[00:05.820]For the F-15 system, it was really to probe just how many different ways that people get in. [00:11.820] [00:11.820]Do we have a design flaw? Is it a design flaw? Is it a hardware flaw where we've got embedded [00:18.320] [00:18.320]systems that have back doors that can be accessed? Is it a software flaw? Or is it a little bit of [00:23.520] [00:23.520]all of the above? It's a little bit of all of the above. And so after doing a meeting with [00:29.320] [00:29.320]the hackers that got in, they walked through. I tried this and it worked. Then I tried this [00:33.820] [00:33.820]next path and it worked. And just like electricity always flowing through the path of least [00:38.740] [00:38.740]resistance, they kept trying methods. It got increasingly harder, but they didn't have to pull [00:44.300] [00:44.300]their toughest tricks to get in. So the direction I think we're going, that we ought to go, [00:50.200] [00:50.200]is fully embracing the hacker community at DEF CON and not waiting until systems are built [00:55.800] [00:55.800]to create opportunities to learn and help us learn. We should bring the hacker community [01:01.940] [01:01.940]into systems as we design them. Help us make them more secure before we're producing them. [01:09.220] [01:09.220]And I think this could be win-win. We would learn a ton from this community, but also create some of [01:15.720] [01:15.720]the most interesting challenges because the systems we build are unique. They have some [01:20.500] [01:20.500]pretty amazing technology in them and I think the opportunity for the hacker community to get [01:25.480] [01:25.480]new hands-on experience would also be really energizing and cool. So events like HackASAT [01:31.680] [01:31.680]are awesome, live events, but the relationship and continuing it across a broader set of [01:38.440] [01:38.440]opportunities is what's more exciting. There's an interesting synergy between, one, the hacker [01:45.940] [01:45.940]community can touch devices you never would think you'd be allowed to touch. Weapons, satellites, [01:53.940] [01:53.940]all the things that are pretty cool. It also helps us learn commonalities where we build a lot [02:02.380] [02:02.380]of different things. And by learning those base cases of things we should do and should not do, [02:09.940] [02:09.940]that helps the design. But at the same time, people need to understand that there's a [02:16.270] [02:16.940]creativity to hacking. We often in the military, we think about checklists and spreadsheets and [02:22.660] [02:22.660]things like that. But I know people who have done red team and hacking exercises, [02:28.420] [02:28.420]it's much more of an art. And we want to bring that art into making our system safer. [02:34.360] [02:35.380]So we started this planning a little bit last year and then COVID hit. How did that change the plans? [02:40.580] [02:42.920]So there were moments where it was insanely stressful, where it's we are charging ahead [02:49.720] [02:49.720]and I'm sitting there, oh my god, what's going to happen with DEF CON? But then we realized [02:55.500] [02:55.500]we're perfectly situated for a virtual event. We have a VR environment, we have all of these [03:02.520] [03:02.520]workshops, everything is now accessible from anywhere. And where I think it's really interesting [03:08.320] [03:08.320]is we can now provide access to these workshops at a much larger scale. Whereas last year, [03:15.360] [03:15.360]the workshops were awesome, but we were swamped. But now in the VR environment, we can take [03:21.360] [03:21.920]thousands of people and also for access to the actual HackASet event. It's open to the world [03:29.400] [03:29.400]now and it's going to be super cool. So a little anxiety, but we are good to go and I'm really [03:36.080] [03:36.080]excited. I'm more excited about the virtual event than I would have been doing a live event at DEF [03:42.020] [03:42.020]CON. And don't get me wrong, it would be awesome to have an event, a live event with people [03:47.780] [03:47.780]attending, being able to shake hands and give high fives to the team that pull off what is going to [03:53.680] [03:53.680]be a very difficult challenge. But the virtual event is going to allow so many more people to [04:00.720] [04:00.720]be part of this experience, part of the community that gets to attempt this for the very first time [04:07.440] [04:07.440]at DEF CON. And I am so much more excited about a bigger community than I am about putting up a [04:14.140] [04:14.140]stage at Las Vegas and then taking it down after the event is over. We got to do this a few months [04:20.640] [04:20.640]ago when we were kicking off our flying car program. Long story, but pretty awesome that we're [04:26.400] [04:26.620]creating a new initiative to accelerate