Toorcamp 2016

“a five-day open-air event for hackers, makers, breakers, and

shakers.”

What it is

• A hacking camp in the style of Chaos Communication Camp in Germany

• In practice, more of a makers camp• Lots of hardware, cool projects, radio

hamming, even biohacking

Where

• Doe Bay Resort & Retreat• Orcas Island• San Juan Islands• Washington State

What I saw on my Travels

• Talks, workshops, art projectsgalore• No particular order

Domes

• Prime Dome• Workshop Domes• Milliways Dome

ShadyTel

• In-camp phone network set up by phone enthusiasts

• Makes fun of phone company practices• Ran phone lines to anyone who requested,

even across the water to remote campsites• Published daily directory editions (30-odd

numbers)

ShadyTel Voicemail

• Megaphone was connected to voicemail of secret phone number

• People could leave voicemails that would be broadcast all across the camp

• Number could be determined via whiskey or via wardialing

• Made me really want a corded telephone

Sample Wardialing Setup

• You’d hear calls to the megaphone voicemail with no content and a quick hangup.

Futel

• A competing camp-only phone network, with just two payphones

Futel.net

• Sets up free public payphones in Portland• One man’s pro bono project• Experiences volumes of up to 90 calls a day• Has helped save lives

Implantable NFC

• xNT transponder implantation into hand• ISO 1443 NFC• Relatively painless, and allows things like

opening doors with NFC• More info at https://dangerousthings.com/

Networking

• Two, one open, one requiring certificate• Several fake open networks that were obvious

traps (meow)• At least nine active frequencies for radio hams• Radio ham exams were offered every day

Radio Station

Passport• Contained guide to all events and workshops• Various official campsites and groups could give you a “visa

stamp”• Here’s one for the radio station and another makerspace

group called “Psycoholics” – Syn Shop out of Las Vegas:

Music with Javascript and Math

• http://studio.substack.net and http://studio.substack.net/-/recent

• Modify mathematical curves in various ways to output music

Tesla Coils

• Three briefcase-sized tesla coils built as a hobby

• Used to play music by modulating the spark output

• https://www.youtube.com/watch?v=3Nr3sEQflTw

Shadow Mate

• https://github.com/jdukes/ShadowMate• Carbonated, brewed Yerba Mate has been a

popular hacker drink since the early 2000s• This recipe also includes lemon/lime juice and

ginseng

Wood-gas Generator

• Burn wood pellets to generate wood-gas• Pull generated wood-gas through trashcan filled

with wood chips and foam, through an air intake, and into a generator

• Worked surprisingly well as long as the pellets burned right

• Powered a heater• https://www.youtube.com/watch?v=uz93cb0zPlk

Challenge Coins

• Provide identity in an organization• Milliways’ coin, just for Toorcamp 2016:

Wildlife

• Raccoons• Deer• Aggressive Birds

Hard-drive Platter Launcher

• Induces current into anything metal and a giant magnetic field to launch it into the air

• Encased in a thick acrylic box• Once charged, can fling a small hard-drive

platter 25 feet in the air• https://krux.org/article/Project_Hathor

Internet of Buckets

• Large 10x8 array of five gallon buckets• Each bucket contains a light rod with its own

unique IP address.• The whole network had an API. If you knew

the IP address you could control the buckets and even play snake on the bucket array

• Buckets could be carried around and were beautiful at night, on the beach

Hacker Boat

• A five-year running project to create an autonomous boat

• Different environment from the air• Moves around via a small propeller and sail-

masts• https://hackaday.io/project/8522-hackerboat

PVC Canoe

• Canoe made with approximately 100 feet of PVC

• Actually floats and is navigable

Ford Unlocking Robot

• Short presentation about a robot that can be latched onto the side of a car

• Cars that have five-button door locks on the outside

• Brute-forces the key presses• A bit hard to get volunteers to be hacked

NOPE LED display

• Individual project to create an LED screen from multiple panels

• Can display complex patterns

Augmented Reality Sandbox

• http://idav.ucdavis.edu/~okreylos/ResDev/SARndbox/

• http://picbear.com/media/1269372035042136949_3319520019

Quadcopters and Hacking Quadcopters

• Everyone received a small quadcopter• Michael Ossman gave a talk on reverse-

engineering these quadcopters• http://greatscottgadgets.com/slides/ossmann-

spill-toorcamp-2016.pdf

Flamethrower

• Actual flamethrower that was built to run off a propane tank

• Unveiled on the last night

Quirky Phone

• To dial, tap the hook the correct number of times

• Receiver held on with magnets

Hacking .NET and Sharepoint

• Presented by Jon McCoy• Available online in various forms from

different talks he gave• Uses two custom decompiling tools to break

through .NET security or break up existing security into weaker portions to individually crack

Capture the Flag: An Owner’s Manual

• Presented by Vito Genovese - @Vito_lbs• Runs major CTF at Defcon• 3000 teams in qualifiers, 120 in finals

(nonstop)• How to build a good CTF – being sneaky, being

cross-cultural, infrastructure• https://www.youtube.com/watch?v=K-

8G2iT8X3s

Exploiting the North American Railways

• Presented by a man who rode the rails from age 14 to 21

• Talked about evading physical security, planning trips

• Enjoyed great views and met odd characters

Intro to Firemaking

Ada’s Pop-up Cafe

• Great views of the Prime Dome

Flaschen Taschen (not at Toorcamp)

• https://noisebridge.net/wiki/Flaschen_Taschen

• Possibly an inspiration for the Internet of Buckets

• Hundreds of Coors bottles stuffed together to create a glowing movie wall

Resolutions for Toorcamp 2018

• Learn to Solder, brew mate, learn binary exploitation and reverse engineering, learn how to arduino and how to raspberry pi

• Get at least a Technician class ham radio license

More Stuff

• https://www.flickr.com/photos/pinguino/sets/72157667188334564

• https://www.youtube.com/watch?v=m7Zr0qMK164

Questions?