start	end	text
8420	11380	I kid you not. Okay, this shows age.
12600	14600	We're doing a talk, so we're going to have some fun.
14720	18420	You realize I'm going to piss you off because I'm going to walk backwards and forwards on this stage.
19060	23160	This shows age. I still have, so...
23160	27840	I think I still have the Polaroid that I took out of the window
29060	33200	of the Flamingo looking over the Bellagio and the tall shower
33200	37200	that they have over there from 20-odd years ago when my daughter...
37760	40320	Once upon a time, I tried this whole marriage thing.
41540	45340	I ended up getting married 20... it was actually 20 years ago.
45340	50400	Because Morgan was born in 2003. Here we are, 2023.
50740	54920	I still got the one freaking Polaroid from the White Chapel wedding chapel place
54920	57040	from 20 years ago in this freaking place.
57040	60460	And that was, I think, whatever it was, DEF CON 10 or 11.
60460	63120	DEF CON 11. What are we, 31 this year, isn't it?
64360	68160	Jeez. First one, I think, was like number 6 or number 7.
68780	71180	So I just dated my... I can't do this.
71880	77460	I need my hands. Sorry. I need hands. I got to do hands. Is that all right?
77480	79620	You're going to hate me. Anyway, I'm doing hands.
79620	81960	All right, so we're going to have a talk.
82520	86100	And we're going to talk about the human aspect of things.
86660	90480	How many of you are here for the first time? Start with an easy one.
90480	92480	Holy sh... Bloody hell.
93020	95020	Well, first and foremost, welcome.
95720	99920	Secondly, those of us that have been here numerous times,
99920	104400	find one of these people that's here first time and help them.
105180	110140	DEF CON has gone to the point where even I have to find a map to figure out where the hell I'm going.
110400	113260	Okay, so there are a lot of people here who have not been here.
113260	115640	This is family.
116440	120240	You help people here. All right? First and foremost.
120560	122980	How many of you are following .mil or .gov?
124000	124880	Family.
125440	129740	You help each other. You collaborate with each other.
129840	132800	Do you find somebody getting lost? Do you find somebody that doesn't know the way around?
132800	135040	Take them under your wing and have fun with them.
135040	137680	Don't get them drunk and get pictures of them on the Internet.
140460	141940	That's happened before.
142760	146860	Do not fall asleep at DEF CON in an open area.
146860	151480	You will wake up. There will be ink on your face.
151620	154040	There will be... just don't do it.
154180	156800	20 years ago, the worst you had was a Polaroid.
156800	160840	This day, it's going to end up all over the bloody Internet. Let's face it.
161940	164980	For me, in this day and age,
165580	170000	this whole conference is about seeing people.
170000	173620	I come here to catch up with family.
173740	174800	Front row.
174920	177560	I come here to catch up with people I know.
177560	180200	I come here, honestly, probably like a lot of you,
180200	183360	to see what's out there work-wise as well.
183840	185920	How many of you here are looking for jobs?
187160	188040	OK.
189320	191260	Those of you that are looking for people,
191260	192980	now you know who to talk with.
193300	195720	There was somebody wandering around with a breadboard just now
195720	197540	for somebody that was looking for a job.
198800	201200	This whole industry,
201200	205840	for 20, 30, 40 years,
205840	207900	we've been talking about technology.
208140	211300	We've chased technology.
211400	214020	And we've forgotten about the human.
215280	217700	I remember the days, years ago,
217700	219420	when we would stand up on stage
219420	222380	and we would lament the user.
222820	225200	The user kept clicking shit.
225200	226800	The user kept moving stuff.
226800	228160	The user wouldn't listen.
228160	229360	The user did this.
229360	230940	The user did that.
231120	232380	We blamed them.
232800	234460	And then when the user wouldn't change,
234460	236080	we blamed the network team.
238420	241140	And then, because the network team actually fought back,
241140	242860	because they're geeks as well,
242860	244080	we blamed the DBH,
244080	244900	because they're weird,
244900	246480	and they smell,
246480	248580	and they're normally in the dark in the corner somewhere.
248580	249680	They're easy to blame.
249680	250420	It was kind of fun.
250420	252220	They do weird database shit.
252720	255080	And then when we couldn't blame them anymore,
255080	257500	we blamed leadership.
257940	259880	The CFO won't give me money.
259880	262240	The CEO doesn't listen.
262240	264440	The CISO's an arse.
264840	266320	CISO.
266340	269480	CTO doesn't want to talk with me.
269860	272240	Chief of Engineering doesn't care.
273420	276800	What we failed to do
276800	279320	was look in the mirror.
280800	283400	What we failed to do was go,
283400	286700	how can we do differently?
287120	290480	How can we talk with,
290480	291960	not talk to,
291960	296220	but how can we talk with people differently?
297140	300100	I run a reasonable-sized team.
300100	302620	I run a reasonable-sized organization.
303340	305280	We build supersonic airplanes.
305280	306120	We're building.
306120	308640	Today, 11th of August,
309100	311400	we are, touch wood,
311400	313080	going through type approval
313080	314620	for our experimental jet
314620	317160	three and a half hours from here in Mojave.
317640	319980	That means we can actually do testing
320560	322600	faster than walking pace.
322660	323900	For those of you who know about
323900	326180	building engines and airplanes and shit,
326180	327880	you get to a point of no return.
327880	330120	So as you test this thing going up and down the runway,
330120	331100	if you're going fast enough,
331100	332860	your exit strategy is
333260	336020	throw a throttle and get the thing off the ground
336020	337200	and hope for the best.
337260	340040	That's where we're at with the experimental jet.
340840	341640	That's it.
341640	343420	A team of humans have been sitting in sheds
343420	344660	for goodness knows how many years
344660	345860	putting shit together.
347640	349980	All to do with collaboration.
350480	353020	All to do with working together.
353300	354060	Quick question.
354060	356760	How many of you are in security today?
357720	359200	How many of you are in networking
359200	360960	or application or development
360960	362600	or coding or that stuff?
362600	363380	Okay.
363600	364700	Again,
364700	367260	look at each other.
368200	369740	We're all one team.
370420	372480	Whether you like it or not,
372480	374860	whether you sit in different areas
374860	378480	or different buildings or different locations,
378480	380500	you're all one team.
381920	383440	As an assessor,
383440	385460	as somebody who's done virtual see-sawing,
385460	387960	as somebody who's walked into organizations,
387960	389860	there'll be too many...
389860	390500	Come and sit in.
390500	391740	Yeah, these guys are waving at you
391740	394120	not to fucking do anything other than
394120	395720	get your ass in and come sit down.
400760	401820	Bad seats at the front.
401820	402760	That way you can throw things
402760	404380	and it doesn't have to hurt as much.
406920	410540	I walked into a large car manufacturing facility
410540	411820	in the middle of...
411820	413720	I want to say it was Ohio or somewhere like that,
413720	414940	so that narrows it down to one.
414940	416160	I'm only a couple for you.
416700	417520	I walked in
417920	419860	and I was talking with the security team.
420480	420960	And they're like,
420960	422740	oh, we're going to go buy a new sim.
422740	423920	I'm like, why are you going?
423920	425560	Yeah, well, the network team run that.
425860	426700	I go, all right.
427320	428260	Why do you want to buy one?
428260	429600	Well, because they bought theirs.
429600	430620	I'm like, okay.
431680	433320	Well, we need a different one.
433320	435420	Well, are y'all going to talk to the network team?
435440	437240	Well, no, we don't meet with that.
437420	439140	Like, motherfuckers, why not?
439900	441320	Well, because they're the network team.
441320	442180	I'm like,
442760	445280	do y'all get paid from the same company?
445280	446260	Well, yes.
446260	446980	Okay.
