start	end	text
4140	15100	Okay, so we're starting on time. And this is... let's see if I can do this... multiple cameras.
16420	20980	So this is the... can you guess in this hour?
26280	33650	This is the badge clinic. You almost can read that.
35430	39210	So what will we talk about in this hour? We'll talk about badges.
40070	41950	These things here.
45870	51590	Yeah, so we'll probably see what they can... what we can do with this year's badge because it's
51590	56790	kind of a storage device. So we can use it for backup and some other interesting things.
56790	60430	Because it's an office hour, there is no set agenda.
61530	65670	So we'll probably jump around a bit from different topics.
67030	74410	And I will watch the... keep my eyes on the general text and the office text channels in case...
75230	77630	in case there are some questions.
79490	86550	Okay, so I guess you can see that this year's badge looks a little different than last year's badge.
87330	93890	They're about the same size. This year we have no LEDs and no power supply. There's no battery
93890	99330	inside this year. In place of that, we have a fine leather finish on the back
100650	107650	with a plastic enclosure and a full color front overlay. And I'm just curious
110290	120140	if audio is okay. I don't know which channel to type to. There's all these channels.
120140	127400	Okay, so I'm not going to make any changes unless somebody tells me. So
128560	132700	one of the things you can see in this year's badge, even though it does have
134620	140910	a front overlay that usually covers all of the parts with color plastic is PET.
142140	144930	So instead of seeing this, which is a PCB,
146250	153850	you see this, which is a cover over a front overlay, full color printed. And in order to
153850	158910	see these very small chips, which we thought would be interesting for all of the hardware
158910	166630	hackers among us, we put in these transparent windows. All right, so let's take a look
166630	169850	under the microscope at these transparent windows.
171910	183770	Because I'm curious as well what this looks like. So this is the raw PCB with a
183770	191190	EEPROM integrated circuit on top there, soldered in. And when we take a look at the
194410	197190	color overlay, okay, this is going to need
199430	206530	focusing and less illumination. Yeah, you can't see too well, can you?
207630	219570	I guess because the light needs to be just right. Let's turn the light on again.
219570	226390	Okay, so my experiment didn't work that well, but these are the EEPROMs that are
226390	233710	storing our data this year. All right, so take a look at the channels, and it seems
233710	239710	that video and audio is okay. So we'll do a quick demonstration on how
242110	251570	we can write to these storage locations. All right, so that's with and without the
251570	259130	front overlay. And to write to this, the antenna is on the back. So we're going to
259130	266430	need to align the antenna from the back with a reader device, which typically is a
266430	275030	smartphone. All right, in order to use the radio, to be able to use NFC, you have to
275030	281630	turn the phone on, and it has to be at some accessible screen for the users, right? So
281630	286610	it can't be turned off. That's the first thing you need to do in order to use the
286610	292990	badge over radio. The next thing, you have to ensure that the NFC circuit is turned
292990	301670	on. And that's right here. I can turn it off. And you need to have that turned on.
301670	308310	All right, so those are the two things that you need. And after that, if you have nothing
308310	317150	else happening, aside from what do we have? We have Discord and the Chrome browser running
317150	325630	on my phone. So something should happen if I have programmed something to this device.
326130	333570	And I align the antenna of the badge device to the phone. So I'm going to push the middle button
333570	347130	there. And it brings up a web browser that's telling me that the data stored on this button,
348790	355050	and in case you're curious, this is what the URL is on all of the middle buttons.
357920	362220	All right, so that's reading data off of the device, off of the badge,
362220	367860	this year's electronic badge, without really doing anything at all. This is right out of the box.
369160	376020	What does the box look like? It looks like this. I don't know if this is so interesting,
376020	382940	we'll do the unboxing. So you get a... so actually, this is a wrong manual for this box, but
384580	392940	we got this excellent manual by Andres. And in some part, I discovered this just on my own.
393120	400960	Let's see if we can... in fact, on the printed manual, his name isn't on here. Oh, yes, it is.
400960	408900	In fact, there it is. So it's not so... so it's not so anonymous. I'm glad that he put his name
408900	417460	on there. I thought he hadn't. So that comes in the box. Obviously, the different parts for a
417460	422560	do-it-yourself model, you have to put it yourself together. You have to put... do it yourself,
422560	427980	put it together. So the parts that do come assembled are all the very difficult things.
427980	436060	That's these dome switches, which if you get three of them and you lose one,
436060	440880	then you don't have enough. If you don't lose all three, you still have to align them perfectly well
440880	447380	over the circuits and then place tape on top without anything moving more than a half millimeter.
447380	452840	So it's just kind of messy and uncomfortable. On top of everything else, we knew that we would
452840	457760	have to pre-assemble some of the parts anyway, because these EEPROMs, which we have already seen
457760	465160	under the microscope, they're only two by three millimeters wide and they're one half millimeter
465160	471840	tall also. So they're very, very small. That's why we're pre-assembling at least some of the parts
472820	479760	which come in the do-it-yourself kit. All right. So that's what comes in the box. And after you
479760	491210	take that out, you have something like this. You put it together, put the leather on the back,
491530	497530	the color overlay on the front, and then you can start programming and doing just the same thing
499310	506690	that I showed before. I will do that just once more in case you didn't completely see it.
