1
00:00:05,820 --> 00:00:11,820
For the F-15 system, it was really to probe just how many different ways that people get in.

2
00:00:11,820 --> 00:00:13,660
Do we have a design flaw?

3
00:00:13,660 --> 00:00:15,060
Is it a design flaw?

4
00:00:15,060 --> 00:00:21,200
Is it a hardware flaw where we've got embedded systems that have back doors that can be accessed?

5
00:00:21,240 --> 00:00:22,620
Is it a software flaw?

6
00:00:22,620 --> 00:00:24,680
Or is it a little bit of all of the above?

7
00:00:24,840 --> 00:00:26,760
It's a little bit of all of the above.

8
00:00:27,000 --> 00:00:31,840
And so after doing a meeting with the hackers that got in, they walked through.

9
00:00:31,840 --> 00:00:33,160
I tried this and it worked.

10
00:00:33,160 --> 00:00:35,100
Then I tried this next path and it worked.

11
00:00:35,100 --> 00:00:41,200
And just like electricity always flowing through the path of least resistance, they kept trying methods.

12
00:00:41,200 --> 00:00:46,780
It got increasingly harder, but they didn't have to pull their toughest tricks to get in.

13
00:00:46,780 --> 00:01:00,360
So the direction I think we're going, that we ought to go, is fully embracing the hacker community at DEF CON and not waiting until systems are built to create opportunities to learn and help us learn.

14
00:01:00,360 --> 00:01:05,160
We should bring the hacker community into systems as we design them.

15
00:01:05,160 --> 00:01:09,220
Help us make them more secure before we're producing them.

16
00:01:09,220 --> 00:01:11,220
And I think this could be win-win.

17
00:01:11,220 --> 00:01:20,000
We would learn a ton from this community, but also create some of the most interesting challenges because the systems we build are unique.

18
00:01:20,000 --> 00:01:30,440
They have some pretty amazing technology in them and I think the opportunity for the hacker community to get new hands-on experience would also be really energizing and cool.

19
00:01:30,480 --> 00:01:40,840
So events like HackASAT are awesome, live events, but the relationship and continuing it across a broader set of opportunities is what's more exciting.

20
00:01:40,840 --> 00:01:51,740
There's an interesting synergy between, one, the hacker community can touch devices you never would think you'd be allowed to touch.

21
00:01:51,880 --> 00:01:57,200
Weapons, satellites, all the things that are pretty cool.

22
00:01:57,320 --> 00:02:04,300
It also helps us learn commonalities where we build a lot of different things.

23
00:02:04,360 --> 00:02:11,620
And by learning those base cases of things we should do and should not do, that helps the design.

24
00:02:11,620 --> 00:02:18,120
But at the same time, people need to understand that there's a creativity to hacking.

25
00:02:18,120 --> 00:02:23,820
We often in the military, we think about checklists and spreadsheets and things like that.

26
00:02:24,060 --> 00:02:30,580
But I know people who have done red team and hacking exercises, it's much more of an art.

27
00:02:30,700 --> 00:02:34,360
And we want to bring that art into making our system safer.

28
00:02:35,380 --> 00:02:39,260
So we started this planning a little bit last year and then COVID hit.

29
00:02:39,260 --> 00:02:40,580
How did that change the plans?

30
00:02:42,920 --> 00:02:54,040
So there were moments where it was insanely stressful, where it's we are charging ahead and I'm sitting there, oh my god, what's going to happen with DEF CON?

31
00:02:54,040 --> 00:02:59,400
But then we realized we're perfectly situated for a virtual event.

32
00:02:59,580 --> 00:03:06,740
We have a VR environment, we have all of these workshops, everything is now accessible from anywhere.

33
00:03:06,800 --> 00:03:13,640
And where I think it's really interesting is we can now provide access to these workshops at a much larger scale.

34
00:03:13,660 --> 00:03:19,200
Whereas last year, the workshops were awesome, but we were swamped.

35
00:03:19,200 --> 00:03:27,880
But now in the VR environment, we can take thousands of people and also for access to the actual HackASet event.

36
00:03:28,100 --> 00:03:31,560
It's open to the world now and it's going to be super cool.

37
00:03:31,560 --> 00:03:37,040
So a little anxiety, but we are good to go and I'm really excited.

38
00:03:37,040 --> 00:03:42,280
I'm more excited about the virtual event than I would have been doing a live event at DEF CON.

39
00:03:42,280 --> 00:03:56,080
And don't get me wrong, it would be awesome to have an event, a live event with people attending, being able to shake hands and give high fives to the team that pull off what is going to be a very difficult challenge.

40
00:03:56,200 --> 00:04:08,520
But the virtual event is going to allow so many more people to be part of this experience, part of the community that gets to attempt this for the very first time at DEF CON.

41
00:04:08,520 --> 00:04:18,060
And I am so much more excited about a bigger community than I am about putting up a stage at Las Vegas and then taking it down after the event is over.

42
00:04:18,060 --> 00:04:23,700
We got to do this a few months ago when we were kicking off our flying car program.

43
00:04:23,700 --> 00:04:30,380
Long story, but pretty awesome that we're creating a new initiative to accelerate flying cars for the country.

44
00:04:30,520 --> 00:04:35,820
Well, that program was supposed to be a major kickoff at South by Southwest, which canceled.

45
00:04:35,820 --> 00:04:38,520
And we had to decide what do we do.

46
00:04:38,520 --> 00:04:45,680
Well, we kept the event rolling through a virtual event and had over 60,000 people participate.