446980	448700	Then take some of that money,
448700	451100	go down to the damn donut shop,
451100	452900	buy two dozen donuts,
452900	454840	buy a couple of gallons of coffee,
454840	456400	walk into their weekly meeting,
456400	457800	and apologize.
457800	462660	For being a bunch of fucking special snowflakes.
463140	465720	And you can see they're like,
465720	467680	oh, right.
470710	472930	You can have your silo.
472930	475750	I will not make you break your silo down,
475750	480210	but you sure as hell will build a bridge to the others.
481010	482370	Please.
482670	485130	We had to come up
485130	488130	with a new way
488130	490510	of talking with people.
490510	493150	And this isn't a cut on AppSec or DevSecOps.
493150	496870	We had to come up with a word called DevOps and DevSecOps
496870	499290	because we couldn't use the word collaboration.
501470	502750	Am I wrong?
502750	503590	No.
504350	506350	This is what we've come to.
506610	509190	We like the computers in front of us.
509210	510290	You can't hear me?
510290	510990	All right.
510990	512710	I'll use the bloody microphone.
513110	513670	Sorry.
513670	517010	I will never, ever say no,
517010	518790	and I will never ignore that one person.
518790	520850	There's a very few people on the planet I listen to.
520850	522230	She is one of them.
523590	524010	All right.
525190	526450	Where the hell was I?
526450	528590	We were talking about collaboration, weren't we?
529730	530890	So that is one thing.
531010	531370	It's...
531370	532390	I lost my train of thought.
532390	533390	I squirrel, by the way,
533390	534810	as you probably might have figured out.
534810	535970	Welcome to ADHD.
537770	539030	We were just talking.
539030	539670	So how many of you...
540190	542170	There's an amazing individual,
542170	543170	Rachel Arnold,
543170	544410	who is in our community.
544410	546610	She runs the Coffee Morning Talk.
546810	548390	And I was actually hunkered down over there,
548390	549110	just giving...
549110	550770	I was on the Coffee Talk this morning.
550770	552270	Rachel runs the damn thing.
552270	555250	And it was all about how to take care of yourself
555250	556750	in this community.
556950	560310	I am the poster child for how not to do it.
560730	561870	By far and away.
561870	563290	This is somebody who woke up this morning,
563290	565010	had to pack up the house,
565010	567010	because we rented the house from Monday to Friday,
567010	569450	forgetting that Saturday and Sunday actually existed.
570210	571570	And so I packed up the house.
571570	572710	I'm like, where am I staying tonight?
572850	573730	Fucked if I know.
574270	576010	So all of my stuff is down in the car,
576010	578030	in the car park at the Flamingo at the moment.
578690	580010	And I'll figure it out later.
580050	581250	We'll figure shit out.
581590	583250	And Rachel's like, how does that make you feel?
583250	584810	I'm like, eh, mildly stressed.
584810	585630	But the worst case scenario,
585630	586710	I can sleep in the back of the car,
586710	588310	or I'm just going to do nighttime con here.
588310	589450	It's more fun that way.
589750	590750	We've done that more years,
590750	592050	and you just kind of curl up on a sofa
592910	593530	with a watcher,
593530	594950	so that you don't end up getting crayoned
594950	595970	in the middle of the night.
597770	599610	So let's talk about the collaboration side.
599610	601090	We're talking about DevSecOps.
601090	601850	We're talking about AppSec.
601850	603530	We're talking about all this other kind of stuff.
603650	605350	And it definitely is one of those things.
605350	606090	I mean, I remember...
606090	607430	How many of you remember the days
607950	610530	when there were three layers to the internet?
611150	612930	There was the web server,
612930	614530	the application layer,
614530	616230	and the database layer?
617210	619510	Life was so much fucking simpler back then.
619510	621150	By the way, I will swear,
621150	622770	I kind of apologize in advance,
622770	623370	and I kind of don't.
623370	624430	If you have sensitive ears,
624430	625830	I will apologize for those,
625830	627190	but I'm probably not going to change
627190	628030	because every now and again,
628030	629570	the odd F-bomb has its uses.
631690	634350	Now, we've abstracted the internet
634350	636030	to such a degree that we've got, what,
636030	639110	20, 30, 40, 50 different layers between everything?
639270	641970	So no one person in our industry
641970	644730	can understand what the heck is going on.
645230	647010	We had Snowball's chance in hell.
647010	648710	Now, when it was three layers,
648710	651570	the web team could maybe send a representative
651570	654190	over to the network and the application team
654190	656230	who then might actually, like,
656230	658950	throw a muffin or a donut into the database team
658950	661030	and then charge in and ask more questions.
661090	663250	But nowadays, with all these bloody layers
663250	664050	and the abstraction,
664050	665850	the ability to do that is gone.
666250	669430	So we have to take a step away from the technology.
669670	670570	We have to go,
670570	672330	how do we work and collaborate
672330	674410	more efficiently and effectively together?
674730	678210	My office, two of the walls, whiteboards.
679270	680710	Because if I have people,
680710	681650	and we've got a local team,
681650	683070	we've got a few folks that are remote,
683070	684070	but if I've got the local team
684070	684830	or even the remote team,
684830	685890	we'll jump on the bloody whiteboard
685890	687570	and we'll start figuring shit out.
687870	689010	It's the easiest way.
689010	690230	Yes, there's all the online stuff
690230	691310	that you can use.
691790	693070	I still like my whiteboards.
693070	694970	It's easier to rub shit out on them still.
695450	697970	And it's all about the collaboration side of things.
697970	698590	It's all about,
698590	700530	how do we talk with each other?
700530	702410	How do we work with each other?
703850	704690	You know, how many of you
704690	707650	are sitting here with collaboration tools
707650	709230	on your phones right now?
709270	711170	Because I know that I'm trying to keep an eye.
711170	712310	As I'm walking around here,
712310	712870	people are like,
712870	714010	hey, where are you?
714290	715530	On LinkedIn.
715550	716810	I can't do Twitter anymore.
716810	718010	I got banned from Twitter.
719810	720630	Yeah.
720630	721790	Fuck if it's X.
721790	722850	Stupid shit.
723270	724530	I mean, seriously.
724770	725410	Do you want to talk about
725410	727170	the ultimate of narcissism?
727190	729190	Buy a company for $44 billion
730150	731510	and change its name
731510	733610	to the one you've held on for 20 years.
733610	735110	I'm like, you asshole.
737890	739530	You know, I'm sitting there.
739530	741250	I'm trying to coordinate life across,
741250	742690	you know, like text messaging
742690	744950	and WhatsApp and Signal and LinkedIn.
744990	746670	I'm like, I'm just here.
746670	747990	I'm putting a point in the map
747990	749970	hope for the best and off we go.
750130	751930	That's about as good as it gets.
752470	753350	And so we've, again,
753350	754730	taken the ability to communicate
754730	757350	and now we've fragmented communication.
757570	758650	My ask is one thing
758650	759690	for anybody who wants to develop.
759690	760870	Could I please have one tool
760870	762410	that actually narrows all of those
762410	763910	into one freaking place, please?
764290	765450	Yeah, no shit.
765450	766690	Tell me about it.
766950	767330	Good.
767330	768690	God's alive.
769490	771290	So let's talk a little bit
771290	773070	about journeys and stuff.
774950	776930	Let's talk a little bit about journeys.
776930	777850	How many of you...
777850	779010	That's just a quick show of hands.
779010	780530	How many of you have been in this industry,
780530	782090	say, for five plus
782090	783670	or maybe ten plus years?
784250	785030	Nice.
785030	785630	So we're going to hope...
785630	787290	How many of you are just coming into this industry
787290	788910	wondering what the hell is going on?
788910	790850	Like three to five years in this industry.
