Neotropolis The Making of the Railgun Trackers
This recording is not on YouTube. It plays from the DEF CON media server; the button opens the file there.
Where
Radio Frequency Village
DEF CON 34
Duration
16 min
Shows how a cheap Bluetooth Low Energy tracker built on an off-the-shelf M5Stack can follow a beacon's MAC address through a crowded venue using signal strength.
Summary
The speaker, a software engineer, describes the railgun props used in a live-action roleplay game at Neotropolis, a cyberpunk festival in the Mojave Desert. Each prop carried a Bluetooth Low Energy beacon that simply broadcast its discovery packets, and game hunters used handheld trackers to locate them.
The tracker reads received signal strength to estimate distance. It runs on a stock M5Stack Core 2 with the Arduino BLE stack, and the operator programs in the target's MAC address. The display moves through a scale from ice cold to red hot as the target gets closer. The speaker demonstrated this in the hall by carrying a beacon away from the tracker. He compared this with multi-receiver triangulation, which is more precise but was not needed for the game. He also noted that a connected device stops advertising, which limits the method.
The second half turns to privacy. The same approach could follow any nearby phone with Bluetooth on, and he cited camera networks that collect device addresses alongside license plates as a way to link an address to a person. MAC address randomization would help but is not yet common. His practical advice was to keep Bluetooth off when it is not in use.
Materials
Related talks
Radio Frequency Village·40 min
Erwin Karincic
Shows how an AI assistant driving GNU Radio through a custom MCP server can detect SDRs, build flow graphs, and demodulate a proprietary sub-GHz protocol.
Radio Frequency Village·28 min
Coyo
Follows a hobbyist's urban radio direction-finding project, using a five-antenna KrakenSDR to bearing ham and FM transmitters in Portland.
Radio Frequency Village·29 min
Greg
Explains how drones appear on the RF spectrum, how Remote ID and DJI control links can be detected and decoded, how they can be spoofed or replayed, and where RF sensing falls short.