[00:05.660 --> 00:09.130] Okay, I think things are okay now. [00:12.140 --> 00:21.840] Kind of okay, because I realize now that I forgot to change the title of this presentation from yesterday. [00:21.840 --> 00:27.840] Yesterday we did a presentation called Getting Started the Village Badge. [00:27.840 --> 00:33.240] And today it's called, what is it called? Today's the Badge Clinic. [00:33.680 --> 00:50.680] So this is, you know, a general purpose office hour style, ask questions and provide and share answers. Interactive. Okay, so I'm going to be checking in on the Monero. Let's see. [00:51.680 --> 00:58.420] On the Monero office text channel quite often. Okay, so it seems we have [00:59.540 --> 01:07.700] a visitor, AF3Arson there and I'll try to keep track of the general text channel as well, but [01:08.960 --> 01:15.680] maybe we should just have one channel next year. In any case, that's what the office hours channel is for now. [01:16.680 --> 01:20.320] And until any question or request comes in, [01:20.320 --> 01:28.000] I'll just go through some general purpose information. Does that work for you? Really? [01:28.820 --> 01:39.500] All right. I can't see anybody. Probably there's 3000 or maybe four people or one and a half people watching. I don't know. [01:40.640 --> 01:45.060] So we've got all of these badges here. We've got one from last year as well. [01:46.480 --> 01:49.000] Um, I don't have [01:50.460 --> 01:57.340] Yeah, I don't have from two years ago, the Becos badge, but we've got some other things to look at. We've got this. [01:57.600 --> 02:06.740] We've got this little thing here, kind of, this is, we may have some more advanced purpose, you know, for advanced people who have soldering skills and [02:07.560 --> 02:13.200] we can get into that, some impersonation, some copying of tags. [02:13.860 --> 02:16.220] And good news, folks, I have today. [02:17.520 --> 02:20.320] I have today a close circuit [02:22.140 --> 02:28.340] document. I'm sorry, a microscope. So we can take a look at some really small parts. [02:29.280 --> 02:32.040] Things like this little switch there. You see that? [02:33.680 --> 02:34.520] Right, so [02:35.560 --> 02:37.480] So we've got all of these options. [02:42.300 --> 02:45.120] So we've got all of these options is what I wanted to say. [02:45.920 --> 02:46.400] And [02:49.600 --> 02:52.880] Just checking the channels. [02:53.740 --> 02:56.360] I don't want that. [02:56.360 --> 02:58.220] No voice. [03:00.450 --> 03:03.930] This gets confusing. Okay, here's the right channel. [03:05.210 --> 03:16.210] All right, so these are the villages that are participating in the inter-village network project badge. [03:16.850 --> 03:28.830] And Monero is producing the hardware, Monero devices, in fact, that's a commercial group, a company, the biohacking village is involved, IoT as well. [03:28.890 --> 03:31.450] You have good friends there and the red team. [03:31.450 --> 03:32.530] Rogues Village [03:35.410 --> 03:46.630] produced a game. So if you look at the manual that comes with the badge. Let me just open that. It's so large that I can't even fit it on the camera. All right. Sorry about that. [03:46.650 --> 03:59.690] Here's another brought to you by just to kind of a reminder. And there's a few people not associated with villages who simply helped so much or provided and contributed things like artwork, legal advice. [04:01.990 --> 04:05.230] Materials. So that's why they're in there. [04:05.730 --> 04:13.570] It's maybe a good start to check out the manual. Each one of these blocks or pages describes something else. There's a quick start here. [04:14.210 --> 04:19.450] So whoever doesn't know what a badge looks like we can we can follow along this quick start. [04:20.630 --> 04:30.490] Yesterday I had Monero orange badges. Today I think I will change to the attack red style, if you don't mind. [04:30.490 --> 04:33.110] There's several colors. [04:34.490 --> 04:42.150] Right. So the one thing when you get started, before we get into the advanced portions. [04:42.790 --> 04:45.740] So you might have a phone like this. [04:46.480 --> 05:03.220] And you want to make sure that you're logged in. How do you even say that? If the screen is dark, if it's not active, if you can't use it actively, what's basically happening is asking, [05:03.860 --> 05:16.440] Are you a human? Do you have permissions to use this device? And if you haven't done your code or whatever you do to get in yet, then the NFC circuit will not accept any transmission. [05:16.440 --> 05:29.080] So you need to be inside the screen, you need to be able to swipe around and use your phone. Once you're inside, you need to make sure that your NFC circuit is turned on. [05:32.280 --> 05:37.400] And sometime today, maybe tomorrow, but probably today it may focus. [05:37.840 --> 05:40.360] Oh, goodness. Okay, folks. [05:41.940 --> 05:47.840] Camera is good enough. So anyway, you do maybe can tell that there's an NFC symbol there. [05:47.980 --> 05:58.300] There's an NFC symbol there and that needs to be turned on as well. So what are the situations where you cannot use your NFC powered badge is when it's turned off like this. [05:58.300 --> 06:06.780] When it's off, you're not able to use a phone, then nothing happens if I start pushing buttons and try to use the badge. Okay, you need to turn it on. [06:07.320 --> 06:08.840] Put your code in. [06:09.760 --> 06:16.240] And once you do that, at this time, you can use your badge. Let's see what happens. I'm quite curious. [06:16.720 --> 06:22.640] I'm going to push this moon button. Okay, you hear that button when you push that? [06:24.460 --> 06:29.680] So it's a tactile button. It gives you some feedback to tell you, yes, you pushed it. [06:30.340 --> 06:33.980] You idiot, you pushed the button. Okay, so [06:35.040 --> 06:46.180] I'm going to... Wow. Can you see my hands? That's from working on these badges. I got chemical injuries, chemical burns all over my hands from making the [06:46.760 --> 06:59.640] stupid badges. Alright, so that really zooms into the injuries. Anyway, I'm going to push on, I'm going to make sure it's turned on, and I'm going to push on the moon. And let's see what happens [07:01.220 --> 07:03.400] if I just do that correctly. [07:07.000 --> 07:08.280] Nothing happened. [07:08.720 --> 07:11.360] I was expecting it to go to the browser. [07:13.180 --> 07:15.600] Not sure what happens if I have the browser on. [07:18.060 --> 07:21.600] So that is surprising. Let's try another one. [07:21.900 --> 07:24.920] Maybe it doesn't have a URI programmed in. [07:25.920 --> 07:29.240] So let me push on this moon here. [07:36.810 --> 07:49.710] Yeah, okay, so I'm surprised. I thought that Android