790850	791370	Yeah.
791370	792210	Okay, again,
792210	793610	those of us that are old farts
793610	794750	in this industry,
794750	795970	find one of these people.
795970	796790	Don't abuse them.
796790	797990	Don't get them drunk too much.
797990	799690	Don't take naked photos of them.
799910	802490	But take them under your wing
802490	804410	and help them, please.
805190	806730	Because this is family.
806730	807990	These are called villages
807990	810930	for a bloody good reason.
811950	812930	Years ago,
812930	813590	all the villages
813590	815550	were in one sodding area.
816070	817110	And then everybody realized
817110	817730	that the villages
817730	818770	were about as much fun
818770	819790	as going to a main talk.
819790	820690	You didn't have to stand in line
820690	821330	for three hours,
821330	822550	which is rather useful.
822990	824110	So this is where
824110	825850	we all learn.
826350	827250	I go online
827250	827930	and everybody says,
827930	829450	hey, how did you get into this industry?
829450	830510	I'm like, get your asses here
830510	831650	and volunteer.
832590	833190	One,
833190	834230	you get a free badge
834230	835510	more often than not.
835650	836210	Secondly,
836210	836750	somebody often
836750	837430	comes to your room,
837430	838350	if you're lucky.
838710	840030	But you get to hang out
840030	840670	with people.
840670	841430	You get to learn.
841430	842790	You get to talk.
843330	844070	Most of us
844070	845430	come into this industry
845850	846390	a little,
846390	847210	how should we say,
847210	847950	off kilter
847950	850070	in the brain department.
850570	851730	We don't necessarily
851730	852510	like to talk
852510	853310	to other humans.
853310	854270	It's easier to talk
854270	855430	to the keyboard.
856030	857470	A very, very good friend of mine,
857470	858170	Ryan Cloutier,
858170	860410	says it absolutely splendidly.
860410	861970	We are analog humans
861970	864350	working in a digital world.
864710	866190	And he's perfectly right.
866210	867910	The problem is
867910	869290	that digital world
869290	870410	is collapsing
870910	872210	on the analog humans
872210	873730	probably a lot faster
873730	875450	than we want it to.
875650	877390	Witness the latest thing
877390	878650	when we decided to drop
878650	879670	chat GPT
879670	880570	on almost
880570	881830	8 billion people
881830	882930	with no
882930	884590	sodding instructions.
885530	886730	It's like handing
886970	888670	a kid a hand grenade,
888670	889550	pulling the pin out
889550	890310	and going,
890310	892370	have a good time.
893190	894130	Some of them
894130	895090	will just stand there.
895090	896570	This is that fight,
896570	896990	flight,
896990	897670	or freeze
897670	899110	that humans have.
899130	899530	Some of them
899530	901450	will be like...
903610	904330	Some of them
904330	906090	will be like...
907170	908510	Fuck you!
909010	909730	And some
909730	910370	are going to be like,
910370	911590	run the fuck away!
912190	913090	That's the Air Force
913090	914350	people, by the way.
916890	918130	I'm sorry.
919450	921030	I'm sorry, yeah.
921390	922910	Royal Marine Commandos.
922910	923690	We actually took
923690	924350	the grenades,
924350	925210	stole everybody else's
925210	925930	fucking grenades
925930	927250	and charged.
928410	929830	After a cup of tea.
931510	932510	You all had coffee
932510	933290	in this place.
933290	933970	Burnt beans?
933970	934530	Don't do it.
934530	935250	Get a cup of tea.
935250	936270	Be civilized.
938150	938790	Alright.
940290	941090	So let's talk
941090	941670	absec.
941670	942590	Let's talk humans.
942590	943490	Let's talk integration
943490	944170	and stuff like that.
944170	944890	Actually, no, fuck it.
944890	945950	Let's talk camels.
947190	947930	Have any of you
947930	948750	heard the camel story?
948750	949430	How many of you have heard
949430	950230	the cow story
950230	951630	or the camel story?
952150	952890	None of you.
952890	953330	Oh, God.
953330	954030	I had so much fun.
954030	955790	This is application security.
955790	957210	So, years and years ago,
957210	958730	I'm driving across Wyoming.
958730	959130	I'm going...
959130	959810	I think I'm going up
959810	960530	to some corner.
960530	961910	I was going somewhere.
962230	962830	And I'm driving
962830	964030	across Wyoming.
964190	965490	I'm going rather quickly
965490	966650	across Wyoming.
966650	968130	A hundred and something silly
968130	969150	because you can do that
969150	970190	across Wyoming.
970790	972110	Normally, when I'm driving,
972110	973170	I normally have a laptop
973170	974190	or something with me
974190	974750	and there's a couple
974750	976050	of antennas poking out of it
976050	976990	and I'm trying to see
976990	977810	what the hell is going on
977810	978610	in the world.
978990	979870	I'm driving across
979870	980290	the middle of
980290	980970	bug fuck nowhere
980970	981550	in Wyoming
981550	982470	and the damn antennas
982470	983290	keep pinging at me.
983290	983530	I'm like,
983530	983750	what?
983750	985410	There's nothing here.
986410	987310	Antennas going off,
987310	988750	wireless networks going off,
988750	989570	NFC and a few.
989570	989910	I'm like,
989910	990790	what the hell is out here?
990790	991250	So, I pull off
991250	992450	to the side of the road.
992670	993210	Nearest one.
993210	993970	I back up a little bit.
993970	994190	I'm like,
994190	994950	what's here?
994950	995710	There's a cow
995710	996990	staring at me.
997770	998790	How are you all doing?
999330	1000870	Bing, bing, bing.
1000870	1001170	I'm like,
1001170	1001750	what the fuck?
1001750	1003050	I get out of the car.
1003390	1004670	I try chasing the cow
1004670	1005730	across the fields.
1007150	1007790	Me versus
1008430	1008890	a thousand,
1008890	1009710	1,500 pounds
1009710	1010770	of heavyweight animal.
1010770	1011770	Not a smart thing to do,
1011770	1012730	but hacker.
1013350	1014670	I realize the cow
1014670	1015910	has an earpiece in it
1015910	1018090	and has a pedometer on.
1018230	1019030	The pedometer
1019030	1020010	is giving off
1020150	1020890	a signal.
1021250	1021950	The signal
1021950	1023230	is a GPS signal.
1023230	1023530	I'm like,
1023530	1024670	oh, this is cool.
1024670	1025630	I get online
1025630	1026310	to Google's
1026310	1026930	and I'm like,
1026930	1027430	Googling
1027430	1028750	cow pedometers.
1028750	1029410	I find out
1029410	1029750	there's these
1029750	1030350	really freaking
1030350	1031570	cool things.
1032210	1033230	And the NFCs
1033230	1033870	on the ears
1033870	1034550	are on there as well.
1034550	1035770	They talk to the pedometer.
1035770	1036490	What it's doing
1036490	1037090	is it's pulling
1037090	1038030	temperature,
1038030	1038790	heartbeat,
1038790	1039310	movement,
1039310	1039790	and a whole bunch
1039790	1040910	of other things out.
1040950	1041750	And it's sending it
1041750	1043070	to a centralized database.
1043070	1043670	Because when you buy
1043670	1044510	these pedometers,
1044510	1045390	you get a database.
1045390	1047070	It was a Windows 98 machine
1047070	1047530	at the time.
1047530	1047830	I'm like,
1047830	1048390	yay!
1048990	1050310	Play, play, play, play, play.
1052590	1052990	MySQL,
1052990	1054350	MySQL database.
1055610	1056330	So I'm sitting there
1056330	1056830	and I'm like,
1056830	1057030	well,
1057030	1057750	one has to get
1057750	1058530	one of these things.
