Yosef Kerzner's report on Toorcamp 2016. Presented at Houston Hadoop Meetup in July 2016. • Your own drone to deliver vegetarian tacos from nearby town (of Seattle) • Reverse engineering and attacking the .NET applications • Hacking the North American railways, and more...

1. Toorcamp 2016
“a five-day open-air event for
hackers, makers, breakers, and
shakers.”

2. What it is
• A hacking camp in the style of Chaos
Communication Camp in Germany
• In practice, more of a makers camp
• Lots of hardware, cool projects, radio
hamming, even biohacking

3. Where
• Doe Bay Resort & Retreat
• Orcas Island
• San Juan Islands
• Washington State

4. What I saw on my Travels
• Talks, workshops, art projects
galore
• No particular order

5. Domes
• Prime Dome
• Workshop Domes
• Milliways Dome

6. ShadyTel
• In-camp phone network set up by phone
enthusiasts
• Makes fun of phone company practices
• Ran phone lines to anyone who requested,
even across the water to remote campsites
• Published daily directory editions (30-odd
numbers)

8. ShadyTel Voicemail
• Megaphone was connected to voicemail of
secret phone number
• People could leave voicemails that would be
broadcast all across the camp
• Number could be determined via whiskey or
via wardialing
• Made me really want a corded telephone

9. Sample Wardialing Setup
• You’d hear calls to the megaphone voicemail
with no content and a quick hangup.

10. Futel
• A competing camp-only phone network, with
just two payphones

11. Futel.net
• Sets up free public payphones in Portland
• One man’s pro bono project
• Experiences volumes of up to 90 calls a day
• Has helped save lives

12. Implantable NFC
• xNT transponder implantation into hand
• ISO 1443 NFC
• Relatively painless, and allows things like
opening doors with NFC
• More info at https://dangerousthings.com/

13. Networking
• Two, one open, one requiring certificate
• Several fake open networks that were obvious
traps (meow)
• At least nine active frequencies for radio hams
• Radio ham exams were offered every day

14. Radio Station

15. Passport
• Contained guide to all events and workshops
• Various official campsites and groups could give you a “visa
stamp”
• Here’s one for the radio station and another makerspace
group called “Psycoholics” – Syn Shop out of Las Vegas:

16. Music with Javascript and Math
• http://studio.substack.net and
http://studio.substack.net/-/recent
• Modify mathematical curves in various ways
to output music

17. Tesla Coils
• Three briefcase-sized tesla coils built as a
hobby
• Used to play music by modulating the spark
output
• https://www.youtube.com/watch?v=3Nr3sEQf
lTw

18. Shadow Mate
• https://github.com/jdukes/ShadowMate
• Carbonated, brewed Yerba Mate has been a
popular hacker drink since the early 2000s
• This recipe also includes lemon/lime juice and
ginseng

19. Wood-gas Generator
• Burn wood pellets to generate wood-gas
• Pull generated wood-gas through trashcan
filled with wood chips and foam, through an
air intake, and into a generator
• Worked surprisingly well as long as the pellets
burned right
• Powered a heater
• https://www.youtube.com/watch?v=uz93cb0z
Plk

20. Challenge Coins
• Provide identity in an organization
• Milliways’ coin, just for Toorcamp 2016:

21. Wildlife
• Raccoons
• Deer
• Aggressive Birds

22. Hard-drive Platter Launcher
• Induces current into anything metal and a
giant magnetic field to launch it into the air
• Encased in a thick acrylic box
• Once charged, can fling a small hard-drive
platter 25 feet in the air
• https://krux.org/article/Project_Hathor

24. Internet of Buckets
• Large 10x8 array of five gallon buckets
• Each bucket contains a light rod with its own
unique IP address.
• The whole network had an API. If you knew
the IP address you could control the buckets
and even play snake on the bucket array
• Buckets could be carried around and were
beautiful at night, on the beach

27. Hacker Boat
• A five-year running project to create an
autonomous boat
• Different environment from the air
• Moves around via a small propeller and sail-
masts
• https://hackaday.io/project/8522-hackerboat

28. PVC Canoe
• Canoe made with approximately 100 feet of
PVC
• Actually floats and is navigable

29. Ford Unlocking Robot
• Short presentation about a robot that can be
latched onto the side of a car
• Cars that have five-button door locks on the
outside
• Brute-forces the key presses
• A bit hard to get volunteers to be hacked

30. NOPE LED display
• Individual project to create an LED screen
from multiple panels
• Can display complex patterns

31. Augmented Reality Sandbox
• http://idav.ucdavis.edu/~okreylos/ResDev/SA
Rndbox/
• http://picbear.com/media/126937203504213
6949_3319520019

32. Quadcopters and Hacking Quadcopters
• Everyone received a small quadcopter
• Michael Ossman gave a talk on reverse-
engineering these quadcopters
• http://greatscottgadgets.com/slides/ossmann-
spill-toorcamp-2016.pdf

33. Flamethrower
• Actual flamethrower that was built to run off a
propane tank
• Unveiled on the last night

34. Quirky Phone
• To dial, tap the hook the correct number of
times
• Receiver held on with magnets

35. Hacking .NET and Sharepoint
• Presented by Jon McCoy
• Available online in various forms from
different talks he gave
• Uses two custom decompiling tools to break
through .NET security or break up existing
security into weaker portions to individually
crack

36. Capture the Flag: An Owner’s Manual
• Presented by Vito Genovese - @Vito_lbs
• Runs major CTF at Defcon
• 3000 teams in qualifiers, 120 in finals
(nonstop)
• How to build a good CTF – being sneaky, being
cross-cultural, infrastructure
• https://www.youtube.com/watch?v=K-
8G2iT8X3s

37. Exploiting the North American
Railways
• Presented by a man who rode the rails from
age 14 to 21
• Talked about evading physical security,
planning trips
• Enjoyed great views and met odd characters

38. Intro to Firemaking

39. Ada’s Pop-up Cafe
• Great views of the
Prime Dome

40. Flaschen Taschen (not at Toorcamp)
• https://noisebridge.net/wiki/Flaschen_Tasche
n
• Possibly an inspiration for the Internet of
Buckets
• Hundreds of Coors bottles stuffed together to
create a glowing movie wall

41. Resolutions for Toorcamp 2018
• Learn to Solder, brew mate, learn binary
exploitation and reverse engineering, learn
how to arduino and how to raspberry pi
• Get at least a Technician class ham radio
license

42. More Stuff
• https://www.flickr.com/photos/pinguino/sets/
72157667188334564
• https://www.youtube.com/watch?v=m7Zr0q
MK164

43. Questions?