had a MIME type setup for URIs, that when it detects a URI, it opens the browser automatically. [07:50.930 --> 08:03.210] But it also could be that I have my NFC application turned on, so it's capturing all of the MIME actions. [08:03.510 --> 08:05.370] God, that's hard to push it. [08:07.450 --> 08:14.350] Oh, it also could be that I didn't program this one like a dummy. So let's try one that's programmed. [08:15.870 --> 08:18.010] That one's not programmed either. [08:24.530 --> 08:27.470] Okay, so now I'm finally... [08:29.710 --> 08:38.590] So let's just go back a bit. Now I'm finally reassured that my observation matches what I actually believe to be the case. When you have a badge, [08:39.110 --> 08:52.510] like this one, and you push a button on here, which is programmed with a URI, a Universal Resource Indicator, and that URI is a HTTP URI, right, then it will open your browser. [08:52.510 --> 09:04.230] Right, so you can see that I have this phone just to an empty page, and I'm going to push now on the moon button, which is per default out of the factory programmed with a URI. [09:06.030 --> 09:07.730] Gotta push that. [09:09.270 --> 09:18.790] Okay, opens the browser automatically to the URI that you programmed in. Okay, so the whole runaround about this is that the four [09:19.610 --> 09:35.890] suits, so that's the name of the group that is the team called Rogues Village. They created this game, and I've only gotten a few screens in, so I'm not a pro at this. I'm not in any shape to explain it. [09:35.890 --> 09:41.290] But the game works with this badge. All right, so that's the one thing. [09:41.810 --> 09:51.030] And you can see that, so we've kind of covered the quick start pretty well. You know, you have to push a button, and the thing needs to be turned on. [09:52.670 --> 10:00.370] On the last screen here, it kind of is telling you, okay, this is the URI. This is the one that's programmed into the badge. [10:01.010 --> 10:10.750] All right, so you can do all of these things using these two applications, and we hope that more people will develop applications or improve these. We can take a look at those in a minute. [10:10.750 --> 10:13.270] Let's see if there's any questions about that. [10:14.130 --> 10:15.630] Seems there isn't. [10:16.810 --> 10:19.990] Just wanted to make sure I haven't... [10:21.940 --> 10:27.700] Don't know. I guess that question, I guess there was a question, but it's crossed out, so... [10:29.280 --> 10:38.520] It's crossed out, so I must have answered it while speaking. All right, so what else can we look at in this manual? [10:38.520 --> 10:52.720] The Bill of Materials is okay if you kind of are experienced with hardware, but some of these things are understandable, like the faux leather, the leatherette, the PET plastic overlay is the thing on the front. [10:53.220 --> 11:03.000] For all of the different colors, it's the same overlay here. It's the DEF CON 28 color scheme with like a pastel green and some of these neon colors. [11:04.120 --> 11:24.250] Right, and the liquid photopolymer, that might be a bit confusing, but that's what creates these frame enclosures, right? They harden to standard rigid plastic when you shine a high intensity ultraviolet light into the liquid. [11:25.180 --> 11:32.900] Right, so that's just to answer a few questions. We can... Do you like the Gunther here? [11:33.000 --> 11:37.300] I'd like to know, Justin, do you like this Gunther? Say yes or no. [11:37.720 --> 11:45.480] I think he's wonderful. I mean this, this is a modern Gunther made specifically for us, [11:45.860 --> 11:55.600] contributed by Andres, who maybe he's watching. He's just one of the most wonderful illustrators in the world. And I mean, not just illustrators, but he created the [11:57.280 --> 12:00.880] design, the entire manual, pretty much. [12:00.880 --> 12:04.580] So I'm just astonished. [12:04.760 --> 12:16.960] Right, so we've got a big mix of a lot of different work from people like the Rogues Village, Monero Village, Monero Devices, me, Andres, a few other people that are mentioned on the front. [12:17.860 --> 12:20.760] And I just think it worked out very, very well. [12:23.140 --> 12:26.060] In any case, so that's the manual. [12:28.880 --> 12:37.200] Could you demo? Yes, that's a good idea. So we have a question. I'm going to read it out loud in case someone isn't on Discord. [12:37.380 --> 12:46.220] Could you demo the Bob Monero Devices Com app? I wasn't able to get any functionality to work, even using the links on the badge. [12:46.460 --> 12:48.740] Okay, so there's good news and bad news. [12:50.200 --> 12:52.420] Where is this headed, right? [12:52.580 --> 12:57.680] So the bad news is that the implementation is not finished yet, but we can take a look at it. [12:57.880 --> 13:07.990] Let's see, we can kind of try to understand the intention and figure out how to complete the implementation. [13:07.990 --> 13:12.990] All right, so village slides, camera, how do I go to... [13:14.610 --> 13:16.250] How do I go? [13:20.460 --> 13:23.420] I think this is it. Right. [13:24.240 --> 13:30.400] Okay, so yeah, exactly. I think, how can I, I'm not used to broadcasting. [13:31.560 --> 13:37.720] So if we have some, let me just go to some non-Monero page. [13:39.380 --> 13:57.940] Let's do Monero Village. These are the standard run of the URLs. The one that we're thinking of now that we want to reference, which is written in the manual as well. This is bob.monerodevices.com. Does anybody know what BOB stands for? [13:58.300 --> 14:06.280] I'll bet you don't. This time I'm not going to tell you. I'm just going to wait a whole hour until somebody comes up with the answer. BOB. [14:06.820 --> 14:18.540] All right, so I'm going to, I'm going to hit return there. And this is the front, the homepage for the intervillage badge, for this year's village badge. [14:19.040 --> 14:19.780] Okay. [14:20.320 --> 14:25.360] I wish we could have some camera at the same time. Messed that up a bit. [14:25.740 --> 14:32.220] So on the left, we've got all of these menu items, which we can toggle on and off. [14:32.220 --> 14:42.720] Obviously, this is just the beginning stuff, right? I know that, I know the thing that you're, you're probably wanting to see, but you can, you can kind of get [14:43.920 --> 14:57.340] informed as to the status of, okay, we can go to status as well, systems are in operation. But if we take a look at some of the more in depth things like the network, this is undergoing heavy development or go up here. [14:58.040 --> 15:11.700] And I think, okay, some of the actions, for example, expert mode, I'm hoping here that we can do some formatting of the NDEF EPROMs, things like that for experts only. So