1058530	1059310	So one purchased
1059310	1060710	one for one cow.
1061610	1062530	eBay, by the way,
1062530	1063430	great thing.
1063650	1064470	Two of my accounts
1064470	1065450	are now banned on eBay.
1065450	1065950	They haven't found
1065950	1067170	the other three yet.
1068970	1070090	I fucking love eBay.
1070090	1070650	It's so much fun
1070650	1071470	to abuse.
1072390	1073050	So I buy
1073050	1073770	one of these things,
1073770	1074710	start taking it to pieces,
1074710	1075490	and realize all the fun
1075490	1075970	and games.
1075970	1076610	I then get hold
1076610	1077050	of the vendor
1077050	1077910	and the software.
1077990	1078790	I call the vendor,
1078790	1079050	I'm like,
1079050	1079950	how are y'all doing?
1079950	1080570	And they're like,
1080570	1081050	hello.
1081810	1082850	I start talking with them
1082850	1083990	because it's a European company
1083990	1085390	and got them to send me
1085390	1086010	an application
1086010	1086590	and the system
1086590	1087090	and the software
1087090	1087510	and everything.
1087510	1088370	So I start looking at this
1088370	1088630	and I'm like,
1088630	1089770	oh, this is fun.
1090130	1090910	So then go out
1090910	1091750	to the wonderful world
1091750	1092490	of Shodan
1093570	1094590	with the tool,
1094590	1095450	with the architecture,
1095450	1095970	and find out
1095970	1097630	that half of the United States
1097630	1098490	of America land
1098490	1100030	and quite a lot of Europe
1100030	1101570	all runs these types
1101570	1102610	of databases.
1103110	1103970	Are we having fun
1103970	1104430	with the lights?
1104430	1105110	Who's fucking around
1105110	1106250	with the flippers again?
1106610	1107490	I don't mind.
1107490	1107850	I'm good.
1107850	1108570	We can be in the dark
1108570	1109530	having conversations.
1109530	1110570	It is a hacker conference
1110570	1111570	after all.
1112310	1113510	So I start figuring
1113510	1114170	this stuff out
1114170	1114950	and then I realize
1114950	1116290	that almost all the databases
1116290	1117790	are using a default user ID
1117790	1118590	and a password.
1118590	1119190	Yay!
1119190	1120630	Admin, admin for the win.
1120630	1121230	Yay!
1121230	1124110	So I start logging in.
1124430	1124950	I figure out
1124950	1125790	where all the ones are
1125790	1126690	in the middle of this
1126690	1127210	neck of the woods
1127210	1128390	and a few other neck of woods
1128390	1129310	and they update,
1129310	1130510	the pedometer updates
1130510	1131530	the GPS settings
1131530	1132510	for where this cow is
1132510	1133510	so basically the farmer
1133510	1134530	can basically round up
1134530	1135790	all his entire herd
1135790	1136490	of beef burgers
1137330	1138790	across his thousands of acres
1138790	1139750	into one place
1139750	1140590	and then send them off
1140590	1141790	for dinner.
1143530	1144870	Well, we started rewriting
1144870	1145610	the database
1145610	1146770	because it was a fun thing
1146770	1147470	to do.
1147470	1148890	So every 28 minutes
1148890	1150110	we would go into the database
1150110	1151210	and rewrite the GPS settings
1151690	1153310	with a very good friend of mine
1153310	1154270	in Colorado.
1155770	1156930	We basically figured out
1156930	1159030	digital cattle rustling.
1159370	1160710	It was so much fun.
1161190	1163510	Fast forward to last year,
1163510	1164810	I get invited to go over
1164810	1165830	to the Middle East
1166430	1167350	and they're like,
1167350	1168270	hey, can you have some fun
1168270	1169070	and do a life hack?
1169070	1169590	And I'm like,
1169590	1170310	well, I'm not going to do
1170410	1171430	a life hack in the Middle East
1171430	1172110	because that could get
1172110	1173030	really, really nasty
1173710	1174590	and they get upset
1174590	1175170	but I'm like,
1175170	1176750	I'll do a pre-recorded
1177170	1178130	attack on something
1178130	1178430	and they're like,
1178430	1178890	what are you going to do?
1178890	1179130	And I'm like,
1179130	1180290	I have no fucking clue.
1180410	1181530	So I start looking
1181530	1182230	at the neck of the woods
1182230	1183830	I'm going to in the Middle East.
1184250	1186490	They have camels.
1187010	1188790	They have beauty pageants
1188790	1190230	for these camels.
1190850	1193110	These are expensive camels.
1193110	1194990	8 million US dollar
1194990	1196990	beauty pageant camel.
1197670	1199550	Yeah, and there's a lot of them.
1199610	1200630	What I didn't realize
1200630	1201110	at the time
1201110	1201730	is a lot of them
1201730	1203630	were owned by His Excellency.
1204630	1205830	I found that one out
1205830	1206830	on stage.
1206830	1209730	Because I also found another
1209730	1210930	there was a
1210930	1211430	what it was
1211550	1212830	there's a whole bunch of folks
1212830	1214030	in like upper Mongolia
1214030	1214550	Chinese neck of the woods
1214550	1215590	that are also doing
1215590	1216450	the same kind of idea
1216450	1217590	they're basically using
1217590	1219410	pedometers on the camels
1219410	1220390	to figure out where the camels are
1220390	1220910	and he goes out
1220910	1221550	on his motorbike
1221550	1222210	this is in the middle
1222210	1223750	of bug fuck nowhere
1223750	1224350	and I'm like,
1224350	1225010	okay, let's go see
1225010	1225970	if we can make friends
1225970	1227790	with that database.
1227790	1228710	Nice Chinese database
1228710	1229650	default admin passwords on there
1229650	1230890	might look very, very similar
1230890	1233510	to the US one for cows
1233510	1233690	surprisingly enough
1233690	1234170	and so I'm like,
1234170	1235250	all right, we can have
1234830	1235830	some fun with this.
1235250	1236970	Now the ones in
1236970	1237850	it was in Saudi
1237850	1238390	for a change
1238390	1239150	so you've got to have fun
1239150	1240110	with those folks.
1240770	1241950	And what I ended up doing
1241950	1243010	was I stood up on stage
1243010	1243890	and we took all of the
1243890	1244690	Saudi camels
1244690	1245670	and moved them
1245670	1247430	to the middle of China
1247430	1248410	and took all the Chinese
1248410	1249290	flea bitten camels
1249290	1250210	and moved them
1250210	1251190	to the prestigious place
1251190	1252670	in the middle of fucking Dubai.
1252930	1253610	The middle of
1253610	1254310	wherever the hell it was
1254310	1255010	the middle of Saudi
1255010	1256630	Riyadh actually in this case.
1256910	1258130	And did this up on stage
1258130	1258710	and showed this
1258710	1259570	so apparently
1259570	1260170	he's excellently
1260170	1260990	got hold of his people
1260990	1261410	and said,
1261410	1262570	where the hell are my camels?
1262950	1264510	And the guy was looking
1264510	1265190	at the database
1265190	1265850	going,
1265850	1267190	your camels are not here.
1267190	1268090	And looking at the camel
1268090	1269270	and going,
1271940	1273140	reboot.
1274580	1275400	And so,
1275400	1276520	this goes back
1276520	1277540	to the whole concept
1277540	1278620	and the whole idea
1278620	1280520	of analog humans
1280520	1282340	in a digital world.
1283000	1284740	How are we going
1284740	1286080	as we move forward
1286080	1287440	to understand
1287440	1289900	what is reality?
1291060	1292860	How many of us
1292860	1293640	question
1293640	1295600	what we see?
1296240	1296340	How many of us
1296340	1298260	take for granted
1298260	1298940	what is put
1298940	1300300	in front of us?
