Toorcamp 2016
“a five-day open-air event for
hackers, makers, breakers, and
shakers.”
What it is
• A hacking camp in the style of Chaos
Communication Camp in Germany
• In practice, more of a makers camp
• Lots of hardware, cool projects, radio
hamming, even biohacking
Where
• Doe Bay Resort & Retreat
• Orcas Island
• San Juan Islands
• Washington State
What I saw on my Travels
• Talks, workshops, art projects
galore
• No particular order
Domes
• Prime Dome
• Workshop Domes
• Milliways Dome
ShadyTel
• In-camp phone network set up by phone
enthusiasts
• Makes fun of phone company practices
• Ran phone lines to anyone who requested,
even across the water to remote campsites
• Published daily directory editions (30-odd
numbers)
ShadyTel Voicemail
• Megaphone was connected to voicemail of
secret phone number
• People could leave voicemails that would be
broadcast all across the camp
• Number could be determined via whiskey or
via wardialing
• Made me really want a corded telephone
Sample Wardialing Setup
• You’d hear calls to the megaphone voicemail
with no content and a quick hangup.
Futel
• A competing camp-only phone network, with
just two payphones
Futel.net
• Sets up free public payphones in Portland
• One man’s pro bono project
• Experiences volumes of up to 90 calls a day
• Has helped save lives
Implantable NFC
• xNT transponder implantation into hand
• ISO 1443 NFC
• Relatively painless, and allows things like
opening doors with NFC
• More info at https://dangerousthings.com/
Networking
• Two, one open, one requiring certificate
• Several fake open networks that were obvious
traps (meow)
• At least nine active frequencies for radio hams
• Radio ham exams were offered every day
Radio Station
Passport
• Contained guide to all events and workshops
• Various official campsites and groups could give you a “visa
stamp”
• Here’s one for the radio station and another makerspace
group called “Psycoholics” – Syn Shop out of Las Vegas:
Music with Javascript and Math
• http://studio.substack.net and
http://studio.substack.net/-/recent
• Modify mathematical curves in various ways
to output music
Tesla Coils
• Three briefcase-sized tesla coils built as a
hobby
• Used to play music by modulating the spark
output
• https://www.youtube.com/watch?v=3Nr3sEQf
lTw
Shadow Mate
• https://github.com/jdukes/ShadowMate
• Carbonated, brewed Yerba Mate has been a
popular hacker drink since the early 2000s
• This recipe also includes lemon/lime juice and
ginseng
Wood-gas Generator
• Burn wood pellets to generate wood-gas
• Pull generated wood-gas through trashcan
filled with wood chips and foam, through an
air intake, and into a generator
• Worked surprisingly well as long as the pellets
burned right
• Powered a heater
• https://www.youtube.com/watch?v=uz93cb0z
Plk
Challenge Coins
• Provide identity in an organization
• Milliways’ coin, just for Toorcamp 2016:
Wildlife
• Raccoons
• Deer
• Aggressive Birds
Hard-drive Platter Launcher
• Induces current into anything metal and a
giant magnetic field to launch it into the air
• Encased in a thick acrylic box
• Once charged, can fling a small hard-drive
platter 25 feet in the air
• https://krux.org/article/Project_Hathor
Internet of Buckets
• Large 10x8 array of five gallon buckets
• Each bucket contains a light rod with its own
unique IP address.