this mode, this is not yet implemented and [15:12.380 --> 15:21.340] keep checking back or develop it on your own and do a pull request and we'll get that done so that we can use these expert mode things with the badge. [15:21.340 --> 15:28.720] And then the status will probably write a better message than systems in operation will probably say, okay, expert mode is in operation now. [15:28.780 --> 15:38.900] All right, but this is very fundamental and very primitive at this time. So some of these buttons are there. But as you can see, they're not well aligned. This is going to be [15:43.700 --> 16:01.020] the entry point for programming your badge. If you don't want to use the NFC tools application. All right, the NFC tools application is very full feature. They've worked on it for years, three, four years, I think. So they have all of the functionality that you could wish for in the NFC tools application. [16:01.020 --> 16:20.140] And what we're doing here is trying to just very specifically implement the features that some of these villages, like for example, the biohacking village and Monero village might want to see in their badge in their, you know, inter-village badge. [16:20.460 --> 16:29.960] So, so I'll go back to that in just a minute, but I'd like to, I'd like to draw some things. [16:29.960 --> 16:40.140] So I'm going to get a new piece of paper to explain how this will look once, once we get it working as we want it to. [16:42.460 --> 16:44.900] Is this making sense to you? [16:45.400 --> 16:48.900] I don't know what this person... [16:49.380 --> 16:53.700] Interesting. There's no name attached to this. [16:53.700 --> 17:04.260] So if this is, if you have a specific question and you can ask it, but this is the, this is the Bob website. [17:04.400 --> 17:17.540] We're doing high tech slides today. So what you see here is really an elective paper thin e-paper electronic device, right? It has a battery connected. This is, this is really high tech folks. [17:17.540 --> 17:30.640] It only looks like paper. It's not really, it's really, it's, this is high, high tech. This is high tech. Okay. All right. So this is a Bob website slide. And you're seeing this created by me live. [17:30.920 --> 17:39.460] All right. So the Bob website, we took a look at it on the web browser before, and we've got the thing over there. [17:40.440 --> 17:42.940] This is a start. [17:43.900 --> 17:46.520] And this is network. [17:46.520 --> 17:53.540] The rest of them, this is status, help, and so on. We've got a few things up here, like expert mode. [17:56.760 --> 17:59.900] You read that okay? I think it's okay. So. [18:01.540 --> 18:05.580] So start is going to give you choices for... [18:05.580 --> 18:07.620] Maybe I should... [18:08.920 --> 18:13.000] Some of the fine things. So start is going to give you [18:17.260 --> 18:20.420] village choices. We've got Monero, we've got biohacking. [18:21.420 --> 18:24.160] We've got rogues, you get the idea. [18:26.840 --> 18:31.620] So I'm going to check off biohacking and Monero. Those are my two favorite. [18:33.020 --> 18:39.040] And at the bottom, then we're going to have three buttons, we're going to have... [18:40.880 --> 18:44.060] So this is kind of, this is approximate, right? [18:56.840 --> 19:01.220] I think you can read that. Can you read that Rerar? Is Rerar even here? [19:03.420 --> 19:09.660] What happens when you go to school and you miss your class Rerar? I think we'll have to take points off. [19:11.020 --> 19:19.460] So the whole idea of this start menu item is that this is where we're going to be able to write and read profiles. [19:19.460 --> 19:26.040] If we're unhappy with the factory default profile, which is really generic, it doesn't have any village [19:27.220 --> 19:31.500] identifiers at all. It's basically an FUD, [19:31.500 --> 19:35.760] which we can even see here. Let's quickly... [19:35.760 --> 19:40.620] This could be interesting. I'll take a better, better get a badge that's working. [19:40.680 --> 19:44.600] So I'm going to use the NFC tools application. [19:44.600 --> 19:51.840] And then I'm going to push the star button this time. All right, push the star button. [19:54.880 --> 20:01.520] All right, so here we have an FUD. FUD, what does that stand for, Justin? [20:01.660 --> 20:07.460] You don't know? AJS, do you know? Okay, FUD stands for [20:10.460 --> 20:14.400] Factory Unique Dentifier. All right. [20:15.140 --> 20:22.680] So FUI just doesn't do it for me. I needed FUD. And to do that, we need to call it Factory Unique Dentifier. [20:23.100 --> 20:32.940] All right, so that's what's programmed into most of these badges, except for the middle one, the moon, which comes out of the factory with the game. [20:36.580 --> 20:44.180] So if you look at the record zero there, the data, that's what's programmed into the moons. Okay. [20:44.220 --> 20:51.340] And if I didn't have this application running, then it would go right to the website. [20:51.340 --> 20:59.940] So let's keep that in mind. We can consider that when we're thinking of how this start menu works. [20:59.940 --> 21:07.160] So I click on read and the profile that comes up, it's going to say something like factory profile. [21:09.260 --> 21:19.960] With a FUD identifier. All right. Now what happens if we're not happy with this? We then check our villages, the ones that we like the most, we can check more than one, hopefully. [21:20.680 --> 21:27.540] And then click right, and this writes a new profile. [21:28.400 --> 21:37.420] All right, so after we click Monero and biohacking and click right, we will need to place the badge against the phone. [21:38.260 --> 21:50.620] Push one of the three buttons and your new profile will be written to the location in question, the one that you pushed. If you want to write a profile to the sun, you push the sun, you know what I mean. [21:50.620 --> 22:05.640] You could do the sun, you could do Monero alone, you could do moon for just Rogues Village alone, and the star could program Red Team, IoT, biohacking, and wireless. [22:05.880 --> 22:09.540] No, wait a minute, crypto privacy, they're kind of on board as well. [22:09.540 --> 22:25.060] All right, so that's the whole idea behind this custom tailored application. Kind of making it easier for you to hop on to the what? To the village, to the intervillage network. [22:25.280 --> 22:28.960] All right, so how's that going to work? I'm going to use a different page. [22:29.180 --> 22:31.920] Just check quickly for a Discord question. [22:32.800 --> 22:38.560] All right, so I'm going to go to a different page. This was explaining the start menu button. [22:39.300 --> 22:42.920] Now we're going to talk about the Bob website. [22:49.180 --> 