[00:05.820 --> 00:11.820]  For the F-15 system, it was really to probe just how many different ways that people get in.
[00:11.820 --> 00:18.320]  Do we have a design flaw? Is it a design flaw? Is it a hardware flaw where we've got embedded
[00:18.320 --> 00:23.520]  systems that have back doors that can be accessed? Is it a software flaw? Or is it a little bit of
[00:23.520 --> 00:29.320]  all of the above? It's a little bit of all of the above. And so after doing a meeting with
[00:29.320 --> 00:33.820]  the hackers that got in, they walked through. I tried this and it worked. Then I tried this
[00:33.820 --> 00:38.740]  next path and it worked. And just like electricity always flowing through the path of least
[00:38.740 --> 00:44.300]  resistance, they kept trying methods. It got increasingly harder, but they didn't have to pull
[00:44.300 --> 00:50.200]  their toughest tricks to get in. So the direction I think we're going, that we ought to go,
[00:50.200 --> 00:55.800]  is fully embracing the hacker community at DEF CON and not waiting until systems are built
[00:55.800 --> 01:01.940]  to create opportunities to learn and help us learn. We should bring the hacker community
[01:01.940 --> 01:09.220]  into systems as we design them. Help us make them more secure before we're producing them.
[01:09.220 --> 01:15.720]  And I think this could be win-win. We would learn a ton from this community, but also create some of
[01:15.720 --> 01:20.500]  the most interesting challenges because the systems we build are unique. They have some
[01:20.500 --> 01:25.480]  pretty amazing technology in them and I think the opportunity for the hacker community to get
[01:25.480 --> 01:31.680]  new hands-on experience would also be really energizing and cool. So events like HackASAT
[01:31.680 --> 01:38.440]  are awesome, live events, but the relationship and continuing it across a broader set of
[01:38.440 --> 01:45.940]  opportunities is what's more exciting. There's an interesting synergy between, one, the hacker
[01:45.940 --> 01:53.940]  community can touch devices you never would think you'd be allowed to touch. Weapons, satellites,
[01:53.940 --> 02:02.380]  all the things that are pretty cool. It also helps us learn commonalities where we build a lot
[02:02.380 --> 02:09.940]  of different things. And by learning those base cases of things we should do and should not do,
[02:09.940 --> 02:16.270]  that helps the design. But at the same time, people need to understand that there's a
[02:16.940 --> 02:22.660]  creativity to hacking. We often in the military, we think about checklists and spreadsheets and
[02:22.660 --> 02:28.420]  things like that. But I know people who have done red team and hacking exercises,
[02:28.420 --> 02:34.360]  it's much more of an art. And we want to bring that art into making our system safer.
[02:35.380 --> 02:40.580]  So we started this planning a little bit last year and then COVID hit. How did that change the plans?
[02:42.920 --> 02:49.720]  So there were moments where it was insanely stressful, where it's we are charging ahead
[02:49.720 --> 02:55.500]  and I'm sitting there, oh my god, what's going to happen with DEF CON? But then we realized
[02:55.500 --> 03:02.520]  we're perfectly situated for a virtual event. We have a VR environment, we have all of these
[03:02.520 --> 03:08.320]  workshops, everything is now accessible from anywhere. And where I think it's really interesting
[03:08.320 --> 03:15.360]  is we can now provide access to these workshops at a much larger scale. Whereas last year,
[03:15.360 --> 03:21.360]  the workshops were awesome, but we were swamped. But now in the VR environment, we can take
[03:21.920 --> 03:29.400]  thousands of people and also for access to the actual HackASet event. It's open to the world
[03:29.400 --> 03:36.080]  now and it's going to be super cool. So a little anxiety, but we are good to go and I'm really
[03:36.080 --> 03:42.020]  excited. I'm more excited about the virtual event than I would have been doing a live event at DEF
[03:42.020 --> 03:47.780]  CON. And don't get me wrong, it would be awesome to have an event, a live event with people
[03:47.780 --> 03:53.680]  attending, being able to shake hands and give high fives to the team that pull off what is going to
[03:53.680 --> 04:00.720]  be a very difficult challenge. But the virtual event is going to allow so many more people to
[04:00.720 --> 04:07.440]  be part of this experience, part of the community that gets to attempt this for the very first time
[04:07.440 --> 04:14.140]  at DEF CON. And I am so much more excited about a bigger community than I am about putting up a
[04:14.140 --> 04:20.640]  stage at Las Vegas and then taking it down after the event is over. We got to do this a few months
[04:20.640 --> 04:26.400]  ago when we were kicking off our flying car program. Long story, but pretty awesome that we're
[04:26.620 --> 04:31.660]  creating a new initiative to accelerate flying cars for the country. Well, that program was
[04:31.660 --> 04:36.840]  supposed to be a major kickoff at South by Southwest, which canceled. And we had to decide
[04:36.840 --> 04:44.400]  what do we do. Well, we kept the event rolling through a virtual event and had over 60,000 people
[04:44.920 --> 04:51.040]  participate. We would have never had that number be able to make it down to Austin and get to an
[04:51.040 --> 04:57.640]  event that could probably hold no more than 2,000 tops. So the potential for a greater community is
[04:57.640 --> 05:04.020]  huge doing the event this way. We will still get all of the cool factor from multiple hacker teams
[05:04.020 --> 05:10.380]  having the opportunity to let their code run live in space, which is just an awesome opportunity.
