journey from zero to hacker. About the Workshop: Binary Jiu-Jitsu is a multiplayer RPG-style cybersecurity learning platform designed to teach binary exploitation and reverse engineering through structured, hands-on challenges. Rather than passive lectures, participants progress through a belt-ranked challenge system where each solved vulnerability unlocks new techniques and territory. The platform is built around the belief that exploitation is a skill — and like any discipline worth mastering, it's best learned by doing. In this workshop, attendees will be guided through their first real exploitation challenges, covering foundational concepts like memory layout, the call stack, and hijacking program control flow. Challenges are dynamically generated and sandboxed, so every participant works in their own environment without interference. By the end of this session, attendees will have: * Hands-on experience exploiting their first binary vulnerabilities * A mental model for how programs behave at the memory level * Access to the Binary Jiu-Jitsu platform to continue training after the workshop Whether you've never opened a debugger or just want a structured path forward, this workshop meets you where you are. Come ready to break things. toorcamp-2026-357-binary-jiujitsu-white-belt-fundamentals Workshops - Yoga Studio /media/toorcamp-2026/submissions/RZCCZB/bjj_logo_P95fUUi_tIzHfAw.webp Joshua Connolly en Binary Jiujitsu is an RPG style training platform developed to help ease hackers into the complicated and overwhelming world of binary exploitation and reverse engineering. The White Belt Fundamentals workshop is geared towards introducing players to the game environment and guiding them through their first binary exploit. false https://talks.toorcon.net/toorcamp-2026/talk/RZCCZB/ https://talks.toorcon.net/toorcamp-2026/talk/RZCCZB/feedback/ Yoga Studio Music / DJ Set 2026-06-27T22:00:00-07:00 22:00 04:00 Keith Myers has an incredible night planned for us all with some great music and guest DJs. toorcamp-2026-429-saturday-night-party-w-keith-myers-and-friends Music David Hulton en false https://talks.toorcon.net/toorcamp-2026/talk/VBTVEX/ https://talks.toorcon.net/toorcamp-2026/talk/VBTVEX/feedback/ Yoga Studio Front Lawn 20-Min Talk 2026-06-27T11:00:00-07:00 11:00 00:20 Invented by Nate Bezanson at Notacon 2 in Cleveland in 2005, this game is the ultimate test of hacker ingenuity. https://wiki.toorcamp.org/AnythingButEthernet toorcamp-2026-447-anything-but-ethernet Workshops - Picnic Tables (Outside Yoga Studio) Ben Kurtz en Too many kids, and a fair share of old farts, think the world runs on cat-5. It just ain't so! From the first smoke-signals and drumbeats of prehistory, to modern multi-gigabit optical links, there's a lot more to communication than just Ethernet frames riding twisted pair. This contest aims to celebrate the long and varied history of communication. false https://talks.toorcon.net/toorcamp-2026/talk/9VPQ87/ https://talks.toorcon.net/toorcamp-2026/talk/9VPQ87/feedback/ Yoga Studio Front Lawn Music / DJ Set 2026-06-27T19:00:00-07:00 19:00 01:00 A danceable journey through connections related to geek, sci-fi, and hacker culture. toorcamp-2026-390-nerd-culture-in-dance-music Music noise en There is a plenty of cross-pollination in nerdy subcultures, and plenty of musicians have brought their own geeky interests into the beats that they create. From samples of Star Trek episodes, remixes of movie themes, or directly singing about hacking culture, there are scores of examples of all varieties of nerd culture being expressed as dance music. This is a danceable exploration of some of these themes. Partly video games, partly songs about digital interfaces, some acknowledgement of meme culture, and certainly sci-fi references- all done with a groove that makes you want to move around. false https://talks.toorcon.net/toorcamp-2026/talk/EZVX7V/ https://talks.toorcon.net/toorcamp-2026/talk/EZVX7V/feedback/ Yoga Studio Front Lawn Music / DJ Set 2026-06-27T20:00:00-07:00 20:00 01:00 Matrix is adj toorcamp-2026-373-music Music mattrix en DJ mattrix false https://talks.toorcon.net/toorcamp-2026/talk/KGUFZ3/ https://talks.toorcon.net/toorcamp-2026/talk/KGUFZ3/feedback/ Yoga Studio Front Lawn Music / DJ Set 2026-06-27T21:00:00-07:00 21:00 01:00 bash explode will perform his latest album LOVE+FEAR+HATE Vol.1 in it's entirety. Post-hardcore + Nu metal + Cybergrind + Dubstep = bash explode. toorcamp-2026-380-bash-explode-love-fear-hate-live-set