WEBVTT 00:05.820 --> 00:11.820 For the F-15 system, it was really to probe just how many different ways that people get in. 00:11.820 --> 00:13.660 Do we have a design flaw? 00:13.660 --> 00:15.060 Is it a design flaw? 00:15.060 --> 00:21.200 Is it a hardware flaw where we've got embedded systems that have back doors that can be accessed? 00:21.240 --> 00:22.620 Is it a software flaw? 00:22.620 --> 00:24.680 Or is it a little bit of all of the above? 00:24.840 --> 00:26.760 It's a little bit of all of the above. 00:27.000 --> 00:31.840 And so after doing a meeting with the hackers that got in, they walked through. 00:31.840 --> 00:33.160 I tried this and it worked. 00:33.160 --> 00:35.100 Then I tried this next path and it worked. 00:35.100 --> 00:41.200 And just like electricity always flowing through the path of least resistance, they kept trying methods. 00:41.200 --> 00:46.780 It got increasingly harder, but they didn't have to pull their toughest tricks to get in. 00:46.780 --> 01:00.360 So the direction I think we're going, that we ought to go, is fully embracing the hacker community at DEF CON and not waiting until systems are built to create opportunities to learn and help us learn. 01:00.360 --> 01:05.160 We should bring the hacker community into systems as we design them. 01:05.160 --> 01:09.220 Help us make them more secure before we're producing them. 01:09.220 --> 01:11.220 And I think this could be win-win. 01:11.220 --> 01:20.000 We would learn a ton from this community, but also create some of the most interesting challenges because the systems we build are unique. 01:20.000 --> 01:30.440 They have some pretty amazing technology in them and I think the opportunity for the hacker community to get new hands-on experience would also be really energizing and cool. 01:30.480 --> 01:40.840 So events like HackASAT are awesome, live events, but the relationship and continuing it across a broader set of opportunities is what's more exciting. 01:40.840 --> 01:51.740 There's an interesting synergy between, one, the hacker community can touch devices you never would think you'd be allowed to touch. 01:51.880 --> 01:57.200 Weapons, satellites, all the things that are pretty cool. 01:57.320 --> 02:04.300 It also helps us learn commonalities where we build a lot of different things. 02:04.360 --> 02:11.620 And by learning those base cases of things we should do and should not do, that helps the design. 02:11.620 --> 02:18.120 But at the same time, people need to understand that there's a creativity to hacking. 02:18.120 --> 02:23.820 We often in the military, we think about checklists and spreadsheets and things like that. 02:24.060 --> 02:30.580 But I know people who have done red team and hacking exercises, it's much more of an art. 02:30.700 --> 02:34.360 And we want to bring that art into making our system safer. 02:35.380 --> 02:39.260 So we started this planning a little bit last year and then COVID hit. 02:39.260 --> 02:40.580 How did that change the plans? 02:42.920 --> 02:54.040 So there were moments where it was insanely stressful, where it's we are charging ahead and I'm sitting there, oh my god, what's going to happen with DEF CON? 02:54.040 --> 02:59.400 But then we realized we're perfectly situated for a virtual event. 02:59.580 --> 03:06.740 We have a VR environment, we have all of these workshops, everything is now accessible from anywhere. 03:06.800 --> 03:13.640 And where I think it's really interesting is we can now provide access to these workshops at a much larger scale. 03:13.660 --> 03:19.200 Whereas last year, the workshops were awesome, but we were swamped. 03:19.200 --> 03:27.880 But now in the VR environment, we can take thousands of people and also for access to the actual HackASet event. 03:28.100 --> 03:31.560 It's open to the world now and it's going to be super cool. 03:31.560 --> 03:37.040 So a little anxiety, but we are good to go and I'm really excited. 03:37.040 --> 03:42.280 I'm more excited about the virtual event than I would have been doing a live event at DEF CON. 03:42.280 --> 03:56.080 And don't get me wrong, it would be awesome to have an event, a live event with people attending, being able to shake hands and give high fives to the team that pull off what is going to be a very difficult challenge. 03:56.200 --> 04:08.520 But the virtual event is going to allow so many more people to be part of this experience, part of the community that gets to attempt this for the very first time at DEF CON. 04:08.520 --> 04:18.060 And I am so much more excited about a bigger community than I am about putting up a stage at Las Vegas and then taking it down after the event is over. 04:18.060 --> 04:23.700 We got to do this a few months ago when we were kicking off our flying car program. 04:23.700 --> 04:30.380 Long story, but pretty awesome that we're creating a new initiative to accelerate flying cars for the country. 04:30.520 --> 04:35.820 Well, that program was supposed to be a major kickoff at South by Southwest, which canceled. 