506690	513350	This time, there's nothing on the front. This time I'm going to show the action from the back.
513350	519350	I'm going to align it over the antenna. I'm going to push down. Did you hear that?
521930	527550	So that's how it sounds. And when I look at the front, well, it opened a web browser. Okay. Now
527550	535210	I've got a whole bunch of web browsers. Yeah. Okay. So that's the reading right out of the box.
535210	541290	Okay. Because we did pre... we programmed some of these identifiers onto these devices. There are
541290	548430	three EEPROMs. And on each EEPROM, you have a variety of different slots, depending on how
548430	555270	data, because they do have different capacities, these three EEPROMs. The first two are 512 bytes,
555270	560210	and the last one is eight kilobytes. So depending on how much is there,
560210	566990	you can do quite a lot of things. In fact, let's try using this program called NFC Tools.
568770	574410	And I'm going to add several records. I'll try to do this very fast. Let's do
577050	589470	Monero Village. Oops. Monero Village. I'm not spelling too well today.
592630	600050	All right. We've got Monero Village. I'll put another URL on there for a pop quiz later on.
602750	615590	Monero Devices. We'll put... we'll put a piece of text. We'll say this is...
616590	628890	we'll just say DEF CON... DEF CON 28 safe mode. Do you like that? Okay. So we have some text.
628890	634210	What else should we put on there? Somebody give me an idea. Here, take a look at all of these
634210	642940	things. I'll help you choose. Quite a lot of different types of information, isn't it?
643440	651700	Each one of these conforms with the NDEF standard. So that's what goes on NFC data storage.
651800	657320	Every single one has a MIME type, which it's hiding from you because it's not a comfortable
657320	665300	way to store information. It just tells you, okay, an address and there's a MIME type associated with
665300	675640	this. So let's just say Iceland. That's a place, isn't it? I think so. All right. So that's a place.
675640	682460	We'll add another one. We'll add a file link. I don't know how... I've never done file link. I
682460	692920	don't know how that works. So let's do application. What's an easy one here? Email is really easy.
693560	711170	We can do email. Info at MoneroDevices.com. And object. Oh, okay. It seems that
711650	721950	that should say subject, shouldn't it? Dumb subject. I don't know why it says object there.
722350	726830	And here we'll just type hello world. So we're putting an entire email,
727470	733890	the headers and the body, hello email, I guess. So we've got all of these different pieces of data.
733890	739110	Do you folks see that? I mean, I could keep going, right? I could... what's more options?
740390	746710	So I could keep going and we would have 20, 30, 50 pieces of data here. And we can rearrange them.
747110	754450	And what I wanted to show is that there are two URLs. So which one do you think will open a website?
756190	763870	I mean, it's going to open a website if I write this to a village badge. And then let's do that
763870	772070	now. Let's write. So now it's saying approach NFC tag. Do you see that? This is all quite
772070	781050	self-evident, I think. So I'll turn the phone over. I'll align the badge onto the phone's
781050	786970	antenna on the back. This time I will use the star button. Shall I do that?
788710	793850	All right. So it's saying approach NFC tag. And now I'm going to click on the star.
798090	801970	All right. Maybe you heard that. And it does say write complete.
802910	805830	So what will happen now? If I close this application...
808750	814790	Do I want to close this? Not really. Let's see what happens if I don't close it.
814790	821230	So we're at the home screen, I suppose you call this. And I will,
821230	825450	instead of clicking the second button, the moon there, I will click the star.
829570	831990	So it does bring up a website.
834310	837400	Monerovillage.org. Oh, I think it's... I think...
839150	845950	I didn't use encryption. I just wrote HTTP, I think. Is that what it's complaining about?
845950	851450	No. Monerovillage. What's wrong with this? I don't understand the problem.
851450	857230	Okay. So here is a URI. Maybe it's because www is not correct.
858290	861710	The point is that the web browser opened.
863850	868230	Certificate date is invalid. Okay. So it seems that we have some problem with our website.
868230	871750	It doesn't matter too much. What's important is that this badge
871750	875710	opened automatically a website that we have programmed in by ourself
878430	882710	onto this device, right? We can try this again.
883350	889710	Looking back at the list of pieces of data, what happens now if I rearrange this?
889710	893930	If this URI replaces the first one? Let's do that now, shall we?
893950	898750	So I'm going to use the star again, but this is a different badge.
900990	910380	So put that on the back there. And I will click...
910950	935460	Why isn't it working yet? Could it be that another...
935460	941280	So this is not working, is it? Let's try this one again. Let's try this one.
946860	951160	So this time it worked. Not sure what happened with that other badge.
953260	962260	And the test is to see what happens now when I use that one button and it will bring up a website.
962400	969500	Okay, so that's the correct website now that we looked at, that we got before, right?
969500	979220	So that's kind of the workflow of programming these and using them for day-to-day data storage.
980040	985860	Right? MoneroVillage.com. Is that what AJ is saying?
987160	991060	I thought it was .org. Have I been typing the wrong thing?
992620	996340	All right, so AJ, sorry, I have to do this.