Music bash explode en 🤘😤 false https://talks.toorcon.net/toorcamp-2026/talk/LQC9K3/ https://talks.toorcon.net/toorcamp-2026/talk/LQC9K3/feedback/ Volleyball Court - NightMrkt After Dark Workshop 2026-06-27T08:00:00-07:00 08:00 03:00 It turns out that it's roughly 11-13 miles to run from Doe Bay to the top of Mt. Constitution and back so let’s do it! There is no set course, so everyone is encouraged to plan a route ahead of time-- although here's the most direct route according to Strava (11.42mi / 3020ft gain): https://www.strava.com/routes/3237629479105980898. Take a selfie when you get to the top and post to #bladerunners on discord as your proof of making it and in front of the TOORCAMP sign at the Prime Dome when you return to register your finish time. The run kicks off at 8am sharp from the volleyball court. We encourage everyone to bring ample hydration and fuel. toorcamp-2026-433-blade-runners-the-toorcamp-trail-half-marathon Workshops - NightMrkt / Volleyball Court David Hulton en false https://talks.toorcon.net/toorcamp-2026/talk/SXQQCE/ https://talks.toorcon.net/toorcamp-2026/talk/SXQQCE/feedback/ Volleyball Court - NightMrkt After Dark 20-Min Talk 2026-06-27T16:00:00-07:00 16:00 00:30 li-nk is a social platform for planning and discovering activities and events. Members create and propose activities organized by interest, then connect with others who want to join. li-nk is actively developed and worked on signficantly through the #tcombinator at toorcamp 24' Interests range widely, including outdoor adventures, arts, technology, sports, food, wellness, learning, games, and community causes. li-nk grew out of a simple observation on Orcas Island and across the Salish Sea. People often live near one another and care about the same things, yet never cross paths. Rather than organizing around follower counts or feeds, li-nk starts with the activity itself, so community forms among the people who show up. The guiding idea is easy to remember: develop your interests, *find* your community!! li-nk has strong geographical capabilities to help find activities currently across the USA, strong privacy controls. Custom E2EE encrypted video, voice , and messaging implementation supported through the olm / megolm encryption protocols. Li-nk currently provides an android client through a Google Play internal testing track and is waiting for Apple to approve a developer account to publish an iOS release. Curious individuals may try the demo at [demo.li-nk.social](http://demo.li-nk.social), no signup required, or learn more at [li-nk.social](http://li-nk.social). li-nk contributes back to OSS projects which it employs at https://github.com/li-nkSN . Notable contributions include: the Zoned UID feature to the Open ZFS kernel supporting rootless containers employing the OpenZFS filesystem; A greater than 60% reduction in compilation times for the ProtoQuill integrated query library; Improvments to the Caliban GraphQL library including GraphQL Spec conformance and serialization helpers. li-nk is dedicated to MrPrim8 (RIP) who ran a 2600 chapter in HS in SWFL in the 90s. Moved to Seattle metro in the 00s. Was part of the Seattle 2600 scene. And lead developer (PNWsoft) of the ConnectU platform developed at Harvard University counterpoint to "The Facebook" . In many ways, MrPrim8 was remarkably mature in his twenties. Growing up with MrPrim8 I really looked up to his integrety and values. I believe li-nk is a platform Winston would be proud of. toorcamp-2026-412-li-nk-develop-your-interests-find-your-community Workshops - NightMrkt / Volleyball Court Colin Williams en With only 20 minutes there's quite a few directions we could go. Our OSS contributions. The provenance of li-nk and our motivations for developing it. Etc. Feel free to leave comments on what you want to hear about on the event page !! https://li-nk.social/e/li-nk-discover-your-interests-find-your-community false https://talks.toorcon.net/toorcamp-2026/talk/EWSGJZ/ https://talks.toorcon.net/toorcamp-2026/talk/EWSGJZ/feedback/ Hardware Hacking Stage Workshop 2026-06-27T11:30:00-07:00 11:30 01:30 Learn rapid prototyping and build your own open-source, internet-controlled LED art! In this class, you will solder and assemble an adorable, squishy "Purrsheen" Wi-Fi lamp. Once built, you'll learn how to control your new glowing cat baby via Wi-Fi or Home Assistant using WLED. For beginners! https://retia.io/toorcamp toorcamp-2026-448-solder-your-very-own-iot-purrsheen-cat-lamp-with-wled-soldering