22:53.480] And we'll focus on... [22:54.200 --> 22:57.840] Is this marker on paper working for you, Justin? [22:57.840 --> 23:01.360] Because this is, this is for you. [23:01.800 --> 23:04.180] So this is a website. [23:05.720 --> 23:08.900] And we've got start up here. [23:09.560 --> 23:12.980] And then we've got net. [23:12.980 --> 23:16.460] It actually says network, I think you get the idea. [23:16.760 --> 23:18.920] Now we've got a few more down here. [23:19.300 --> 23:22.740] All right, so this one is what we're talking about now. [23:23.260 --> 23:29.000] And let me see what it was. [23:29.720 --> 23:31.000] Oh, yeah. [23:31.120 --> 23:39.020] Okay, so according to my memory, because I don't have my notes, we're going to have a few different commands for the network. [23:39.020 --> 23:43.840] This is the backend network that connects the different villages that are participating. [23:44.040 --> 23:52.100] This may have a proxy, a bridge to Discord, to IRC, to some other networks like that, but really it's based on MQTT. [23:52.840 --> 24:01.260] So when everything is broken as, for example, I've heard, we heard from the PHV, the Packet Hacking Village that Discord is having some problems that they're working on. [24:01.260 --> 24:12.560] When all of the networks are broken and not working, as long as you have IP connectivity to our MQTT network, then these commands will still function. [24:13.120 --> 24:16.240] Right, the other things are just kind of bridges, which are optional. [24:17.500 --> 24:23.440] But for the village network, [24:26.280 --> 24:29.720] we will have these commands. We will have, [24:30.660 --> 24:32.720] first of all, [24:33.740 --> 24:34.900] sorry. [24:35.780 --> 24:38.960] Sorry. So first of all, we will have connect. [24:40.540 --> 24:53.860] This will simply do a ping out to the network. And if there is no return to the ping, it means that you're like, you're mobile and your battery's dead or, you know, you're in airplane mode, something like that. [24:53.860 --> 24:58.220] So we connect to the network. The next one will be authenticate. [24:59.000 --> 25:02.940] This is optional. Maybe some networks, I'm sorry, some [25:04.000 --> 25:13.900] channels or network topics are simply there for test purposes. You don't need to authenticate. So in some cases, you do need to authenticate. In others, you don't. [25:13.900 --> 25:20.240] I think authentication is maybe relevant when we need to have a unique user so that people can talk to each other. [25:20.240 --> 25:35.020] Just like modeled after IP itself, the internet protocol, right? Different nodes, computers, devices, objects on the internet protocol network. They can't talk to one another if they're not assigned a unique number, which is called IP number. [25:35.020 --> 25:44.060] So we'll have a similar thing here. In fact, that's why at the factory we program these factory unique identifiers. [25:45.040 --> 25:47.240] And once we, [25:47.240 --> 25:50.360] once we, so, [25:50.360 --> 25:52.560] so, let's see. [25:53.200 --> 26:09.840] So once we use the start and write our own unique identifiers, like we were big fans of biohacking, for example, so we use the biohacking write data, it will no longer be a factory unique identifier, it will then be a, [26:09.840 --> 26:13.380] starts with S, it will then be a [26:14.380 --> 26:15.340] sensitive, unique [26:16.760 --> 26:27.960] identifier, no, S-U-I, sensitive, unique identifier. Imagine that, we'll say the word as is it written in the dictionary. [26:28.220 --> 26:34.640] Alright, so the S-U-I will lead you to these numbers which you can authenticate with. [26:34.960 --> 26:36.720] Alright, so the third [26:37.560 --> 26:39.860] command will be knock. [26:44.300 --> 26:55.100] And this basically takes a parameter, an argument we want to knock on. I don't know how we're going to code these arguments, probably as buttons, because this is all HTML. [26:55.400 --> 27:00.280] But we'll probably be able to knock on the, what's a good village? [27:04.120 --> 27:06.140] Intrusion detection village. [27:07.160 --> 27:07.980] ID, [27:09.080 --> 27:12.720] IDV, which doesn't exist in safe mode this year. [27:12.720 --> 27:30.560] It's a good village to choose, isn't it. So we're going to knock on a village door, and assuming that they have not locked the door, or that the Discord channel is not set to close, then this automatically opens the door. So you kind of understand where this system is headed. [27:31.800 --> 27:36.680] This is what is commonly known as, let me just find it. [27:36.680 --> 27:38.320] It's on the other side. [27:38.320 --> 28:00.900] So this is what's commonly known as a village network story, kind of a gentle gamified step by step type of introduction to the intervillage network using badges. Okay, but this is not my decision where this is all headed. This could go anywhere, anybody can [28:01.920 --> 28:23.060] influence how this story appears. In fact, my original idea, folks, which we had to cancel because too few people were interested, was to make a kid's version, a kid's story, something like memory with, you know, dogs, cats, rock players, guitars, things that kids like. [28:23.060 --> 28:31.960] So there was a kid's story, which is slightly different than this, but made sense to those young hackers under 15. [28:31.960 --> 28:47.920] So if you're a hacker, that's only 8, 9, 10 years old, you should have a service from us that represents your interests. That's my opinion. Okay, so I was really interested in having a kid's story, which didn't work, so we'll probably get it done next year. [28:47.920 --> 29:01.300] But we had to cancel it for this year. And in this year's version, we just have these two. We have the Rogues Village game, and then we have the portal that allows you to choose profiles. [29:02.660 --> 29:14.020] Right, and so what comes after knock? What traditionally happens after you knock on a door, the door opens, because it's automatic, you know, no human is there, but you can go in the door. [29:14.020 --> 29:22.820] Or a human is standing there, you know, maybe the human wants to know what you want. They're saying, what's your name? Do you have permission to enter? These types of things. [29:22.960 --> 29:39.560] So any command that could follow here is kind of up to you and me. It's our imagination. And I'll tell you, it's quite a lot of fun to design and implement a whole new network using all of these opcodes, right? Especially if the job is easy, because you're limiting this to like a half dozen opcodes. [29:39.560 --> 29:48.480] And so I don't think it will be too difficult. But the bad news is, so that's the good news. The bad news is that this just isn't finished yet. [29:48.820 --> 