• The whole network had an API. If you knew
the IP address you could control the buckets
and even play snake on the bucket array
• Buckets could be carried around and were
beautiful at night, on the beach
Hacker Boat
• A five-year running project to create an
autonomous boat
• Different environment from the air
• Moves around via a small propeller and sail-
masts
• https://hackaday.io/project/8522-hackerboat
PVC Canoe
• Canoe made with approximately 100 feet of
PVC
• Actually floats and is navigable
Ford Unlocking Robot
• Short presentation about a robot that can be
latched onto the side of a car
• Cars that have five-button door locks on the
outside
• Brute-forces the key presses
• A bit hard to get volunteers to be hacked
NOPE LED display
• Individual project to create an LED screen
from multiple panels
• Can display complex patterns
Augmented Reality Sandbox
• http://idav.ucdavis.edu/~okreylos/ResDev/SA
Rndbox/
• http://picbear.com/media/126937203504213
6949_3319520019
Quadcopters and Hacking Quadcopters
• Everyone received a small quadcopter
• Michael Ossman gave a talk on reverse-
engineering these quadcopters
• http://greatscottgadgets.com/slides/ossmann-
spill-toorcamp-2016.pdf
Flamethrower
• Actual flamethrower that was built to run off a
propane tank
• Unveiled on the last night
Quirky Phone
• To dial, tap the hook the correct number of
times
• Receiver held on with magnets
Hacking .NET and Sharepoint
• Presented by Jon McCoy
• Available online in various forms from
different talks he gave
• Uses two custom decompiling tools to break
through .NET security or break up existing
security into weaker portions to individually
crack
Capture the Flag: An Owner’s Manual
• Presented by Vito Genovese - @Vito_lbs
• Runs major CTF at Defcon
• 3000 teams in qualifiers, 120 in finals
(nonstop)
• How to build a good CTF – being sneaky, being
cross-cultural, infrastructure
• https://www.youtube.com/watch?v=K-
8G2iT8X3s
Exploiting the North American
Railways
• Presented by a man who rode the rails from
age 14 to 21
• Talked about evading physical security,
planning trips
• Enjoyed great views and met odd characters
Intro to Firemaking
Ada’s Pop-up Cafe
• Great views of the
Prime Dome
Flaschen Taschen (not at Toorcamp)
• https://noisebridge.net/wiki/Flaschen_Tasche
n
• Possibly an inspiration for the Internet of
Buckets
• Hundreds of Coors bottles stuffed together to
create a glowing movie wall
Resolutions for Toorcamp 2018
• Learn to Solder, brew mate, learn binary
exploitation and reverse engineering, learn
how to arduino and how to raspberry pi
• Get at least a Technician class ham radio
license
More Stuff
• https://www.flickr.com/photos/pinguino/sets/
72157667188334564
• https://www.youtube.com/watch?v=m7Zr0q
MK164
Questions?

Toorcamp 2016

  • 1.
    Toorcamp 2016 “a five-dayopen-air event for hackers, makers, breakers, and shakers.”
  • 2.
    What it is •A hacking camp in the style of Chaos Communication Camp in Germany • In practice, more of a makers camp • Lots of hardware, cool projects, radio hamming, even biohacking
  • 3.
    Where • Doe BayResort & Retreat • Orcas Island • San Juan Islands • Washington State
  • 4.
    What I sawon my Travels • Talks, workshops, art projects galore • No particular order
  • 5.
    Domes • Prime Dome •Workshop Domes • Milliways Dome
  • 6.
    ShadyTel • In-camp phonenetwork set up by phone enthusiasts • Makes fun of phone company practices • Ran phone lines to anyone who requested, even across the water to remote campsites • Published daily directory editions (30-odd numbers)
  • 8.
    ShadyTel Voicemail • Megaphonewas connected to voicemail of secret phone number • People could leave voicemails that would be broadcast all across the camp • Number could be determined via whiskey or via wardialing • Made me really want a corded telephone
  • 9.
    Sample Wardialing Setup •You’d hear calls to the megaphone voicemail with no content and a quick hangup.
  • 10.
    Futel • A competingcamp-only phone network, with just two payphones
  • 11.
    Futel.net • Sets upfree public payphones in Portland • One man’s pro bono project • Experiences volumes of up to 90 calls a day • Has helped save lives
  • 12.
    Implantable NFC • xNTtransponder implantation into hand • ISO 1443 NFC • Relatively painless, and allows things like opening doors with NFC • More info at https://dangerousthings.com/
  • 13.
    Networking • Two, oneopen, one requiring certificate • Several fake open networks that were obvious traps (meow) • At least nine active frequencies for radio hams • Radio ham exams were offered every day
  • 14.
  • 15.
    Passport • Contained guideto all events and workshops • Various official campsites and groups could give you a “visa stamp” • Here’s one for the radio station and another makerspace group called “Psycoholics” – Syn Shop out of Las Vegas:
  • 16.