998760	1005020	This is my screen and it looks quite good. Oh, but okay, that's German. I'm sorry about that.
1005700	1012840	No, you're right. So I've been typing org all these days and you're saying that I have to type
1012840	1021600	com there? Then do I get a certificate? And it still says it's not secure.
1025310	1031730	All right, so this is not the right time to troubleshoot and debug the website.
1034520	1038720	But we did, however, we did just have a demonstration
1043520	1051360	of how to program and use these badges on a day-to-day basis. So I can show you our application
1052880	1059640	or homepage, I suppose you could call it, for this year's Village badge. How do I do that?
1059640	1073790	I have to go back to this web browser. And because we were spending most of our time on the
1073790	1086920	hardware, the software interface or the website, in other words, some of the parts are working
1086920	1098160	and others aren't. So this is bobmonerodevices.com. This is with a good certificate.
1098760	1103300	Okay, that's German, but it says a good certificate is fine. So we have two different
1103300	1108880	menus here, one at the top that can toggle left to right, and one that goes up to down.
1109800	1113360	And we've got some actions. I mean, this is a standard web application, right? We're not
1113360	1122020	trying to make a whole operating system here. But the typical things like the about page,
1122020	1126620	I guess this is good enough. It has all the information that you might expect.
1127600	1131920	We have the welcome page there, which gives you an idea that you can use the badge
1131920	1138640	on Android or iOS, because those two devices are smartphones with NFC circuits inside,
1138640	1143380	and that NFC tools is the application that works.
1144440	1149820	There's a few other things that work as well, like the game. I'll just click on game there on
1149820	1158100	the left. It takes a bit to load. So we teamed up, Monero Village teamed up with the Rogues Village
1158100	1167460	and a few others as well. And they programmed a game which works with the badge. I haven't got
1167460	1173920	that far myself, but you can see there's a few people who have made it to the end. And
1174660	1179080	the one thing that I don't like, if you just left click on the play button,
1179080	1186020	so there's a cross side scripting problem, which it's not a problem. It's how the website is
1186020	1197440	intended to work, but it's called CORS, C-O-R-S. And what you have to do is click on the right,
1198940	1201480	and I mean, you can choose any of these things. I'm just saying,
1201480	1204740	if I choose this, you won't see it. It's going to a different tab.
1206180	1211860	All right. So what I'm going to do is copy the URL and then put it up here to show you
1211860	1219340	what the game looks like. And this is the Rogues adventure game. There's a bunch of
1219340	1226360	things to read about it here, but we will just kind of start playing. And although I haven't
1226360	1231300	made it too far, according to our colleagues at the Rogue Village,
1231300	1237600	it's about halfway through that you can use your electronic badge with this game.
1239640	1242720	So I'll just type some random thing here.
1246880	1251540	And so I'm not going to do this too long, but I'd like to give you some idea of how it works. So
1251540	1258520	you can go down the stairs. I think there's something to look at here. Look at fossils.
1260300	1269180	You get the idea, right? So this is kind of fun. Now, how do I go backwards?
1270880	1278440	Oh, I can indeed change the tabs. All right. So that's one of the things that is working.
1278440	1282880	Some other easy to implement things are working, like the gallery. I mean,
1282880	1288420	this is not very valuable, but if you're interested in what the red one looks like,
1288420	1294120	there it is. These are the different colors. And you've got the DIY to do it yourself. That's why
1294120	1299400	there's no plastic enclosures. And you've got the different parts that you put together yourself.
1300360	1307020	This is the wonderful user manual that Andres created for us. It's really nice.
1307840	1311920	And this is kind of our experiment with the packaging, which we failed at last year. And
1311920	1316160	this year we did pretty well, but we went overboard with that. So that's the gallery.
1316160	1322840	We've got a file server where you can download the glossy color user manual. Well, it's not
1322840	1329640	glossy. I don't know. Maybe I should take that off. It's not printed on paper when you download
1329640	1335700	it electronically. So there's no gloss or matte finish. But you can get copies of either one.
1336260	1341320	I'm not sure what happens if I click there, if it even works. You see, it does work.
1342140	1347020	So there's Andres' design and all of the illustrations. Really wonderful work.
1347740	1353360	So I'll go back and you can tell that the file server is working. We've got status,
1353360	1356260	which is kind of halfway accurate. It just says there,
1356260	1361800	application is undergoing development, which is true. We've got a top 10 FAQ.
1361800	1368720	So I explained already why the playing of the game fails when you click on it.
1368780	1373700	Which villages are participating? So none of this is all too exciting. What we actually
1373700	1378800	really want, we start at the beginning here again. What we actually really want is here
1378800	1384020	at the configure. No, I'm sorry, not the configure, but at the onboard. This is where it's going to
1384020	1393700	get exciting because although it's not fully implemented to actually write the NDEF identifiers
1393700	1400080	and pieces of data over radio. So we want to implement those things here and the way it will
1400080	1408340	work. So you put your name here, any name at all. You could write, you could change the gender and
1408980	1419180	geography. You can write you're some dead person. You could write, I am Alfred Nobel.