29:56.140] Yeah, I was working until the last minute, soldering and pasting, adhering, creating these hardware devices. [29:56.440 --> 30:04.540] So that's why I didn't get to this. And the other people who said they would get to this kind of didn't either. So that's why it's not well... [30:04.540 --> 30:07.980] It is well designed, but it's not well tested. [30:07.980 --> 30:23.340] So the things that we have working, they're kind of in different pieces. And there is like, the checkboxes are on one page. And then there's a tab, which doesn't belong in this user interface. [30:23.340 --> 30:32.540] And the tab was giving us right. And then there's another place, which is a button for read. So that's why you're not seeing this because it's just too poorly organized. [30:32.540 --> 30:35.160] And the part that is well organized, [30:35.760 --> 30:38.840] which is on the website running right now. [30:39.160 --> 30:41.080] That's this thing here. [30:42.340 --> 30:45.280] There's a, there's a little bit of eye candy there [30:47.020 --> 30:47.620] from [30:49.720 --> 30:52.700] Andres, so it's really nice stuff. [30:53.180 --> 31:01.580] And this is the part that's well organized, you know, it's got fading in and out and things and illustrations. [31:01.880 --> 31:03.400] However, [31:03.400 --> 31:08.160] it doesn't have the functionality. So we've got to combine these things. Right. [31:08.600 --> 31:12.660] It might be worth, it might be worth mentioning. [31:14.940 --> 31:27.860] There is a connection here as well. You know, if you're interested in using a hardware badge, the one that actually is in circulation, there's a few different places you can find them and I think this is working. I'm actually not sure. [31:29.040 --> 31:30.580] Let's check this out. [31:31.210 --> 31:33.340] Alright, so that's hack five. [31:33.340 --> 31:37.240] That's the one place you can find the black badges. [31:40.240 --> 31:44.660] This is kind of testing in action, real time. [31:44.660 --> 31:55.240] Here is a Cypher market, the premier place for Monero merchandise, everything from shirts to stickers to badges. [31:55.240 --> 32:01.580] Alright, so here you can get more than just the black badges, you can receive, you can get all these these different colors. [32:02.160 --> 32:03.080] All right. [32:03.820 --> 32:08.480] And let's see what's the very last one is the factory store. [32:09.920 --> 32:12.360] How do I get to that. Okay, here. [32:12.420 --> 32:17.200] And this is a different yet a different store where you can find things like [32:19.480 --> 32:26.400] last year's Monero Ising badge, for example, I got a few of these done I think there's five or six which are ready to go. [32:26.700 --> 32:28.180] Not very many. [32:28.780 --> 32:46.960] And another thing that's maybe interesting because this is commonly confused I think it's only, and I couldn't convince other folks to carry this so this is the DIY the do it yourself version, which looks like this, it doesn't have a enclosure, and you have to put the parts together yourself. [32:46.960 --> 33:00.140] So it's much more inexpensive, and it gives you an option to really look at the circuits before the leather comes onto it, which can be an advantage. [33:00.760 --> 33:04.880] Right, so that's the only place to get the DIY badges. [33:05.240 --> 33:06.980] And that's up here. [33:07.680 --> 33:08.880] The. [33:09.280 --> 33:20.180] So because the start ops and the read write buttons are not connected to actual JavaScript which does those operations. [33:21.540 --> 33:26.800] We'll have to use NFC tools during this office hours during this badge clinic. [33:26.800 --> 33:32.280] What I also want to mention is that. [33:33.060 --> 33:37.300] Is it here, it's still not here. Unfortunately. [33:38.980 --> 33:41.200] Unfortunately, okay so. [33:45.680 --> 33:49.200] Yeah, so unfortunately, [33:50.600 --> 33:55.840] there is something you need to do in order to use phones with. [33:55.840 --> 34:01.080] I'm sorry not phones but websites with the village badge. [34:02.340 --> 34:11.620] The Chrome team had a program, I won't make it a long story, but a program that ended on July the 29th. [34:11.780 --> 34:17.560] Really nice guys right to end the program, the thing that we really need to use. [34:17.760 --> 34:29.420] On the 29th, could they not wait a week or two. No, they ended it on the 29th, which means that you need to do, you need to jump through hoops in order to use a web browser. [34:30.620 --> 34:34.760] With, with anything that's NFC powered. [34:36.720 --> 34:49.040] I can do this on the on the larger. So I will go through the steps now just, just in case it gets confusing later you do have this demonstration then. [34:49.040 --> 34:55.140] So this is going to be well documented here in the welcome part of the site. Okay. [34:55.680 --> 34:57.720] But the thing that you need to do. [34:57.720 --> 35:04.300] I thought I had this somewhere, but it caught me off guard that they ended the program on the 29th. [35:04.660 --> 35:15.760] So the first thing is unfortunately Firefox hasn't been able to make it work, and all the Apple things they've decided they don't like NFC at all in their websites. [35:16.380 --> 35:23.700] So, so this is Apple that I think it took them eight years to put an NFC circuit in their phones. [35:23.700 --> 35:31.900] So it might take them very, very long time folks I would not wait for Apple to actually start implementing the things that are available in Android today. [35:32.620 --> 35:36.840] So if you type on version, you can see what version of Chrome you're using. [35:37.840 --> 35:40.720] And what we really want is flags. [35:43.140 --> 35:45.280] Okay, do you see that URL there. [35:45.620 --> 35:47.360] Chrome flags at the top. [35:47.940 --> 35:51.360] Okay, this is all what this is in German I'm sorry about that. [35:51.960 --> 36:08.080] But it's clear enough because lots of stuff here is in English, so I'm just going to leave the German stuff up here basically says, be careful warning these are experimental features, only turn them off, only turn them on if you know what you're doing. [36:08.180 --> 36:15.060] So we're going to search for, I think it's called something platform. There it is. [36:15.060 --> 36:17.380] Alright, so I just had to search for platform. [36:17.440 --> 36:22.160] And there's a few things that come up, but the very first one. This one here. [36:23.020 --> 36:25.340] Experimental web platform features. [36:25.580 --> 36:34.040] So this is disabled, because in my case I'm using a computer, a big computer that has no NFC circuit. [36:34.160 --> 36:36.060] That's why I don't need this. [36:36.060 --> 36:39.520] But if I do enable this, just like