Workshops - Hardware Hacking Stage Kody Kinzie en Learn rapid prototyping and build your own open-source, internet-controlled LED art! In this class, you will solder and assemble an adorable, squishy "Purrsheen" Wi-Fi lamp. Once built, you'll learn how to control your new glowing cat baby via Wi-Fi or Home Assistant using WLED. For beginners! https://retia.io/toorcamp false https://talks.toorcon.net/toorcamp-2026/talk/L8JNN3/ https://talks.toorcon.net/toorcamp-2026/talk/L8JNN3/feedback/ Hardware Hacking Stage Workshop 2026-06-27T13:30:00-07:00 13:30 01:30 This informal hands-on workshop is about turning my talk "Shipspotting - An Introduction to AIS" into action. There will be two independent topics to explore: 1) Setting up your own AIS receiving station with an RTL-SDR or a specialized AIS receiver. 2) Decoding and processing live AIS data streams with Python I will bring a few AIS receivers and antennas, and there will be a live AIS data stream of local ship traffic over wired or wireless network. While anyone is welcome to shoulder-surf, hands-on participants should bring a laptop. If you want to setup your own AIS receiving station, bring an RTL-SDR dongle (optional). I recommend to install AIS-catcher ahead of time to placate the internet gods: https://jvde-github.github.io/AIS-catcher-docs/installation/overview/ I will bring binaries for Windows, but installation for Linux and MacOS requires an internet connection. To hack on the live AIS data, only Python is required. I recommend to pip install the Python packages aiscat, pyais, matplotlib and sqlite3. toorcamp-2026-432-ais-hacking-session Workshops - Hardware Hacking Stage Adrian Studer en false https://talks.toorcon.net/toorcamp-2026/talk/AJQ7V7/ https://talks.toorcon.net/toorcamp-2026/talk/AJQ7V7/feedback/ Hardware Hacking Stage Workshop 2026-06-27T15:00:00-07:00 15:00 01:30 Test out your soldering skills to create your own open-source, cat-themed hacking tool! In this class, we’ll create a microcontroller-powered hacking tool called the Wi-Fi Nugget that allows us to track down suspicious Wi-Fi devices, attack and defend networks, and even spoof drone signals! Beginners in this class will practice soldering while creating a cute and powerful IoT device in a beautiful 3d printed case! For intermediate soldering skills. https://retia.io/toorcamp toorcamp-2026-450-solder-your-own-cat-themed-wi-fi-hacking-tool-soldering Workshops - Hardware Hacking Stage Kody Kinzie en Test out your soldering skills to create your own open-source, cat-themed hacking tool! In this class, we’ll create a microcontroller-powered hacking tool called the Wi-Fi Nugget that allows us to track down suspicious Wi-Fi devices, attack and defend networks, and even spoof drone signals! Beginners in this class will practice soldering while creating a cute and powerful IoT device in a beautiful 3d printed case! For intermediate soldering skills. https://retia.io/toorcamp false https://talks.toorcon.net/toorcamp-2026/talk/UNPADC/ https://talks.toorcon.net/toorcamp-2026/talk/UNPADC/feedback/ OlyMEGA Village Workshop 2026-06-27T13:00:00-07:00 13:00 02:00 Intro to sewing - Learn the basics In the cabin 4 people at a time. Teen or older. @ OlyMEGA Village toorcamp-2026-442-intro-to-sewing-workshop Workshops - Villages Angela Livermore en Intro to sewing - Learn the basics In the cabin 4 people at a time. Teen or older. @ OlyMEGA Village false https://talks.toorcon.net/toorcamp-2026/talk/7EGMWT/ https://talks.toorcon.net/toorcamp-2026/talk/7EGMWT/feedback/ OlyMEGA Village Workshop 2026-06-27T15:00:00-07:00 15:00 03:00 OlyMEGA brought a laser engraver / cutter, vinyl cutter, 3-D printer' and other tools. Bring your own SVGs, images, and ideas and work with an Olymegan to burn or cut them into whatever material you choose. We will provide boards or vinyl sheets if you need them. First come first served. We can actively work with around three people at a time. @ OlyMEGA Village toorcamp-2026-445-makerspace-open-house Workshops - Villages Curtis Mack en OlyMEGA brought a laser engraver / cutter, vinyl cutter, 3-D printer' and other tools. Bring your own SVGs, images, and ideas and work with an Olymegan to burn or cut them into whatever material you choose. We will provide boards or vinyl sheets if you need them. First come first served. We can actively work with around three people at a time. @ OlyMEGA Village false https://talks.toorcon.net/toorcamp-2026/talk/7997EE/ https://talks.toorcon.net/toorcamp-2026/talk/7997EE/feedback/