    Music with Javascriptand Math • http://studio.substack.net and http://studio.substack.net/-/recent • Modify mathematical curves in various ways to output music
  • 17.
    Tesla Coils • Threebriefcase-sized tesla coils built as a hobby • Used to play music by modulating the spark output • https://www.youtube.com/watch?v=3Nr3sEQf lTw
  • 18.
    Shadow Mate • https://github.com/jdukes/ShadowMate •Carbonated, brewed Yerba Mate has been a popular hacker drink since the early 2000s • This recipe also includes lemon/lime juice and ginseng
  • 19.
    Wood-gas Generator • Burnwood pellets to generate wood-gas • Pull generated wood-gas through trashcan filled with wood chips and foam, through an air intake, and into a generator • Worked surprisingly well as long as the pellets burned right • Powered a heater • https://www.youtube.com/watch?v=uz93cb0z Plk
  • 20.
    Challenge Coins • Provideidentity in an organization • Milliways’ coin, just for Toorcamp 2016:
  • 21.
  • 22.
    Hard-drive Platter Launcher •Induces current into anything metal and a giant magnetic field to launch it into the air • Encased in a thick acrylic box • Once charged, can fling a small hard-drive platter 25 feet in the air • https://krux.org/article/Project_Hathor
  • 24.
    Internet of Buckets •Large 10x8 array of five gallon buckets • Each bucket contains a light rod with its own unique IP address. • The whole network had an API. If you knew the IP address you could control the buckets and even play snake on the bucket array • Buckets could be carried around and were beautiful at night, on the beach
  • 27.
    Hacker Boat • Afive-year running project to create an autonomous boat • Different environment from the air • Moves around via a small propeller and sail- masts • https://hackaday.io/project/8522-hackerboat
  • 28.
    PVC Canoe • Canoemade with approximately 100 feet of PVC • Actually floats and is navigable
  • 29.
    Ford Unlocking Robot •Short presentation about a robot that can be latched onto the side of a car • Cars that have five-button door locks on the outside • Brute-forces the key presses • A bit hard to get volunteers to be hacked
  • 30.
    NOPE LED display •Individual project to create an LED screen from multiple panels • Can display complex patterns
  • 31.
    Augmented Reality Sandbox •http://idav.ucdavis.edu/~okreylos/ResDev/SA Rndbox/ • http://picbear.com/media/126937203504213 6949_3319520019
  • 32.
    Quadcopters and HackingQuadcopters • Everyone received a small quadcopter • Michael Ossman gave a talk on reverse- engineering these quadcopters • http://greatscottgadgets.com/slides/ossmann- spill-toorcamp-2016.pdf
  • 33.
    Flamethrower • Actual flamethrowerthat was built to run off a propane tank • Unveiled on the last night
  • 34.
    Quirky Phone • Todial, tap the hook the correct number of times • Receiver held on with magnets
  • 35.
    Hacking .NET andSharepoint • Presented by Jon McCoy • Available online in various forms from different talks he gave • Uses two custom decompiling tools to break through .NET security or break up existing security into weaker portions to individually crack
  • 36.
    Capture the Flag:An Owner’s Manual • Presented by Vito Genovese - @Vito_lbs • Runs major CTF at Defcon • 3000 teams in qualifiers, 120 in finals (nonstop) • How to build a good CTF – being sneaky, being cross-cultural, infrastructure • https://www.youtube.com/watch?v=K- 8G2iT8X3s
  • 37.
    Exploiting the NorthAmerican Railways • Presented by a man who rode the rails from age 14 to 21 • Talked about evading physical security, planning trips • Enjoyed great views and met odd characters
  • 38.
  • 39.
    Ada’s Pop-up Cafe •Great views of the Prime Dome
  • 40.
    Flaschen Taschen (notat Toorcamp) • https://noisebridge.net/wiki/Flaschen_Tasche n • Possibly an inspiration for the Internet of Buckets • Hundreds of Coors bottles stuffed together to create a glowing movie wall
  • 41.
    Resolutions for Toorcamp2018 • Learn to Solder, brew mate, learn binary exploitation and reverse engineering, learn how to arduino and how to raspberry pi • Get at least a Technician class ham radio license
  • 42.
  • 43.