1300700	1301380	Versus
1301380	1302600	ask the questions
1302600	1304200	so that we can
1304200	1304980	understand more
1304980	1305440	effectively
1305440	1307320	what we're looking at.
1307640	1308980	So this again
1308980	1309600	comes back
1309600	1311040	to the human.
1311300	1311920	It again
1311920	1312600	comes back
1312600	1313480	to asking
1313480	1314440	more questions.
1314440	1315200	We all talk
1315200	1315500	about
1315500	1315920	trust
1315920	1317420	then verify.
1318040	1319080	We should have
1319080	1319720	reversed that
1319860	1320600	a long time ago
1320600	1320940	and go
1320940	1322600	verify,
1322600	1324240	be sarcastic,
1324240	1325860	verify again,
1325860	1326320	and then
1326320	1327160	maybe trust
1327160	1327800	you for five
1327800	1328780	minutes.
1330120	1331060	Yet we don't
1331060	1332200	do that.
1333180	1334300	So again,
1334300	1335060	for those of
1335060	1335760	you in this
1335760	1336400	industry,
1336400	1336900	for those of
1336900	1337520	you building
1337520	1338080	some of the
1338080	1338880	amazing tools
1338880	1340200	out there,
1340200	1340960	take a step
1340960	1341960	back.
1342620	1343540	Are you okay?
1343540	1343900	Do you need
1343900	1344680	water?
1344680	1345020	Whoever is
1345020	1345500	dying over
1345500	1345760	there?
1345760	1346300	Don't die,
1346300	1346620	please,
1346620	1346880	it's more
1346880	1347740	paperwork.
1348100	1349500	Is she okay?
1349640	1350300	All right,
1350300	1351300	just checking.
1351300	1351680	Do we need
1351680	1352100	to take her
1352100	1353020	outside?
1353680	1354340	Okay, not
1354340	1354920	outside.
1354920	1355760	Okay, I'm
1355760	1356180	armed.
1356180	1356360	I mean,
1356360	1356880	we're fine,
1356880	1357900	it's Vegas.
1359020	1359860	The lake's
1359860	1360320	filled up
1360320	1361120	again.
1362960	1363620	So we
1363620	1364300	come back
1364300	1364720	as you're
1364720	1365080	building
1365080	1366160	something.
1366540	1367340	Take a
1367340	1368300	step back
1368300	1368720	out of
1368720	1369320	the very
1369320	1369660	world that
1369660	1370180	we live
1370180	1370420	in.
1370420	1370980	I use
1370980	1371720	my mother
1371840	1372380	as a
1372380	1372860	yardstick.
1372860	1373780	You should
1373780	1375080	all find a
1375080	1375700	parent,
1375700	1376040	guardian,
1376040	1377020	or somebody
1377020	1377560	outside of
1377560	1379220	this realm
1379220	1379940	and ask
1379940	1380380	them the
1380380	1381200	same questions.
1381200	1382320	Go, hey,
1382320	1382920	if I give
1382920	1383580	this to you,
1383580	1384160	or I put
1384160	1384580	this in
1384580	1384940	front of
1384940	1385280	you, or
1385280	1385660	I let
1385660	1386340	you use
1386340	1386680	this, or
1386680	1386980	I let
1386980	1387460	you mess
1387460	1387760	around with
1387760	1388240	it, what
1388240	1388840	do you
1388840	1389160	think?
1389160	1389580	How do
1389580	1390180	you work
1390180	1390260	this?
1390260	1390800	How do you
1390800	1391200	use
1391200	1391600	this?
1391600	1393300	Can you
1393300	1393680	use
1393680	1394760	this?
1395060	1396080	What we
1396080	1396880	take for
1396880	1398760	granted is
1398760	1399860	us.
1400460	1401120	There's
1401120	1403160	7,990,000,000
1403160	1404240	odd lots
1404240	1404800	of people
1404800	1405320	out there
1405320	1406000	that haven't
1406000	1406820	got a
1406820	1407700	sodding clue
1407700	1408180	about what
1408180	1409820	we do.
1409820	1410300	So either
1410300	1410940	we have to
1410940	1411720	make it
1411720	1412200	more effective
1412200	1413040	and more
1413040	1413560	efficient,
1413560	1413840	or we
1413840	1415000	have to
1418260	1419260	get a
1415000	1415980	communication.
1418240	1418360	So I
1418360	1418660	have another
1418660	1419160	question for
1419160	1419980	everybody.
1420940	1421780	We're in
1421780	1422400	the
1422400	1423480	village.
1424620	1425020	There are
1425580	1426160	two sets
1426160	1426340	of
1426340	1426820	community
1426820	1427460	villages.
1428320	1428840	Not
1429880	1430400	Caesars
1430400	1430800	where I
1430800	1431260	went this
1431260	1431900	morning,
1431900	1432120	but the
1432120	1432360	other
1432360	1432760	Caesars
1432760	1434600	that way.
1434860	1435480	How many
1435480	1435760	of you
1435760	1435980	are going
1435980	1436140	to go
1436140	1436460	to the
1436460	1436660	other
1436660	1436940	villages
1436940	1437360	and go
1437360	1437700	hang out
1437700	1437860	at the
1437860	1438000	other
1438000	1438900	villages?
1439960	1441000	I like
1441000	1441720	that.
1441920	1442320	One thing
1442320	1442820	I would
1442820	1443180	love to
1443180	1443660	see more
1443660	1445640	of is
1446660	1447440	how do
1447440	1447920	we
1447920	1448860	collaborate
1448860	1449420	with other
1449420	1450280	villages?
1450640	1450940	How do
1450940	1451600	you hang
1454200	1454860	out with
1454860	1454980	the
1454980	1455220	car
1455220	1455540	hacking
1455540	1456400	village?
1456820	1457100	Let's
1457100	1457680	face it,
1457680	1458340	cars are
1458340	1458900	no longer
1459040	1459540	a device
1459540	1459880	to get
1459880	1460200	you from
1460200	1460660	point A
1460660	1461020	to point
1461020	1461880	B.
1462240	1465160	Cars are
1465160	1466180	now fully
1466700	1466960	integrated
1466960	1467740	passenger
1467740	1468720	experience
1468720	1470100	environments.
1470840	1471660	We're looking
1471660	1471980	with the
1471980	1472500	stuff we're
1472500	1472960	building with
1472960	1473060	the
1473060	1473680	airplane,
1473680	1473860	I'm
1473860	1474340	looking at
1474340	1474840	taking the
1474840	1475220	settings
1475220	1475700	you have
1475700	1476060	in your
1476060	1476980	car.
1480940	1481460	I'm
1481460	1481920	looking at
1481920	1482560	taking those
1482560	1483180	settings and
1483180	1483760	building that
1483760	1484420	into the
1484420	1485000	seat that
1485000	1485320	you will
1485320	1485900	fly on
1485900	1486080	our
1486080	1487200	airplane.
1487540	1487880	That's
1487880	1488040	all
1488040	1488660	application
1488660	1489180	layer,
1489180	1489840	identity,
1489840	1490320	management,
1490320	1490560	and all
1490560	1490840	sorts of
1490840	1491020	other
1491020	1492180	fun stuff.
1492480	1493000	That's
1493000	1493660	taking an
1493660	1494440	experience
1494440	1495220	from a
1495220	1495500	human
1495500	1496120	from one
1496120	1496600	device and
1496600	1496840	moving it
1496840	1497220	on to
1497220	1497640	another
1497640	1498200	device
1498200	1498760	seamlessly.
1498760	1499600	It's the
1499600	1500500	same thing.