47
00:04:45,680 --> 00:04:54,620
We would have never had that number be able to make it down to Austin and get to an event that could probably hold no more than 2,000 tops.

48
00:04:54,680 --> 00:05:00,000
So the potential for a greater community is huge doing the event this way.

49
00:05:00,000 --> 00:05:10,380
We will still get all of the cool factor from multiple hacker teams having the opportunity to let their code run live in space, which is just an awesome opportunity.

50
00:05:10,660 --> 00:05:12,300
But imagine this, Roro.

51
00:05:12,300 --> 00:05:17,360
We had over 2,000 different teams just go through the qualls.

52
00:05:17,360 --> 00:05:23,160
We had over 6,000 people who have already raised their hand to be a hands-on participant.

53
00:05:23,160 --> 00:05:26,720
So who knows how many people will tune in during this week.

54
00:05:26,720 --> 00:05:32,520
But the opportunity to have a broad group of people is the most exciting thing about being virtual.

55
00:05:32,520 --> 00:05:37,320
And I hope everyone that is logging and participating, I hope that you're safe and well.

56
00:05:37,320 --> 00:05:44,240
So we're super excited that besides HackASet, we are also having a series of workshops.

57
00:05:44,300 --> 00:05:46,720
We have bricks in the air again.

58
00:05:46,860 --> 00:05:49,380
We have a ground station exercise.

59
00:05:49,440 --> 00:05:54,780
Now the thing that's important here is HackASet was extraordinarily competitive.

60
00:05:54,780 --> 00:06:02,320
You know, as Will mentioned, thousands of folks tried out for it, and it got narrowed down to eight teams.

61
00:06:02,320 --> 00:06:02,980
That's right.

62
00:06:02,980 --> 00:06:06,880
And so we have eight rock star teams doing that.

63
00:06:06,880 --> 00:06:13,480
But part of what we want to do here is help people learn about the variety of technologies.

64
00:06:13,480 --> 00:06:18,720
Because what's really interesting to me is, this is a different type of hacking.

65
00:06:18,720 --> 00:06:25,380
This is not your traditional going after a web property or a traditional software app.

66
00:06:25,380 --> 00:06:27,920
There's a new set of skills to learn.

67
00:06:27,920 --> 00:06:35,680
So we have workshops all available via VR, ranging from beginner level all the way up to advanced.

68
00:06:35,680 --> 00:06:41,160
Because we want to help you learn more about the tooling and the skills you need for these types of systems.

69
00:06:41,160 --> 00:06:47,180
And then when you get toward advanced, then you'll be ready to work on the HackASet type of events.

70
00:06:47,180 --> 00:06:49,680
So we have the full stack ready for you.

71
00:06:49,740 --> 00:06:59,260
Remember my favorite comment coming out of one of the teammates that participated in the qualls was, I didn't know I needed a degree in physics to hack a satellite.

72
00:06:59,560 --> 00:07:04,280
We don't actually need the degree, but you do need to know a little about physics to hack it.

73
00:07:04,280 --> 00:07:17,900
And part of the purpose of these workshops are to introduce the peculiar new trade craft that will be needed so that you can take hacker skills you have today and apply them to these very different opportunities in space and in the air.

74
00:07:17,940 --> 00:07:22,880
So like I think we really crushed like doing the virtual piece.

75
00:07:22,880 --> 00:07:24,820
What do we do about stickers?

76
00:07:25,140 --> 00:07:27,900
Like the whole Defcon sticker swap?

77
00:07:28,500 --> 00:07:29,840
A little stressful.

78
00:07:29,980 --> 00:07:32,340
Maybe we could do them like Bitcoin.

79
00:07:32,920 --> 00:07:34,080
Crypto coins.

80
00:07:34,080 --> 00:07:36,480
That could be the new... because I can't give coins out right now.

81
00:07:36,480 --> 00:07:37,640
I have a bunch in my office.

82
00:07:37,640 --> 00:07:38,440
I can't.

83
00:07:38,560 --> 00:07:41,360
So we can mail them, but crypto coins could be the wave of the future.

84
00:07:41,420 --> 00:07:44,380
Yeah, for everyone watching, everyone in the Pentagon has coins.

85
00:07:44,380 --> 00:07:49,560
There are things that you give out when someone's really done something great or helped you out.

86
00:07:49,560 --> 00:07:54,800
So it goes well back in military tradition, but you give them out via handshake.

87
00:07:54,800 --> 00:07:57,360
With the coin in your hand, you shake hands.

88
00:07:57,360 --> 00:07:59,360
It transfers from one person to the other.

89
00:07:59,360 --> 00:08:04,640
So COVID-19 has put a serious dent in this time-honored tradition.

90
00:08:04,660 --> 00:08:08,180
So crypto coins... So you spray the coin first, right?

91
00:08:08,180 --> 00:08:09,860
But then it gets, it's a hot mess.

92
00:08:09,860 --> 00:08:11,000
It's even worse than that.

93
00:08:11,000 --> 00:08:16,040
We have them in little plastic bags and we dump them from one hand to the other.

94
00:08:16,040 --> 00:08:18,860
It completely has lost the sense of ceremony.

95
00:08:19,120 --> 00:08:21,940
So you have to open the bag first, then dump them in the hand.

96
00:08:21,940 --> 00:08:26,720
It's just, there's no way to say, congratulations, stick out your hand and then dump a coin in it, right?

97
00:08:26,720 --> 00:08:30,260
The firm handshake is needed to say, thank you for what you've done.