Feb 092009
 

SHMOO!

ShmooCon is an information security conference held in Washington DC, this past weekend. About 1300 people attended talks ranging from DIY UAV design to disk recovery methodology. It was an intensely fun time. HACDC the local DC hackerspace and close friends of NYCResistor hosted a pretty amazing party inside of a church down there. I remember grabbing rubens with Nick Farr and company at around 6 am the following morning, and thinking… goddamn I am glad I came. However, as of Friday around 1 pm I had still not left NYC. I was working and being a generally busy person. But I got a call from an unnamed person whom we will for the sake of time refer to as “Deep Throat”. Several hackerspace members had arrived at Shmoo to discover that this year’s badges were in fact made of acryllic.

Thanks to a collaborative effort among NYCResistor members and other hackerspace members on the ground, by the time I was ready to leave at 7:30 pm, we had reproduced an exact replica of the shmoo badge.
We were provided images and scaling of the badges by Far McKon, and Nick Farr. However, we didn’t stop there… No, thanks to Bre and Eric skiff we had a massive bubble gum pink flava flav badge, 6 black badges ( turns out these were legitimate badge colors for Shmoo staff – oops! ) and, one regular sized bubble gum pink badge, with a unicorn in place of the moose logo ( my unicorn is now on it’s way to canadia to fight real moose for supremacy with the hacklab.to folks ). I’ve included some photos of the making of the massive pink badge. I believe the badge was ultimately sold at auction for a good cause. But before that, we managed to enter through security with both the massive flava flav badge and the unicorn badge. All black badges due to the dangerous nature of their deployment were kept in the hands of trustworthy and responsible individuals who would never do anything that would even remotely be considered morally dubious. In short, not me.

Anyways, that’s how we hacked ShmooCon. And, while it was all in good fun, shmoo organizers did admit that next year they’d be making sure to use at least 2 different fabrication systems for the badges so as to increase the complexity of this sort of attack.

Thanks to all involved in this hack, ShmooCon, and last but not least HACDC for their hospitality.

 Posted by at 1:05 am

  12 Responses to “How we hacked Shmoocon!”

Comments (9) Pingbacks (3)
  1. […] the various brilliant fake ShmooCon badges, from Openfly and NYC Resistor’s laser-cut replicas of varying accuracy to Altalp’s ingenius plastic sleeve-and-sharpie creation (which worked all […]

  2. […] month, NYC Resistor manufactured a fake pink unicorn badge for Shmoocon. Kingpin’s Defcon 14, 15, and 16 Badges have been electronic, replacing a […]

 Leave a Reply

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <s> <strike> <strong>

(required)

(required)