1421000	1426740	So Alfred Nobel is no longer with us. What I'm just saying is that you can create a pseudonym
1426740	1433260	here. All right. It's a nickname. After you put that in, you check off the things that you're
1433260	1441160	interested in. So I like IOT. I like rogues a lot. And while that's too many, maybe I want
1441160	1446080	biohacking as well. I won't be able to get them all on there because I'm programming the
1446080	1451380	very small EEPROM. So I need to take some off. You get the idea. So I'm just going to be interested
1451380	1457780	in this one round, rogues, Monero and biohacking. We'll click on associate me. And this is where
1457780	1464480	it starts to not work. So even if I click on there, it's kind of these are not my choices.
1465140	1470060	Yeah, you can see that this is still in prototype mode. So these are not my choices.
1472280	1479120	But eventually we'll be able to write data or cancel. And it will start waiting for you to
1479120	1484960	attach a badge or put a badge next to the antenna on the phone. If I want to do a factory reset,
1484960	1492660	I can do that as well. And that's how this association and onboarding
1494540	1499900	functionality will work. Once you have your identifiers on the EEPROMs all lined up like
1499900	1505040	you'd like, you might want red team on the third EEPROM, you might want biohacking on the
1505680	1511200	second one and crypto privacy and Monero you'll want maybe on the first one, whatever it is,
1511200	1518720	you line these up and you write them to your badge. You can then use the intervillage network.
1519320	1524720	Right. And although this looks okay, actually does look like it works. So it says here under
1524720	1530420	development, please stay tuned. So it's not working yet. Okay. In the end, you can connect
1530420	1536060	to the intervillage badge network by clicking on connect. You can do a ping just to test the
1536060	1542340	network connection. If you need to authenticate, because for example, some of the village rooms
1542340	1549020	or channels or topics are protected, maybe they would like to know who walks in through their
1549020	1556000	doors, then you can authenticate. And if you don't need to, then you just skip that opcode or
1556000	1564720	network code. You can turn on the bridge. I think the bridge will be activated by this command,
1564720	1570380	safe mode, which basically means we're going to do a proxy from the MQTT network,
1570380	1576960	which is what we're connected to here, to the DEF CON discord. I mean, this is kind of
1576960	1583300	not relevant because they're probably going to turn off the DEF CON discord tomorrow. So there
1583300	1589820	won't be much time to use it, but that's there just maybe for another day next year. So we can
1589820	1594940	knock on one of the participating village's doors. We can knock on Monero's door.
1597040	1601160	And if we don't get a response, we can knock again. And maybe on the third knock,
1601160	1606020	we're automatically allowed to enter. There can be some logic like that.
1606080	1613140	Once we're inside, we can tip using AJ's tip arrow, but one, two, four units.
1614200	1619620	And once we're inside, we can get information about our room. Maybe we're walking in
1619820	1624800	the biohacking room for the first time, and we didn't realize that there is a device program
1624800	1629940	there, medical device program. We'd like to know more about the room that we walked in. We click
1629940	1635300	on info. We can leave the room just as easily with the leave command and disconnect from the
1635300	1642040	network with disconnect. All right. So that's kind of the rundown of the web application,
1642040	1647420	which is under development. If we look at status, it says that clearly, application under development.
1648120	1655000	Anybody who wants to help develop this, let me see how to...
1658160	1664360	All right. So there is a URL to show. I've written it down some other place,
1664360	1668740	but I'll never be able to find it. So I'll just reuse this piece of paper.
1668740	1683180	Is everything going okay, AJ? So if you'd like to help to develop all of this web application
1683180	1689640	logic, which is quite challenging, it's just tedious, lots of troubleshooting, firebug, and
1690460	1697080	debugging, you can do a fork of the repository because it's all open source.
1697080	1720090	The repository is found here. So this one is certainly calm. I know that because we don't
1720090	1728860	have org. And we have a certificate. Everything's okay here. SCM stands for source code management.
1729750	1735470	And if you do go there, then you can find all of our source code. Shall we take a look? Or are
1735470	1742010	there questions about something else, some other topic? General text, office text. I don't see
1742010	1747070	questions. So what we'll do, we'll take a look at the source code management system.
1747710	1758510	How do I get back to that? Here it is. Okay, so now we will choose instead of BoB,
1761360	1773720	let's go to SCM, shall we? And the nice thing about SCM is that it takes quite a long,
1773720	1785800	long time to load because it's a very slow virtual server.
1786620	1792660	VPS, virtual private server. All right. But in any case, we see that something did come up here.
1793040	1798680	So instead of explaining all of these things and clicking through each one, which is a very
1798680	1805900	slow process, I will just go right to apparatus, which is Esperanto for devices.
1808180	1816520	And then we have a list of the different types of devices. Badges is here.
1817520	1821700	And in the list of badges, we should see a few different things. And there is Monero
1821700	1832000	Rising, Iron Triangle, which is the parent project of this derivative, the bush of being.
1832000	1835090	And I think I should rename this, but the bush of being is the
1837980	1844680	intervillage badge. So I just clicked on that. Let's navigate over to where the web application
1846660	1857870	is found. It's under software. So there's a bit of things to read about here. The storyline,
1857870	1865250	hardware, network. It's not up to date, but I think it's good enough explaining a few things.