this. [36:39.560 --> 36:44.900] And then I relaunch, I'm not going to relaunch folks but you know you understand that the procedure here. [36:45.080 --> 36:51.520] And this will be enabled and if it's on a running on a phone any device with an NFC circuit. [36:52.100 --> 37:01.940] That's when you can start to use NFC from your phone in a website, together with your intervillage badge. [37:01.980 --> 37:04.580] I hope I explained that well enough. [37:05.280 --> 37:08.700] I'm going to look and see if there's any questions about it. [37:10.280 --> 37:12.220] Seems there's not. [37:12.280 --> 37:14.920] Unless it's up here on general. [37:15.760 --> 37:18.240] Let me check the general text. [37:20.180 --> 37:28.060] Alright, so everything's fine. If you're watching and you kind of got the picture about this, where you're going to need this turned on. [37:28.060 --> 37:34.840] Unless the Chrome team re-enables the NFC for certain sites. [37:36.000 --> 37:40.720] All right, and after you do this with the Chrome flags, then you can go to Bob. [37:41.550 --> 38:03.020] The website is there but it's not hooked into the NFC JavaScript features which you'll probably want to use and probably want to onboard to your village of choice, like the Monero village or the Rogues village, Red Team, crypto privacy, all of these different villages that are participating, like biohacking and IoT. [38:03.020 --> 38:05.960] You can first read data if you're feeling a bit. [38:06.460 --> 38:08.140] If you're feeling a bit. [38:08.140 --> 38:13.340] If you want to test it to know if your badge is working. And once you do that there will be a... [38:13.960 --> 38:18.920] There will be text that comes below that telling you which profile you have. [38:19.180 --> 38:26.400] Probably it has the factory default profile with FUDs, the factory unique identifiers. [38:26.400 --> 38:40.000] All right, then write data will simply write what you have selected in onboard village. So if you have all of the villages selected, which means biohacking, Rogues village, Monero village, Red Team, IoT, crypto privacy. [38:40.000 --> 38:57.780] Is that the name? I think it is the name cryptography and privacy village. So that's when your write data will simply write unique identifiers which are SUIs, sensitive unique identifiers to your badge for all of those different villages. [38:57.780 --> 39:13.000] All right, so that's kind of the cheap way to describe and demonstrate what happens with the BOB application, which is the main website for the intervillage badge this year. [39:13.000 --> 39:19.000] All right, that's the website, the homepage and the portal for making everything work over JavaScript. [39:19.000 --> 39:37.620] Don't forget that you need to turn on the NFC Chrome feature, the experimental platform, in order to use the BOB website correctly. Until the 29th, you didn't have to. And right now you do. Who knows if in another week or so, the Chrome team will make that work again. [39:37.620 --> 39:46.620] And if we're really lucky, then in less than five years, Apple will actually make NFC available to people using Apple devices with websites. [39:46.620 --> 40:06.300] All right, so that's what we have here. We're going to be able to connect to the backend, to the MQTT network, we're going to be able to authenticate with our FUD or our unique identifier. [40:06.900 --> 40:08.060] What is it? [40:08.300 --> 40:10.880] Sensitive unique identifier. That's it. [40:10.880 --> 40:19.760] So that's how that's going to work, authenticate, and if we just provide nothing at all, then we will have access to some of the test channels. [40:20.100 --> 40:32.240] And then we can knock on a village, and if it maps to a village, a real village name that's on Discord, there will probably be a bridge, which will then write a knock knock message to that village. [40:32.240 --> 40:39.260] In fact, if you look on the Monero villages channels, you will find one that's called mv-proxy. [40:39.260 --> 40:46.380] And that proxy channel. Okay, I'll finish the sentence mv-proxy-text. Okay, it's a text channel. [40:46.440 --> 40:58.900] And what that is intended for is are these type of applications, you know, bots and automated applications that work with the Discord channel system. [40:58.900 --> 41:08.240] AJS had a very, very, well, he does have a very, very nice and interesting bot that is a tip bot. [41:08.560 --> 41:17.020] The reason for that is very similar story to Chrome teams deciding to block NFC on the 29th of July. [41:17.140 --> 41:28.280] The folks that are running Discord for us, they're doing a great job, we're very grateful and thankful that they're running and maintaining Discord channels for DEF CON. [41:28.280 --> 41:41.960] They just couldn't get all of the bots online. It was too much. It was just too much work and too high a risk without being able to be certain that every bot was doing as they were told, right. [41:41.980 --> 41:52.960] So they kind of, they kind of canceled the bot system. That's why we couldn't get AJS's tip bot onto our proxy channel. [41:53.260 --> 41:54.960] How can I... [41:54.960 --> 42:02.940] Yeah, it's too... I wonder if I can very quickly add a source in OBS show you these channel names. [42:03.720 --> 42:07.600] This will be kind of difficult. I'm not going to be able to do it in time. [42:07.720 --> 42:14.700] In any case, this will simply be another application running through these proxy channels. [42:14.860 --> 42:23.780] And that's the best answer I have to the question that we got before about could you demonstrate the Bob application, right. [42:23.780 --> 42:33.980] So not all of this is, is working completely. The hardware is complete, everything is finished from the membrane overlays that's in the front. [42:34.340 --> 42:42.920] The embossed places, full color. On top of that the parts inside, which look like this. [42:43.960 --> 42:56.200] And basically everything's finished with the hardware, just not the software. The backend system is kind of working. I mean, it's working great, but it's just not very, very rich, very primitive system. [42:56.680 --> 43:02.600] Alright, so what we can do is take a look maybe under the microscope at some of these things now. [43:03.120 --> 43:09.500] Just to change, switch gears a bit from this that we had before. [43:10.540 --> 43:13.540] So I'll find a blank piece of paper. [43:13.760 --> 43:28.620] I'm sorry, blank piece of electronic EPD high tech, cutting edge, foldable screen, multi thousand euro devices. [43:30.540 --> 43:47.920] There is a badge, this is a prototype. And what you can do if, for example, especially if you pick up one of the DIY, the cheapest models, which, which, which when you get it out of the