1500500	1501680	I'll take people's
1501680	1502220	settings from
1502220	1502840	their phones
1502840	1503180	and their
1503180	1504700	tablets and
1504700	1505140	we'll move
1505140	1505540	them on to
1505540	1505720	the
1505720	1506340	entertainment
1506340	1507080	system that
1507080	1507400	we'll have
1507400	1507620	in the
1507620	1507980	plane.
1508020	1508640	Therefore,
1508640	1509420	everything that
1509420	1509820	you have
1509820	1510420	now is the
1510420	1510760	same thing
1510760	1511120	you'll have
1511120	1511660	in front of
1511660	1511960	you when
1511960	1512420	you fly on
1512420	1512540	the
1512540	1513340	airplane.
1514840	1515680	Now,
1515680	1516200	can we
1516200	1517200	do this?
1517200	1517640	Absolutely.
1518400	1518940	Are we going to
1518940	1519300	do it and
1519300	1519660	how do we
1519660	1520100	do it and
1520100	1520580	keep the
1520580	1521320	safety and
1521320	1522080	integrity of
1522080	1522460	it?
1522460	1522960	There's some
1522960	1523280	shit to
1523280	1523660	work out
1523660	1524340	yet.
1525200	1525860	But again,
1525860	1526380	this isn't
1526380	1526980	just us
1526980	1527420	working
1527420	1528220	alone.
1528680	1529020	I got
1529020	1529200	some
1529200	1529500	fun
1529500	1529820	time
1529820	1530240	tomorrow
1530240	1530620	in the
1530620	1531100	aviation
1531100	1532000	village.
1532480	1532840	That's
1532840	1533560	collaboration
1533560	1534000	between
1534000	1534780	AppSec,
1535240	1535840	DevSecOps,
1535840	1537000	networking,
1537000	1537500	and a whole
1537500	1537860	bunch of
1537860	1538040	other
1538040	1538880	villages.
1540020	1540780	This, again,
1540780	1541340	is why we're
1541340	1542040	here.
1542580	1543280	You're here to
1543280	1543840	learn,
1543840	1544220	you're here to
1544220	1544780	network,
1544780	1545140	you're here to
1545140	1546000	talk with
1546000	1546720	people,
1546720	1547180	not two
1547180	1548000	people,
1548740	1549300	and you're
1549300	1549640	here to
1550180	1550580	collaborate
1552400	1552800	between
1552800	1553920	each other.
1555600	1556140	So what
1556140	1556440	else are we
1556440	1556560	going to
1556560	1557320	go through?
1557320	1557720	Oh, I
1557720	1558060	know.
1558060	1558400	How many
1558400	1558720	of you are
1558720	1559540	vendors?
1560460	1561220	Anybody want to
1561220	1561600	admit at
1561600	1561960	this moment
1561960	1562840	in time?
1563640	1564360	Let's talk
1564360	1564740	about that
1564740	1565600	world.
1566060	1566460	Because I
1566460	1567660	was at a
1567660	1568320	dinner last
1568320	1568960	night.
1568960	1570160	I went out
1570160	1571240	last night
1571240	1572100	to
1572100	1572600	Super
1572600	1575960	Frisco.
1576640	1578340	It's
1578340	1578860	like a
1578860	1579580	whole series
1580180	1581200	of escape
1581200	1581780	rooms with
1581780	1581820	performing
1581820	1582560	artists.
1582560	1583080	It was
1585720	1586720	amazing.
1584400	1585060	But we
1585060	1585420	were all
1585420	1586020	sitting there
1586020	1586520	and there
1586520	1587220	were four
1587220	1587500	or five
1587500	1587800	different
1587800	1588540	vendors there
1589400	1590020	and we
1590020	1590200	had
1590200	1591100	conversations
1591100	1591660	and it
1591660	1591760	was
1591760	1592220	rather
1592220	1593180	nice.
1593520	1593700	It was
1593700	1593940	good
1593940	1594560	conversations
1594560	1594880	because
1594880	1595040	they
1595040	1595380	weren't
1595380	1595760	trying to
1595760	1596000	sell
1596000	1596800	shit.
1598000	1598680	If you
1598680	1599020	end up
1599020	1599300	working
1608680	1609300	on the
1609300	1609460	vendor
1609460	1611300	space,
1612260	1612300	we
1613480	1614240	have
1614240	1614580	an
1614580	1615680	adversarial
1615680	1616660	relationship
1616660	1616880	with
1616880	1617520	vendors.
1618200	1618960	We
1618960	1619620	absolutely
1619620	1620160	have an
1620160	1620760	adversarial
1620760	1622120	relationship.
1622780	1625560	From a
1625560	1626640	CISO's
1626640	1627000	perspective,
1627000	1628060	I feel
1628060	1628760	like I'm
1628760	1629400	targeted.
1629400	1630760	From a
1630760	1632180	vendor's
1632180	1632880	perspective,
1633040	1634180	they have
1634180	1634420	to stand
1634520	1634660	out.
1635300	1636300	We have
1636300	1637300	to do
1637300	1638300	a better
1634660	1635020	job of
1635020	1635780	this.
1636680	1637140	Both
1637140	1637580	from the
1637580	1638120	CISO
1638120	1638680	and us
1638680	1638840	in
1638840	1639840	technology,
1639840	1639960	this
1639960	1640340	wouldn't
1640340	1640780	be here
1640780	1640960	without
1640960	1641620	vendors.
1642460	1642920	We
1643540	1644180	all put
1644180	1644700	money in
1644700	1645340	and the
1645340	1645640	vendors
1645640	1646100	put money
1646100	1646500	in as
1646500	1646920	well.
1651380	1652300	So,
1652300	1652940	actually,
1652940	1653540	that is a
1653540	1653980	good
1653980	1654640	reminder.
1654640	1655080	Do me
1655080	1655740	a big
1662660	1663660	favor,
1655740	1655920	with
1655920	1656680	consent,
1656680	1656860	hug
1656860	1657060	the
1657060	1657340	hell
1657340	1657520	out
1657520	1657640	of
1657640	1657840	all
1657840	1657960	the
1657960	1658440	volunteers
1658440	1658680	in
1658680	1658880	this
1658880	1659260	place.
1659260	1659760	Thank
1661680	1662360	all of
1662360	1662540	these
1662540	1663460	people.
1663540	1663800	We
1663800	1664220	wouldn't
1664220	1664780	be here
1664780	1664940	without
1664940	1665220	their
1665220	1665920	tireless
1665920	1667160	work.
1674040	1674560	I
1674560	1674700	would
1674700	1674960	say
1674960	1675260	hug
1675260	1675460	a
1675460	1676300	goon.
1677140	1677620	But
1677620	1678460	you are
1678460	1678560	going to
1678560	1678840	get your
1678840	1679000	ass
1679000	1679360	paddled
1679360	1679680	if you
1679680	1679820	do
1679820	1680580	that.
1681720	1682040	I
1683380	1683860	nowadays
1683860	1684100	we
1684100	1684320	have to
1684320	1684420	be
1684420	1684640	more
1684640	1685740	civilized.
1686340	1686700	I
1687460	1687940	can't
1688880	1689360	do
1689360	1690120	that.
1690300	1690380	I
1690940	1691420	am
1692000	1692480	just
1692480	1692680	going
1692680	1692760	to
1692760	1692980	hug
1692980	1693120	you
1693120	1693220	to
1693220	1693620	death.
1693620	1693760	Hold
1693760	1693980	on
1693980	1694740	tight.
1696640	1697520	Again, it
1697520	1697960	comes down
1697960	1698040	to
1698040	1699220	communication.
1699400	1699500	It
1699500	1699960	comes down
1699960	1700080	to
1700080	1700240	the
1700240	1701540	collaboration.