1865250	1869470	So right here in software, that's because it's obviously not hardware, graphics,
1869470	1874110	enclosure, or documents. So if we have a web application, it's going to be listed under
1874110	1879710	software. So I click there. We've got the website. So we may see other things here
1880430	1888130	under software. We may have, you know, Android APK, not the APK itself, but the source code
1888130	1894250	that builds the APK and whatever it's called for the Apple. I'm going to click on website.
1894250	1899490	And then most people who are familiar with websites, you see the traditional CSS,
1899490	1909410	the HTML5 and JavaScript CSS arrangement. So we've got documents. This is where Andres'
1911630	1918050	user manuals are located inside the actual sources. And then we've got a few things. I
1918050	1924230	think font awesome is in here as well. A few things like that. So here's the index. I don't
1924230	1931150	think anything else is all that interesting. I'll just click on index to see what that looks like.
1931930	1937830	And we're not going to drill down too deep, but this very last level is just kind of maybe
1938610	1945230	interesting for some reason. This is all the source code. Oh, my. And it's just not interesting
1945230	1955050	at all. Okay. So we do have some snippets. And you can navigate through this SCM source
1955050	1959430	code management on your own because it is public site. You can fork, pull, and
1961130	1973020	fetch sources. You can do merge requests. And I certainly hope that you do as well,
1973020	1978300	because we could use a help. I mean, there's few of us doing work on this. So that's why
1978300	1986000	we're kind of behind on things like the web application. So AJ says it all is good. I'm
1986000	1993200	happy about that. We have another 20 minutes or so. What should I do now? So yesterday,
1993200	2001600	what I said I would demonstrate was the impersonation is going to be a bit difficult,
2001600	2008680	but I said I would demonstrate a passive capture. It's not data theft, because these are my own
2008680	2015720	devices. So it's like opening the drawers to your shirt drawer. You're not stealing your
2015720	2022080	shirts when you do that in your own house, right? So that's why I can take my own data
2022080	2028040	and everything is just fine. If you do this without your own data, it's just not okay at all.
2028160	2036600	So what I have here is a very nice box of chocolates. I wish the light was a bit better.
2039180	2043000	I'm going to try to adjust the lights a bit. I'm not sure if that helps.
2047420	2051360	I don't know if that helps. So I've got a nice box of chocolate here.
2052420	2058720	And first thing what I will do is prepare this, because I forgot to turn something on.
2059000	2065680	All right, and that's the other camera angle. That's about the size of the box of chocolates.
2069030	2075970	And that's the way a box of chocolate sounds, isn't it? I don't know if you heard that. So
2075970	2082030	remove this cover. Open this up. What do you think is inside? You want to take a guess?
2083930	2089470	No, you don't want to guess? I'll show you. Okay, so that's these chocolates are inside.
2094310	2096950	No, no, they're definitely chocolates.
2099010	2111830	All right. Okay, so I've eaten almost all of them. I'm sorry, I didn't leave any for you.
2116830	2127710	So what do you think will happen once we put this lid on the chocolate again?
2129510	2136470	And let me just do that. I should have prepared this beforehand. Sorry about that.
2139500	2146300	All right, so we've got the box of chocolates. I'm now going to place... let me just do this
2146980	2156320	a different way. I'm going to place a library card on the box of chocolates.
2156320	2160960	The contrast is very bad because it's a blue library card and blue chocolates. I'm
2160960	2168760	sorry about that. I couldn't change the colors quickly. All right, so here's a library card.
2170900	2177620	And I'm just going to drop that on there. Not sure if you heard that. If you didn't,
2177620	2188740	I will put my microphone next to that box of chocolates. So I think you heard it that time.
2190000	2195980	What I just did is capture data off of my library card. All right, so here I'm looking at the data
2195980	2201980	now because if this wasn't my own data, and if it was a credit card instead of a library card,
2201980	2209060	or say a passport, I'm not sure what types of cards and devices have this kind of circuit inside.
2209060	2215760	But this one, as we can see, is a MyFair. So it's an ISO 14443. This is an RFID standard.
2216320	2221160	And we just captured the data, right? The good news is that it's encrypted.
2221160	2227980	You can tell that because it's got an ATQA and an SAK. But the serial number is there and you can
2228720	2237520	certainly see some things, right? So what is this number? ISO 14443. Let's just do one more thing.
2239160	2243180	How shall I do this? I'm going to capture the data off of my
2243180	2248300	InterVillage badge now. And I will demonstrate that
2250280	2254460	it's very difficult to trick your InterVillage badge in the same manner
2256260	2262840	for one reason, because it has passive data theft protection built in. All right, so this is the
2262840	2269640	screen. You can see that it's empty. I'm now going to try to capture the data in the same way.
2269640	2275780	And just dropping it on there, it does nothing. It's impossible to capture the data. All right,
2275780	2281140	I'm going to align the antenna. There is no problem. The device is perfectly well aligned
2281140	2286520	on top of the turned on smartphone, which is capturing right now. It's reading.
2287160	2296440	The reason that it does not successfully capture the data passively in this manner,
2296440	2302780	would be known as theft, is that I have not pushed on one of the three buttons. And once I do that,
2302780	2308540	as long as the screen is still turned on, once I do that, we should hear it capture.