04:35.820 --> 04:38.520 And we had to decide what do we do. 04:38.520 --> 04:45.680 Well, we kept the event rolling through a virtual event and had over 60,000 people participate. 04:45.680 --> 04:54.620 We would have never had that number be able to make it down to Austin and get to an event that could probably hold no more than 2,000 tops. 04:54.680 --> 05:00.000 So the potential for a greater community is huge doing the event this way. 05:00.000 --> 05:10.380 We will still get all of the cool factor from multiple hacker teams having the opportunity to let their code run live in space, which is just an awesome opportunity. 05:10.660 --> 05:12.300 But imagine this, Roro. 05:12.300 --> 05:17.360 We had over 2,000 different teams just go through the qualls. 05:17.360 --> 05:23.160 We had over 6,000 people who have already raised their hand to be a hands-on participant. 05:23.160 --> 05:26.720 So who knows how many people will tune in during this week. 05:26.720 --> 05:32.520 But the opportunity to have a broad group of people is the most exciting thing about being virtual. 05:32.520 --> 05:37.320 And I hope everyone that is logging and participating, I hope that you're safe and well. 05:37.320 --> 05:44.240 So we're super excited that besides HackASet, we are also having a series of workshops. 05:44.300 --> 05:46.720 We have bricks in the air again. 05:46.860 --> 05:49.380 We have a ground station exercise. 05:49.440 --> 05:54.780 Now the thing that's important here is HackASet was extraordinarily competitive. 05:54.780 --> 06:02.320 You know, as Will mentioned, thousands of folks tried out for it, and it got narrowed down to eight teams. 06:02.320 --> 06:02.980 That's right. 06:02.980 --> 06:06.880 And so we have eight rock star teams doing that. 06:06.880 --> 06:13.480 But part of what we want to do here is help people learn about the variety of technologies. 06:13.480 --> 06:18.720 Because what's really interesting to me is, this is a different type of hacking. 06:18.720 --> 06:25.380 This is not your traditional going after a web property or a traditional software app. 06:25.380 --> 06:27.920 There's a new set of skills to learn. 06:27.920 --> 06:35.680 So we have workshops all available via VR, ranging from beginner level all the way up to advanced. 06:35.680 --> 06:41.160 Because we want to help you learn more about the tooling and the skills you need for these types of systems. 06:41.160 --> 06:47.180 And then when you get toward advanced, then you'll be ready to work on the HackASet type of events. 06:47.180 --> 06:49.680 So we have the full stack ready for you. 06:49.740 --> 06:59.260 Remember my favorite comment coming out of one of the teammates that participated in the qualls was, I didn't know I needed a degree in physics to hack a satellite. 06:59.560 --> 07:04.280 We don't actually need the degree, but you do need to know a little about physics to hack it. 07:04.280 --> 07:17.900 And part of the purpose of these workshops are to introduce the peculiar new trade craft that will be needed so that you can take hacker skills you have today and apply them to these very different opportunities in space and in the air. 07:17.940 --> 07:22.880 So like I think we really crushed like doing the virtual piece. 07:22.880 --> 07:24.820 What do we do about stickers? 07:25.140 --> 07:27.900 Like the whole Defcon sticker swap? 07:28.500 --> 07:29.840 A little stressful. 07:29.980 --> 07:32.340 Maybe we could do them like Bitcoin. 07:32.920 --> 07:34.080 Crypto coins. 07:34.080 --> 07:36.480 That could be the new... because I can't give coins out right now. 07:36.480 --> 07:37.640 I have a bunch in my office. 07:37.640 --> 07:38.440 I can't. 07:38.560 --> 07:41.360 So we can mail them, but crypto coins could be the wave of the future. 07:41.420 --> 07:44.380 Yeah, for everyone watching, everyone in the Pentagon has coins. 07:44.380 --> 07:49.560 There are things that you give out when someone's really done something great or helped you out. 07:49.560 --> 07:54.800 So it goes well back in military tradition, but you give them out via handshake. 07:54.800 --> 07:57.360 With the coin in your hand, you shake hands. 07:57.360 --> 07:59.360 It transfers from one person to the other. 07:59.360 --> 08:04.640 So COVID-19 has put a serious dent in this time-honored tradition. 08:04.660 --> 08:08.180 So crypto coins... So you spray the coin first, right? 08:08.180 --> 08:09.860 But then it gets, it's a hot mess. 08:09.860 --> 08:11.000 It's even worse than that. 08:11.000 --> 08:16.040 We have them in little plastic bags and we dump them from one hand to the other. 08:16.040 --> 08:18.860 It completely has lost the sense of ceremony. 08:19.120 --> 08:21.940 So you have to open the bag first, then dump them in the hand. 08:21.940 --> 08:26.720 It's just, there's no way to say, congratulations, stick out your hand and then dump a coin in it, right? 08:26.720 --> 08:30.260 The firm handshake is needed to say, thank you for what you've done.