1702520	1702700	The
1702700	1703120	other thing
1703120	1703300	I will
1703300	1703680	say as
1703680	1704040	well,
1704040	1704380	I did
1705500	1705740	a LinkedIn
1705740	1706380	post.
1706760	1707200	I
1707200	1707600	know
1710040	1710560	what it
1710560	1710820	was.
1710820	1710880	It
1710880	1711420	was the
1711420	1711740	Wednesday
1711740	1712040	podcast
1712040	1712400	with
1712400	1713640	Danny.
1715900	1716360	There
1716360	1717700	are 20,
1717700	1718200	30,000
1718200	1718520	of us
1718520	1718640	here
1718640	1718840	this
1718840	1719960	year.
1720140	1720860	Respect
1720860	1721680	each
1721680	1723120	other.
1723320	1724240	When
1724240	1724700	somebody
1724700	1725160	says
1725160	1726200	no,
1726200	1726420	they
1726420	1726840	actually
1726840	1727460	mean
1727460	1729520	no.
1729760	1730080	When
1730080	1731380	you see
1731380	1731740	somebody
1731740	1732680	alone,
1732680	1732900	reach
1732900	1733740	out and
1733740	1735080	help.
1735080	1735420	Double
1735420	1735980	check with
1735980	1736380	them as
1736380	1737280	well.
1738660	1739300	We
1742920	1744020	lose too
1744020	1744760	many people
1744760	1745340	in this
1745340	1746640	industry and
1746640	1746880	in the
1746880	1747580	military on
1747780	1748120	a daily
1748120	1749440	basis.
1749880	1750940	A friendly,
1750940	1752000	hey, can
1752000	1752700	I help
1752700	1753060	you?
1753060	1753380	Is there
1753380	1754060	anything you
1754060	1754520	need?
1754520	1754780	Do you
1754780	1756020	need food?
1756020	1756240	Do you
1756240	1756860	need a
1756860	1757180	minute's
1757180	1757620	worth of
1757620	1758860	peace and
1759240	1759840	quiet or
1759840	1761160	a friendly
1763420	1764420	voice?
1761160	1761500	This
1761500	1761920	week,
1761920	1762520	especially,
1762520	1762900	as this
1762900	1763480	week rolls
1763480	1764520	on, is
1764520	1765200	key.
1765200	1765560	Do me
1765560	1766200	all a
1766200	1767000	favor,
1767000	1767400	just keep
1767400	1767940	an eye
1767940	1768480	on each
1768480	1769720	other as
1769720	1769980	well.
1769980	1770300	Make
1770300	1771680	sense?
1771680	1772280	Good.
1772280	1772940	Thank you.
1772940	1773140	How are we
1773140	1773540	doing time
1773540	1773740	wise?
1773740	1774620	We're good.
1774620	1775120	I'm going to
1775120	1775340	open it
1777480	1778360	up.
1778360	1778460	Questions
1778460	1778740	for the
1796390	1797390	crazy
1778740	1779060	one on
1779060	1780000	stage.
1780000	1780560	I'll answer
1780560	1781400	pretty much
1781400	1781880	anything.
1782040	1783320	Go for
1783320	1784260	it.
1792710	1793490	That's a good
1793490	1793950	one.
1793950	1794550	For me,
1794550	1794970	collaboration
1794970	1795350	with
1795350	1795930	vendors is
1795930	1796190	giving
1796190	1796410	them
1796410	1796710	certain
1796710	1797130	time.
1799550	1800130	Perfect
1800130	1800910	example,
1800910	1801170	vendors
1801170	1802310	outreach.
1805370	1806530	I have
1806530	1807430	three basic
1807430	1808550	responses.
1809150	1809730	First
1809730	1810510	response is,
1810510	1811210	number one,
1811210	1811530	do your
1811530	1811990	research.
1811990	1812270	If you're
1812270	1812770	asking me
1812770	1813270	for 15
1813270	1813730	minutes of
1813730	1814730	my time,
1814730	1815210	you spend
1815210	1816010	5-15
1816010	1816430	minutes
1816430	1817190	looking
1817190	1817630	me up
1817630	1818550	first.
1818750	1821050	Secondly,
1821050	1821570	I'm easy
1821570	1822190	to find
1822190	1822470	on the
1822470	1823370	internet.
1823430	1824190	Thirdly,
1824190	1824790	see if
1824790	1824930	it's
1824930	1825150	something
1825150	1825690	you think
1825690	1825850	I'm
1825850	1826110	likely
1826110	1827390	to need.
1827390	1827730	I'll
1827730	1827950	give
1827950	1828150	them
1828150	1828330	that
1828330	1828810	feedback.
1828810	1829490	If I get
1829490	1830070	the generic
1830070	1830570	outreach
1830570	1831130	email,
1831130	1831850	I'll
1831850	1832090	send
1832090	1832230	them
1832230	1832390	that
1832390	1832770	feedback.
1839550	1840670	Secondly,
1840670	1840990	if it's
1840990	1841230	something
1841230	1841450	I'm
1841450	1841810	interested
1841810	1842230	in,
1842230	1842410	my
1842410	1842950	Friday
1842950	1843790	afternoons
1843790	1844310	are set
1844310	1844690	aside
1844690	1844870	for
1844870	1845790	vendors.
1850050	1851170	If it's
1851170	1851350	something
1851350	1851610	I'm
1851610	1851990	interested
1851990	1852570	in,
1852570	1852750	we'll
1852750	1853070	schedule
1853070	1853490	a
1853490	1855910	time.
1858390	1858870	If
1858870	1859110	after
1859110	1859310	that
1859310	1860090	it's
1860090	1860430	interesting,
1860430	1860710	it
1860710	1860930	gets
1860930	1861030	passed
1861030	1861530	on to
1861530	1861950	my
1861950	1863410	team.
1863410	1863630	I
1863630	1863850	gate
1863850	1864230	keep
1864230	1864710	my
1869090	1870050	team.
1870050	1870230	Sometimes
1870230	1870690	there's
1870690	1870810	new
1870810	1870990	tech
1871890	1872370	out
1874090	1874770	there.
1874770	1874970	I
1874970	1875230	want
1879070	1880070	to
1880070	1881070	know
1881070	1882070	about
1875230	1875450	it.
1875450	1875650	Then
1875650	1875950	I'll
1875950	1876070	let
1876070	1876250	my
1876250	1876630	team
1876630	1876950	spin
1876950	1877190	their
1877190	1877690	wheels on
1877690	1878450	it.
1880210	1881150	Thirdly,
1881150	1881470	I'll
1881470	1882030	explain
1882030	1882570	back.
1882570	1882690	I
1882690	1882970	will
1882970	1883210	give
1883210	1883610	feedback
1883610	1884170	to a
1884170	1886730	vendor.
1886730	1887370	I
1889810	1890330	spent
1890330	1890570	Tuesday
1890570	1890970	or
1890970	1891810	Wednesday
1891810	1892170	with
1892170	1892330	Danny
1892330	1892470	and
1903230	1904230	the
1892470	1892950	team.
1893220	1893550	We
1893550	1893850	spent
1893850	1893990	the
1893990	1894290	entire
1894290	1894610	day
1894610	1895070	going
1895070	1895330	through
1895330	1895670	vendor
1895670	1896650	pitches.
1897150	1897810	I
1897810	1898070	needed
1898070	1898550	alcohol
1898550	1898890	after
1898890	1899150	that
1899150	1900130	day.
1901070	1901730	I
1904630	1905290	gave
1908590	1909250	back
1909250	1909430	to
1909430	1909610	that
1909610	1909970	team.
1909970	1910010	I
1910010	1911250	will
1911250	1911470	give
1911470	1912610	feedback.
1913290	1913850	It
1913850	1914370	behooves
1914370	1915010	us
1915010	1915190	to
1916750	1917230	give
1918770	1919470	feedback.