2308760	2319100	So let me go back here. All right, so I think you heard that. It did capture something as I
2319100	2324000	was pushing down on there. Let's see what it captured. So I got all the data off of my
2324000	2331100	intervillage badge, that thing. And the good news about that, so it's a different ISO standard. If
2331100	2337520	we want to use the ISO 14443, like the library card was, and I just need to use
2339460	2348880	a different button, right, because we have 15693 on these two, and the sun is a 14443 standard,
2348880	2355260	which is my fair. So we can basically copy the data off of this library card
2355800	2360700	onto this badge. All right, it is encrypted, which makes it more difficult, but some
2360700	2367980	library cards are not encrypted. So some of the things to understand about that, it did
2367980	2375000	successfully copy the data or capture it, right? If this is a box of chocolates that's unopened,
2375000	2379640	you would not know that this is happening. And you can do this with a number of daily objects
2379640	2389380	like magazines, newspapers, you can embed a reader into a table itself at a coffee shop.
2389380	2395220	I think you understand the point. So today and tomorrow, yesterday and forever, there are
2398260	2404100	people stealing data, and we wouldn't know it. And that's what makes it important to have a
2404100	2411400	sense of, not a sense, to have a technical circuit built in which disconnects the antenna
2412300	2418880	when you're not pushing on this. When a human is not pushing on one of the three buttons,
2419540	2426560	this antenna is not connected to the ICs, the integrated circuits, which are storing the data.
2427020	2432200	And what that means is that it's nearly impossible, it could possibly, it might not be
2432200	2437420	impossible, I just don't want to say that, but it's very difficult, it's very, very difficult
2438740	2443820	to capture data off of these things unless you're pushing on a button. And what I call that is
2444840	2451200	defense of passive data theft. Is that what you call it too? Need money? Are you watching?
2452060	2457380	All right, so we just demonstrated the passive data theft protection.
2458340	2467180	And we demonstrated the writing of information. We demonstrated the passive capture of a library
2467180	2476680	card. We demonstrated the difficulty of copying encrypted information. And we saw a nice chocolate
2476680	2484880	box demonstration. And what else do we have? So there are a variety. What I like to experiment
2484880	2495300	with are these types of transit cards are quite often, they either have a copper smart card
2497780	2502340	integrated circuit, or they have an antenna inside, you can't see it then.
2503100	2507100	And here's one, for example, with an antenna inside.
2507100	2511820	How about this? Let's do another test. I will turn on this smartphone again.
2517440	2521380	So we'll get this working again. And we've got this turned on. Remember, it's always very
2521380	2526720	important to have your screen turned on. Otherwise, the NFC circuit, a lot of the radios don't work.
2527060	2531360	All right, so this is an empty screen. There is no data on the screen. We're now going to
2534400	2543120	passively copy data off of a transit card. Shall we do that? All right, so I'll just drop it on there.
2543860	2547420	And if you heard that, it's already, it's too late.
2547420	2555140	If I was not the owner, then I would have just lost the information. So what we have here,
2555140	2560700	this is an interesting memory model. It's a MIFARE again. So you would see the 14443.
2561260	2568480	Has a serial number, it has memory information. So this is quite interesting.
2570680	2578540	On the pro model, it dumps the memory. On this one, it doesn't.
2579380	2583340	But in any case, so we just captured the data from a transit card.
2584880	2589560	All right, so that's how that works. What else can we demonstrate?
2592290	2599510	You can take a quick look at what the devices look like from start to finish.
2602680	2611460	During the manufacturing. So the manufacturing starts with a etched circuit board like this.
2612800	2618440	Get the light a bit better. The light's not...
2621940	2627320	Yeah, the lighting is just not very good. But so I'm not happy about that. And then there's a
2627320	2633240	shadow if I do that. Okay, so this is the PCB or printed circuit board. And if you take a quick
2633240	2643010	look, there are no parts on there. You can see the three different footprints.
2645050	2652810	U1, U2, U3. There's no switches on the switch. SW1, SW2, SW3.
2654890	2661210	So that's how we start. The other side needs to be flush and straight. So we don't have parts on
2661210	2666670	at all. Because it needs to be right up against the reader device in some situations.
2666750	2676770	So we begin by populating parts on this side. So I'm going to show a different PCB now.
2676770	2682490	There they are side by side. And the one doesn't have parts and this one does. Okay,
2682490	2688630	so what does that look like? After we populate the PCB with switches, with EPROMs, with integrated
2688630	2697230	circuits, that's what it looks like then. There we go, focused. So we've got the three switches
2697230	2703270	on there. We've got a piece of Kapton tape on top to keep them in place. And then we've got
2703270	2711870	our EPROMs. Two of which are holding data in NDEF type 4. I'm sorry, NDEF type 5. And the last one,
2712550	2720830	U3, is holding data in the format of NDEF type 4. That's my fair one. All right, now the other
2720830	2726230	side is just the same. Because like I said before, in some cases, we need this antenna to be right up
2726230	2734550	against the reading device. And for this reason, we can't put parts there. And the next step in
2734550	2741190	the procedure to populate or to create these devices and assemble them is to place an overlay
2741190	2747250	on the front and a piece of leather on the back for protection. All right, so what does that look
2747250	2756140	like? The overlays look like this. So that's what it's like when... I'll just use one here.