box, it looks like this. It is here. Okay, there we go. [43:47.920 --> 43:49.380] You can see that pretty well. [43:49.380 --> 44:04.240] So it is assembled for you. And the reason is that some of those parts on there are very, very small. Okay, so it just wouldn't make any sense at all to send a package of parts which you need to very carefully put down with tape. [44:04.240 --> 44:07.120] Get the contacts right with these dome switches. [44:08.120 --> 44:33.680] And the ICs that are involved there that just will, they're two by three millimeters large. Okay, and if you can imagine like these, these dome switches they just slide around as you can see they go all over the place you've got to perfectly align all three without the use of tools and then get the right kind of tape on there that's trapezoidal shape and then put, you know, avoid the, avoid the through hole gold contacts. [44:33.680 --> 44:46.980] So a lot of that stuff I just thought it would be probably too difficult, especially soldering these parts. So this is how your do-it-yourself kit arrives, you receive this, you receive. [44:49.280 --> 44:55.240] So my workplace here it's just a big mess and I'm not seeing where. [44:55.660 --> 44:57.220] Oh here I found it. [44:57.560 --> 45:01.920] It's a small miracle but I found a do-it-yourself kit. [45:01.920 --> 45:05.580] So you get a front overlay. [45:06.640 --> 45:09.160] I can't get the light just right here. [45:09.320 --> 45:15.680] But you can tell this is a overlay with a adhesive back, right, and you get there are two pieces. [45:16.440 --> 45:25.520] So there's a, there's a piece of leather which this is all adhesive so you don't need to mess around with glue. No glue and no tools required. [45:25.520 --> 45:41.760] This is really for novice users. If you want to assemble your own PCB, you can probably do that. In fact, I don't know if this is secret or not, the very first hundred devices that we sold. [45:42.280 --> 45:47.180] They had, they included a bare PCB with no parts at all. [45:47.180 --> 45:51.320] So I was thinking, will people assemble them? Probably not. [45:51.320 --> 46:04.680] But if you were one of the lucky first hundred then you got a bare PCB, and I guess you know, I don't know how to distribute them because it's all going by post now but I have no problem. I have enough bare PCBs if other people want those. [46:05.180 --> 46:11.060] Just have to let me know, tell me and we'll have to discuss and figure out a way to distribute them to you. [46:11.340 --> 46:14.500] So while I was talking about these very small pieces. [46:14.500 --> 46:25.380] I think I can finally demonstrate because we do have a microscope now. Just have to switch to the microscope screen. [46:26.280 --> 46:37.460] Alright, so let's just start with a... let's start with the back of a... [46:38.500 --> 46:41.920] This is a Monero Rising. [46:43.020 --> 46:47.840] I'm not sure where it says rising, you will just have to trust me. This is how the front looks. [46:50.320 --> 46:53.720] So there you can see that it is truly a Monero Rising. [46:55.260 --> 47:03.560] There's always a problem with microscopes, with document cameras, you can have it big, you can have it small, but you can't have both. [47:05.060 --> 47:07.260] So okay, here are some of the parts. [47:08.100 --> 47:20.040] There is the PMIC, the power management IC that belongs on the Monero Rising, which controls all of the various lights. Here's the microcontroller. [47:21.280 --> 47:26.600] Alright, so now we're going to take a look at the size in comparison. [47:28.480 --> 47:30.700] Maybe I'll have to focus a bit. [47:31.460 --> 47:44.760] In comparison to the very standard size microcontroller, here is the size of the NFC EEPROMs that we're using this year. [47:45.440 --> 47:53.460] You see the difference? It's giant. And even that one microcontroller is really not that big. [47:54.380 --> 47:57.760] Right. So let me just take this over here. [47:58.740 --> 48:00.620] This is what we were just looking at. [48:02.060 --> 48:10.400] Can you see the microcontroller? Can you identify the part that we were just looking at? Well, not if it's not in focus, but if it is focused... [48:11.480 --> 48:13.000] Put my finger on there. [48:14.760 --> 48:16.140] There we go, now it's focused. [48:16.700 --> 48:21.660] So the microcontroller that we were just looking at is right here. It's really not a very large piece. [48:22.600 --> 48:29.960] And if we compare that with the parts that are on this year's badge, they're very, very small. [48:29.960 --> 48:33.380] Alright, so I keep saying it's small and small and small. You get the point, right? [48:34.560 --> 48:36.460] We can go back to the microscope. [48:38.700 --> 48:42.800] And look at some of the other things. Microscopes are always very intriguing. [48:42.800 --> 48:51.580] So it's a very simple system this year. We don't have 100 or 120 parts as we did last year. [48:52.620 --> 48:54.620] You can see the traces. [48:56.200 --> 49:01.000] All of the schematics, which means where these traces go. [49:01.280 --> 49:04.000] Here's a tip of a ballpoint pen. [49:04.000 --> 49:10.540] So all of these traces, they're basically connecting legs or parts. No, not parts. [49:10.540 --> 49:18.150] They're connecting the contacts of these integrated circuits with other things like the antenna, for example. [49:18.540 --> 49:23.020] You see a hole here. This is quite interesting. This is called a via. [49:23.500 --> 49:27.480] And this via simply traverses the board. [49:27.480 --> 49:31.740] Because the board is 1.6 millimeters thick. [49:31.740 --> 49:34.740] Is that how thick they are? Yeah, 1.6 millimeters. [49:34.960 --> 49:43.300] And it goes to the bottom. And if we turn the board over, which I'll do quickly now, we can see holes on the bottom as well. [49:43.300 --> 49:50.280] So basically, that via is connecting a track from the bottom to the top. [49:51.340 --> 49:55.840] Right, so that's what vias do. And that's how we connect the different parts together. [49:55.840 --> 50:01.660] And if you want to be a hardware hacker and solder some headers on to this, I did make a mistake. [50:01.660 --> 50:09.540] I made them separated only, what, they're two millimeters apart. They should be 1.27. [50:10.520 --> 50:16.920] So I kind of, there's a few mistakes that will cause you a few headaches, but you can still solder headers on there. [50:16.920 --> 50:22.160] They just won't line up to the traditional, what, Arduino and breadboards. [50:22.280 --> 50:25.620] So here is the, that's really fine etching, isn't it? [50:25.620 --> 50:28.800] So one of our subcontractors did a good job this year, the etchers. [50:29.340 --> 50:34.400] And this is the