flying cars for the country. Well, that program was [04:31.660] [04:31.660]supposed to be a major kickoff at South by Southwest, which canceled. And we had to decide [04:36.840] [04:36.840]what do we do. Well, we kept the event rolling through a virtual event and had over 60,000 people [04:44.400] [04:44.920]participate. We would have never had that number be able to make it down to Austin and get to an [04:51.040] [04:51.040]event that could probably hold no more than 2,000 tops. So the potential for a greater community is [04:57.640] [04:57.640]huge doing the event this way. We will still get all of the cool factor from multiple hacker teams [05:04.020] [05:04.020]having the opportunity to let their code run live in space, which is just an awesome opportunity. [05:10.380] [05:10.660]But imagine this, Roro. We had over 2,000 different teams just go through the qualls. [05:17.360] [05:17.360]We had over 6,000 people who have already raised their hand to be a hands-on participant. [05:23.160] [05:23.160]So who knows how many people will tune in during this week. But the opportunity to have a broad [05:28.800] [05:28.800]group of people is the most exciting thing about being virtual. And I hope everyone that is logging [05:34.540] [05:34.540]and participating, I hope that you're safe and well. So we're super excited that besides [05:40.420] [05:40.420]HackASet, we are also having a series of workshops. We have bricks in the air again. We have a ground [05:47.700] [05:47.700]station exercise. Now the thing that's important here is HackASet was extraordinarily competitive. [05:54.780] [05:54.780]You know, as Will mentioned, thousands of folks tried out for it, and it got narrowed down to [05:59.900] [05:59.900]eight teams. That's right. And so we have eight rock star teams doing that. But part of what we [06:08.160] [06:08.160]want to do here is help people learn about the variety of technologies. Because what's really [06:14.480] [06:14.480]interesting to me is, this is a different type of hacking. This is not your traditional going after [06:21.820] [06:22.000]a web property or a traditional software app. There's a new set of skills to learn. So we have [06:28.560] [06:28.560]workshops all available via VR, ranging from beginner level all the way up to advanced. Because [06:35.940] [06:35.940]we want to help you learn more about the tooling and the skills you need for these types of systems. [06:41.160] [06:41.160]And then when you get toward advanced, then you'll be ready to work on the HackASet type of [06:46.400] [06:46.400]events. So we have the full stack ready for you. Remember my favorite comment coming out of one of [06:52.200] [06:52.200]the teammates that participated in the qualls was, I didn't know I needed a degree in physics to hack [06:58.240] [06:58.400]a satellite. We don't actually need the degree, but you do need to know a little about physics [07:03.540] [07:03.540]to hack it. And part of the purpose of these workshops are to introduce the peculiar new [07:08.960] [07:08.960]trade craft that will be needed so that you can take hacker skills you have today [07:13.140] [07:13.140]and apply them to these very different opportunities in space and in the air. [07:17.900] [07:17.940]So like I think we really crushed like doing the virtual piece. What do we do about stickers? [07:24.820] [07:25.140]Like the whole Defcon sticker swap? A little stressful. Maybe we could do them like Bitcoin. [07:32.340] [07:32.920]Crypto coins. That could be the new... because I can't give coins out right now. I have a bunch [07:36.960] [07:36.960]in my office. I can't. So we can mail them, but crypto coins could be the wave of the future. [07:41.360] [07:41.420]Yeah, for everyone watching, everyone in the Pentagon has coins. There are things that you give [07:45.480] [07:45.480]out when someone's really done something great or helped you out. So it goes well back in military [07:51.540] [07:51.540]tradition, but you give them out via handshake. With the coin in your hand, you shake hands. It [07:57.440] [07:57.440]transfers from one person to the other. So COVID-19 has put a serious dent in this time-honored [08:03.800] [08:03.800]tradition. So crypto coins... So you spray the coin first, right? But then it gets, it's a hot mess. [08:09.860] [08:09.860]It's even worse than that. We have them in little plastic bags and we dump them from one hand to [08:15.520] [08:15.520]the other. It completely has lost the sense of ceremony. So you have to open the bag first, [08:20.760] [08:20.760]then dump them in the hand. It's just, there's no way to say, congratulations, stick out your hand [08:24.860] [08:24.860]and then dump a coin in it, right? The firm handshake is needed to say, thank you for what [08:29.680] [08:29.680]you've done. [08:30.260]