2757300	2764360	So that's what it looks like when we have placed the overlay, which has an adhesive
2765440	2770580	back on it. Peel the adhesive back on and put the overlays on. And you can see that through
2770580	2774560	the overlay, there are windows, transparent windows that show you the parts underneath
2774560	2782200	the small chips. The other side of the badge, because we're going to be... so this is hard
2782200	2787380	to see because it's black, but in this case, it's red. This is where we differentiate the
2787380	2794480	colors in the villages. Monero obviously has an orange one. And the reason that leather is on
2795020	2800980	so that when you put this against the phone, that it's not scratching your lens.
2801220	2805860	Okay, so there's a functional purpose for this leather. Most people think that it's
2805860	2811600	decorational. I mean, it does feel good, but it's actually there to protect the lens of your
2811600	2816460	reading device, which is usually a smartphone. All right, so that's the front and the back.
2816460	2821760	And once we do that, all we need to do to finish the device is to put it inside a
2822980	2829620	enclosure frame. The reason this has two stripes is that they come out of the printer like this.
2829620	2837780	It needs supports in between those two protruding pieces of the model. And that's why we put some
2837780	2846060	supports in between. And one problem that we found is that every 10th badge that we assemble,
2846060	2854160	we break the frame on it. So that's one reason we're not enclosing frames with the do-it-yourself
2854160	2859680	models, because it would just be too much of a... we would need to supply two, three,
2859680	2865360	four frames for each badge to make sure to ensure that the person didn't break it.
2865980	2869640	All right, so that frame goes on the edge of the badge, as you can imagine.
2870560	2875560	And it covers part of the leather to keep that on, and the edge is no longer...
2877080	2880980	well, let me... I mean, this doesn't look good when you don't have...
2881900	2886160	when you don't have that plastic on. You can see the different layers.
2886660	2890740	So that's kind of a decorational thing. I do suppose that if you drop the badge,
2890740	2896320	that the plastic frame does help a bit there as well. So you could call it a protectional feature.
2897100	2904500	All right, so that's... I just realized that I forgot to record this. I'm supposed to record...
2905140	2911460	okay, now it's too late. We're five minutes or 10 minutes away from the end. Okay, I forgot. Sorry.
2912480	2920680	Right, so this is what happens when you fully create the badge. We have some black ones,
2920680	2927570	which are called... the model number is called Black Matter. Black Matter. More narrow orange.
2929560	2938020	We've got some Attack Red. Red on the back and on the front. We've got Defense Blue.
2939580	2942300	The Defense Blue is quite nice. It's very translucent.
2944200	2948320	You can see right through the plastic in some areas.
2948320	2955280	This is what's so nice about SLA stereolithography. It's much more difficult to get a FDM or Fused
2955280	2962240	Deposition Modeling process translucent. Anyway, so these are all the colors. I think there's a
2962240	2968840	green one as well. And then we have some unique village colors. Let me show a couple of those.
2968840	2977400	This one belongs to the Rogues Village. Colors do not... I don't know if maybe I can...
2978940	2984980	I think it's a lighting problem. In any case, this is blue. You can't tell that it's blue.
2985420	2991320	With a white frame. And they chose this because these are the colors of the Rogues Village.
2992380	2996060	They chose the symbols as well. We got a lot of help from the Rogues Village.
2996060	3000140	Really appreciate that. Thanks, folks, at the Rogues Village. This is the biohacking
3000660	3006040	color scheme that they chose and reserved for their village. Because in biohacking, they have
3006040	3012260	black and green. And so, as you can imagine, the front is the same on all of these.
3012400	3018340	Translucent green frame. You can really see through that, can't you? And the back is black.
3018340	3023740	So, I don't need to go through all of these because there are five or six different ones.
3024340	3029720	But that's kind of how they look. And so, with five minutes left,
3029720	3034460	I would just invite questions. And if there are no questions, we can either
3035960	3043500	finish early or I can maybe look for some more. Oh, I know what I forgot. I wrote this in the
3043500	3051860	description for this presentation. What I forgot is to show other badge types. So,
3051860	3059000	as a prototype, this is kind of how we were developing before we got far enough to release
3059000	3066360	the design. So, we have some wires soldered on there and extra button up here, which is a
3068240	3076040	different tactile strength. Here, these are 260 grams. And this one up here is only 130, I think.
3076040	3083900	And different parts. These are M24SRLR04. And the back looks very similar. So, this is a
3083900	3093120	prototype board. Here is the Monero Rising. This is quite nice. I soldered a header on there for the
3093820	3099020	SAO connection. And basically, how these work, it comes with a battery.
3100280	3107840	And you turn it on and off on the side here. And when you turn it on, it lights up.