[05:10.660 --> 05:17.360]  But imagine this, Roro. We had over 2,000 different teams just go through the qualls.
[05:17.360 --> 05:23.160]  We had over 6,000 people who have already raised their hand to be a hands-on participant.
[05:23.160 --> 05:28.800]  So who knows how many people will tune in during this week. But the opportunity to have a broad
[05:28.800 --> 05:34.540]  group of people is the most exciting thing about being virtual. And I hope everyone that is logging
[05:34.540 --> 05:40.420]  and participating, I hope that you're safe and well. So we're super excited that besides
[05:40.420 --> 05:47.700]  HackASet, we are also having a series of workshops. We have bricks in the air again. We have a ground
[05:47.700 --> 05:54.780]  station exercise. Now the thing that's important here is HackASet was extraordinarily competitive.
[05:54.780 --> 05:59.900]  You know, as Will mentioned, thousands of folks tried out for it, and it got narrowed down to
[05:59.900 --> 06:08.160]  eight teams. That's right. And so we have eight rock star teams doing that. But part of what we
[06:08.160 --> 06:14.480]  want to do here is help people learn about the variety of technologies. Because what's really
[06:14.480 --> 06:21.820]  interesting to me is, this is a different type of hacking. This is not your traditional going after
[06:22.000 --> 06:28.560]  a web property or a traditional software app. There's a new set of skills to learn. So we have
[06:28.560 --> 06:35.940]  workshops all available via VR, ranging from beginner level all the way up to advanced. Because
[06:35.940 --> 06:41.160]  we want to help you learn more about the tooling and the skills you need for these types of systems.
[06:41.160 --> 06:46.400]  And then when you get toward advanced, then you'll be ready to work on the HackASet type of
[06:46.400 --> 06:52.200]  events. So we have the full stack ready for you. Remember my favorite comment coming out of one of
[06:52.200 --> 06:58.240]  the teammates that participated in the qualls was, I didn't know I needed a degree in physics to hack
[06:58.400 --> 07:03.540]  a satellite. We don't actually need the degree, but you do need to know a little about physics
[07:03.540 --> 07:08.960]  to hack it. And part of the purpose of these workshops are to introduce the peculiar new
[07:08.960 --> 07:13.140]  trade craft that will be needed so that you can take hacker skills you have today
[07:13.140 --> 07:17.900]  and apply them to these very different opportunities in space and in the air.
[07:17.940 --> 07:24.820]  So like I think we really crushed like doing the virtual piece. What do we do about stickers?
[07:25.140 --> 07:32.340]  Like the whole Defcon sticker swap? A little stressful. Maybe we could do them like Bitcoin.
[07:32.920 --> 07:36.960]  Crypto coins. That could be the new... because I can't give coins out right now. I have a bunch
[07:36.960 --> 07:41.360]  in my office. I can't. So we can mail them, but crypto coins could be the wave of the future.
[07:41.420 --> 07:45.480]  Yeah, for everyone watching, everyone in the Pentagon has coins. There are things that you give
[07:45.480 --> 07:51.540]  out when someone's really done something great or helped you out. So it goes well back in military
[07:51.540 --> 07:57.440]  tradition, but you give them out via handshake. With the coin in your hand, you shake hands. It
[07:57.440 --> 08:03.800]  transfers from one person to the other. So COVID-19 has put a serious dent in this time-honored
[08:03.800 --> 08:09.860]  tradition. So crypto coins... So you spray the coin first, right? But then it gets, it's a hot mess.
[08:09.860 --> 08:15.520]  It's even worse than that. We have them in little plastic bags and we dump them from one hand to
[08:15.520 --> 08:20.760]  the other. It completely has lost the sense of ceremony. So you have to open the bag first,
[08:20.760 --> 08:24.860]  then dump them in the hand. It's just, there's no way to say, congratulations, stick out your hand
[08:24.860 --> 08:29.680]  and then dump a coin in it, right? The firm handshake is needed to say, thank you for what
[08:29.680 --> 08:30.260]  you've done.