antenna. Right, and you can see where the antenna connects to the front, [50:34.400 --> 50:38.400] because somewhere there must be a what? A hole. It's called a via. [50:38.820 --> 50:42.260] And there it is. So this hole is connecting to the front. [50:42.260 --> 50:46.460] And in this manner, we're getting the, now I just put some ink on there. [50:47.440 --> 50:53.080] And in this manner, we're getting the antenna, which is on the back, going to a track, [50:53.080 --> 51:02.140] which is on the front, connected to these three parts. U1, U2, and U3. [51:02.140 --> 51:10.980] And those U1, U2, and U3 connect to, can you guess? To these. [51:10.980 --> 51:17.720] Okay, it doesn't make sense to use a microscope for already very large things. [51:17.720 --> 51:22.840] And those three EEPROMs, integrated circuits, which you can actually see, [51:22.840 --> 51:29.040] because we made the windows, we made the front overlay transparent. [51:29.040 --> 51:32.580] We put windows in so you can see your electronics. [51:32.920 --> 51:39.320] I mean, you could chip away the plastic and connect taps to the legs of the EEPROMs. [51:39.500 --> 51:43.360] But I don't know, I don't recommend that. So anyway, that's how you do this. [51:43.360 --> 51:49.360] So as a last demonstration, before we end, because we're getting close to the end, aren't we, Justin? [51:49.360 --> 51:59.140] And there are no more questions. So last demonstration, I will show you how I write information to my badges. [52:00.200 --> 52:06.320] So I'm going to go away from the browser and I'm going to use NFC tools. [52:06.480 --> 52:09.920] You can do pro or tools, doesn't matter which one. [52:09.920 --> 52:14.140] All right. So I'm going to do write. I'm going to add a record. [52:14.940 --> 52:21.720] Going to do a URL. Did you see all of the different? I mean, this is all the things that you can do with a badge. [52:21.720 --> 52:27.820] You can even put a Bitcoin address on there. This is what most people will probably do in the Monero village. [52:28.760 --> 52:33.120] All right. That was a joke, by the way. OK, so you can put your your email address on there. [52:33.120 --> 52:36.620] You can do and you can do multiple. All right. So I'm going to do a demonstration. [52:36.620 --> 52:44.720] I'm going to put a URI. I'm going to choose HTTPS. I'm going to choose RERAR's excellent website. [52:47.260 --> 52:51.980] RERAR, is it an excellent website or is this just kind of a half, not very good website? [52:51.980 --> 52:57.780] What's your opinion? All right. So now we have a piece of data that we can write to the badge. [52:57.780 --> 53:02.580] You see that? I'm going to even do a second one now. I'm going to put my what? [53:04.760 --> 53:16.820] Put my... I'll just put a text record on there and I'll call it the intervillage badge. [53:16.820 --> 53:23.220] All right. So now we have two pieces of data. Which one occupies the first slot? [53:23.220 --> 53:28.220] Well, we can change the order. This is very important because if you're if you're planning to have your badge, [53:28.220 --> 53:35.060] activate the web browser and and start the web browser running automatically, must have a URL on the very first slot. [53:35.060 --> 53:39.560] If it doesn't, then it will activate some other MIME type, write some other application. [53:39.580 --> 53:43.840] You might get your editor starting to run. So now I'm going to do write. [53:46.400 --> 53:52.060] And which should I use? Let's go back to the red one. [53:52.060 --> 53:56.060] So I will I will write it to the star. Is that OK with you? With you folks? [53:56.360 --> 54:02.140] All right. It's a star. So I'm going to I'm going to click the star after I put it on the back like this. [54:02.140 --> 54:07.480] OK, I'm going to line it up with the antenna of my phone. Then I'm going to click the star. [54:08.460 --> 54:12.700] Ready for this? One, two, three, click. No. Where is it? One, two, three, click. [54:16.300 --> 54:21.180] All right. Did you see and hear that? So now if I close this. [54:22.100 --> 54:27.140] Open it again. This time I'll open. I had Pro already running. [54:27.140 --> 54:35.500] So this time I will open Pro and I will do a read. I will. I will click on that star and see what happens. [54:37.260 --> 54:43.140] All right. So it got a read. And what records are in there? Do you see that? That's how this works with the read operations. [54:43.140 --> 54:49.760] This is what the website will do as well. But just not now because the pieces are disorganized. [54:50.260 --> 54:54.780] All right. So that's kind of a demonstration of writing with NFC tools. [54:55.360 --> 54:59.980] All right. And tomorrow I'm just going to give you... OK, we've got a few minutes, I think. I'm not sure about this. [54:59.980 --> 55:06.180] Tomorrow I'm going to do a different demonstration. Tomorrow is another office hours, another badge clinic. [55:06.500 --> 55:10.300] Do you see this box of chocolates? What do you think is inside here? [55:11.440 --> 55:17.060] AJS, what do you think is inside or XMR Scott? Do you have a guess about this? [55:17.060 --> 55:26.180] All right. It's chocolates is inside, guys. Right. Chocolates are inside. [55:26.180 --> 55:32.260] But another thing that's inside is a phone. All right. So what do you think is going to happen? [55:32.480 --> 55:36.880] And this phone, I've got it taped. It's very well secured. Do you see how it won't fall off? [55:36.900 --> 55:42.180] So what do you think if I if I put this box of chocolates with the phone inside? [55:42.180 --> 55:47.380] Oh, at a dentist's office. Well, you wouldn't want to put a box of chocolates at a dentist's office. [55:47.380 --> 55:51.620] You know, like the waiting office of the airline or something like that. [55:51.620 --> 55:55.420] It's just going to be there. It's going to be shrink-wrapped so nobody looks inside. [55:55.420 --> 56:00.500] And people are going to put their NFC embedded cards on top of that. [56:00.500 --> 56:10.180] And tomorrow we will see what happens if you use an NFC device which does not have protection against opportunistic data theft like this in an intervillage badge. [56:10.180 --> 56:18.620] And that's the demonstration for tomorrow. And that's the end of our... [56:20.090 --> 56:24.710] God, I can't find... Okay, I can't find anything. This whole place is a mess, right? [56:24.790 --> 56:29.550] But SDP, we're just two minutes before the next presentation. [56:29.590 --> 56:33.310] So that means I'm going to quit while we're ahead. [56:33.310 --> 56:36.870] That means I'm going to say bye-bye, folks. [56:36.870 --> 56:44.590] And thanks for coming to the badge clinic of the Monero Village on Saturday at DEF CON 28 Safe Mode.