3108300	3112540	Obviously, because there are a lot of LEDs on here. So, let's see what that looks like on the
3112540	3123040	front. Now, we'll turn it on. All right. So, that flash is a... it's kind of a negotiation. It says
3123040	3128820	I've turned on. It's indicating that the badge is ready for action. So, there are three capacitive
3128820	3132720	touch buttons on the bottom here. They're not tactile. They're capacitive touch, which means I
3132720	3142350	just lightly put my finger on the middle one to turn it on and off. So, now it's on. I have to be
3142350	3147790	careful when I'm using the buttons because they are very sensitive. So, pressing them from the
3147790	3153890	back is possible as well. Let's see if I can do that. Okay. It's not so easy, as easy as I thought.
3153890	3159350	But if I push the same button again, it turns it off. You understand how that works? Once it turns
3159350	3165350	it on, once turns it off. So, that's the on off button. The buttons to the side, left and right,
3165350	3169850	these change the animation. Some of you already know this because we've produced quite a lot of
3169850	3175970	these badges and a lot of people took them home last year. So, I will move to the second animation.
3180100	3183240	Here's the third animation. So, I can go back to the first.
3184500	3190520	And in all cases, when I switch the animation, I have to rest my finger on there long enough for
3190520	3197140	it to complete the entire animation cycle. If I just do a quick tap, it will not read. Okay. Well,
3197140	3203760	then it did, but you get the idea. Unless I'm touching that button at the very end,
3203760	3210140	it won't register. All right. So, that's how the animations work.
3210720	3215720	You can switch. You can turn this on and off with the middle. Turn it back on.
3217360	3223280	Turn it off. Turn it on. So, that's how these things work. The one that I like the most,
3223280	3228940	it's the very first one. I think it's starry night or sparkle. I can't remember the name.
3228940	3238200	These animations have names. Yeah. I wish Mitty Poet was here because he did the firmware design
3238200	3243240	and engineering and called these things what they look like, like the starry night.
3243240	3249460	And we're close to finished with the badge clinic for today, but I hope that some of this
3249460	3254940	information was helpful. Once again, I will turn it over just to show the back in case you're
3254940	3264790	curious. That's how it looks. I could put this under the microscope, but anything larger than
3264790	3272050	this very small part on the end under the microscope, it doesn't, you can't tell,
3272050	3279030	it doesn't help because the microscope is too powerful. So, this is what this badge looks like.
3279030	3285690	It has, I think, 100, between 120 and 140 parts. I've forgotten the actual number.
3286350	3291410	You turn it on and off with a switch on the right here. Be careful with this switch. You
3291410	3298750	don't want to push down while you're, it's good to be careful with it. It has bent off in some
3298750	3303270	situations and you have to bend it back. So, I'll just turn it off there. And that's the hardware on
3303270	3310910	off switch. All right. So, we're five minutes until the next presentation, which I believe is,
3310910	3320370	let's just check that out, unless AJ wants me to stop or I don't know if we have a next presenter.
3321210	3333360	Let's just check this out. MoneroVillage.org.com. I really, I don't know. I'm going to do org.
3333720	3340820	Okay. So, this is not TLS protected, but in this moment, I'm not so concerned.
3341380	3344340	So, let's see who's doing the next presentation.
3347800	3351960	We have Badge Clinic is what's happening right now.
3354160	3360680	And so, in one half hour, we're going to hear from Ruben.
3361880	3366040	Giving competition to Monero by ditching opt-in privacy.
3367880	3372380	All right. So, this looks very interesting. This appeals to me quite a lot.
3373080	3379020	It's always nice to know what other cryptocurrencies are doing and how that relates
3379020	3387240	and contrasts with our technology here at the Monero Village. And we actively welcome all the
3387240	3391940	cryptocurrencies in the world, including the one you just made five minutes ago with your Python
3391940	3400780	module, right? Your Python library. So, this is what we do at Monero Village, right?
3401340	3406120	Anything that's blockchain related, cryptocurrency, things like that, you're welcome to
3406920	3412900	ask questions about it or just come by and explain your project. We have that with Loki
3412900	3419180	Mesh as well today. Really interesting stuff. And in the next presentation, which is coming in just
3419180	3426820	one half hour, it will be from a Zcoin enthusiast and developer, I believe. So, that looks really
3426820	3433800	good. So, I'm going to say goodbye. And I hope that you liked all of these devices.
3433800	3442620	These badges, I think are sold out for the do-it-yourself models because people seem to
3442620	3448080	like those quite a lot. But I do have this stack right here, plus a few others of the
3448600	3457220	pre-assembled model. So, if you're interested in an attack red, a defense blue, you can get that.
3457220	3463120	I'll write the URL here as well, just in case you're not sure where to find them. And with
3463120	3477560	that, we will turn off the stream. So, the URL is shop.monerodevices.com. That's where you can
3477560	3489320	still get your badge. Does that sound good? Need money? Are you watching now? Are you watching,
3489320	3496760	Scott? Who's watching besides myself? All right. So, that's all for today. This was the badge
3496760	3503960	clinic, the last badge clinic of the year 2020. Well, you know, we could be in China for...
3504560	3511000	I'm not sure about that. They canceled China. But that was the badge clinic for DC28. And
3511540	3517240	thanks a lot to the AV folks for helping. AJS, you did a great job and Justin as well.
3517240	3526140	Okay. So, I will say goodbye. And that's it for me. My name is Michael. I'm MSVB.
3526400	3528180	Have a good one and thanks for listening.