1919470	1919870	That way
1919870	1920410	we all
1920410	1921570	get better.
1922650	1922670	And
1922670	1923010	that's
1923010	1923830	critical.
1923830	1924490	Now,
1924490	1924930	that's
1924930	1925190	Friday
1925190	1925830	afternoon.
1926950	1927430	I
1928450	1929150	turn up
1929150	1929370	and I
1929370	1929750	turn up
1929750	1930210	ready to
1930210	1931250	work.
1932010	1932110	I
1932110	1932330	won't
1932330	1932530	give
1932530	1932710	them
1932710	1932990	Monday
1932990	1933210	through
1933210	1933870	Thursday.
1939570	1940050	I'm
1941230	1941710	also
1941710	1942010	plugged
1942010	1942190	into
1942190	1942510	the
1942510	1942790	VC
1942790	1943710	community.
1945610	1946210	There's
1946310	1946430	a lot
1946430	1946690	of stuff
1946690	1947070	we do
1947070	1947270	to
1947270	1948190	encourage
1948190	1948630	it the
1948630	1949750	right
1949750	1951210	way.
1951490	1952090	LinkedIn
1952090	1952970	is the
1953930	1954530	same
1955250	1956450	thing.
1956890	1957170	I've
1957890	1958790	done a
1958790	1959170	bunch of
1959170	1959330	posts
1959330	1959630	on
1959630	1961010	LinkedIn.
1965510	1966710	I try
1966710	1967130	to not
1967130	1968190	be too
1968190	1968530	spicy
1968530	1969030	and too
1969030	1969290	blunt.
1969290	1970110	Sometimes it
1970110	1970470	works,
1970470	1970930	sometimes it
1970930	1971890	doesn't.
1971890	1972130	But I
1972130	1972890	try.
1974050	1974630	Yeah,
1974630	1974910	go for
1974910	1975550	it.
1975770	1975990	Does
1975990	1976110	that
1976110	1976810	help?
1979700	1980180	Repeat
1980180	1980580	the
1980580	1981060	question.
1981060	1981320	Go
1981320	1981500	for
1981500	1981640	it,
1981640	1982220	sir.
1988280	1988760	I'm
1988760	1988860	not
1988860	1989180	repeating
1989180	1989420	this
1989420	1989720	question
1989720	1990000	unless
1990000	1990240	it's
1990240	1990580	10
1990580	1991480	seconds.
1992640	1993120	Go
1993120	1993380	for it.
1993380	1993580	Go for
1993580	1993680	the
1993680	1994180	question.
1994180	1994900	answer it
1994900	1995180	shortly
1995180	1995420	down
1995420	1996180	for me.
2000600	2001160	Yep.
2001160	2001380	Yep.
2001380	2001900	Yep.
2002020	2002540	Yep.
2011580	2012220	Yep.
2012320	2013120	Yep.
2014780	2015140	Yep.
2015140	2015540	Yep.
2021640	2021700	Yep.
2021700	2021980	Yep.
2021980	2022380	Yep.
2022480	2022520	Yep.
2022520	2022940	Yep.
2026400	2030660	Alright, that's fair. So in other words, how do we do career development within our environment?
2030780	2035880	Okay. Career development. Yeah, yeah.
2035880	2038840	Now, you're talking to somebody that left school at 16.
2039740	2043960	So, I didn't do college. I spent one year... I spent less than one year at Oxford.
2043960	2048080	I was studying pure mathematics and cryptography at Oxford. I got bored left.
2048080	2054640	So, that's my entire world in traditional education.
2054960	2062260	Outside of that, I've had my MCT, my CISSP, my CCIE, and all that other stupid shit.
2062260	2064040	They've all got dust on them.
2064480	2066440	So this is a question for all of you.
2066480	2070080	How many of you would consider yourselves professionals within your worlds?
2070100	2073060	Professional development teams. Okay. How have you got there?
2074180	2077300	Blood, sweat, hard work.
2077740	2079320	10,000 hours. Who said that?
2079500	2082780	You're awesome. Thank you. Yeah, 10,000 hours.
2082900	2085760	5 solid years, 10 solid years of work.
2085760	2088640	I think it's tough because there's so much variety.
2088640	2091840	I mean, you all... come sit down or hang out.
2091840	2095040	This for me is such a challenging environment as far as that goes.
2095040	2098600	Because there are so many languages, there are so many structures,
2098600	2101080	and there's a huge difference between developing software
2101080	2103260	for like an engineering inside an avionics system
2103260	2106380	than there is for developing, you know, something that runs...
2106380	2108640	I was going to get my phone out without flashing everybody.
2109500	2112160	Something that runs an application on here.
2112200	2114600	So you've got criticality of systems.
2114600	2117740	But the other thing is as well, think about it.
2117740	2120380	From an engineering, basic standard engineering principles
2120380	2123800	haven't changed a huge amount in a long time.
2124240	2127240	Whereas, I mean, how often does software change?
2127240	2130160	Every minute, yeah.
2130160	2132220	I was going to be like every 10-15 minutes
2132220	2134160	and be civilized about the whole thing.
2134300	2137860	But we are in such an evolving environment that, you know...
2138800	2141320	I did Pascal, I did Fortran.
2141320	2143540	God, I fucking did basic for crying out loud.
2143840	2146720	Yeah, no shit. I can still program in assembly.
2147260	2149020	So, yeah. Fuck you.
2149020	2151200	Yeah, you actually want to break into anything?
2151200	2153080	Screw all your high-level shit.
2153080	2155500	Get down to the bits and bytes.
2155500	2159400	Because you'll bypass every fucking end point known to mankind.
2159920	2162280	And it's so much fun when clan strike goes...
2162280	2163980	Wee, I didn't see you.
2164680	2165660	Yeah, no, it's...
2169640	2173120	I mean, you'll tell me if I'm wrong on this one.
2173120	2176040	From my standpoint, professional development for me
2177060	2180500	is putting the skills I have into practice.
2180620	2183020	It is continuing to evolve them.
2183020	2185380	But if I learn, let's just say I learn...
2185380	2188940	I mean, at the moment, I'm learning Rust and a whole bunch of other stuff for AI work.
2189320	2191520	I'm having some fun with AI. It ain't pretty.
2191760	2193300	I'm learning a whole bunch of that side of it.
2193300	2196820	And I'm learning the structures, the architectures, some various other bits and pieces to do.
2196820	2199560	But once I've done that, I'll reach out to a bunch of people here and go,
2199560	2202000	Hey, can you help me? Can you sort some of this stuff out?
2202020	2203460	And I'll continue to evolve it.
2203460	2207180	That programming language itself has an evolutionary finite to it.
2207640	2210840	At that point, then I'm like, OK, how do I hand off to another language?
2210840	2212560	How do I hand off to another system?
2213520	2214440	How else?
2214440	2217520	I mean, how would you distinguish yourself,
2217520	2222160	the difference between a programmer, a CGM programmer, a lead programmer,
2222160	2225500	and a programmer that can reverse-engineer living crap out of anything?
2225660	2227280	Years, experience?
2230730	2233930	Yeah, software skills, implementation, documentation.
2234130	2234650	What else?
2235850	2238550	Experience, yeah. Depth and breadth of experience.
2238970	2239910	Say again?
2246170	2249430	Yeah, that's a tough one, because that's so very, very subjective.
2249970	2252830	Yeah, and this, I think, is the challenge you're running into.
2252830	2256870	In an engineering world, it's a very, very objective way of going,
2256870	2259530	engineer, senior engineer, lead engineer, da-da-da.
2259530	2261810	And I run into this at Boom all the time.
2262490	2265070	Is, you know, you'll have the engineering team,
2265070	2268110	average tenure in a company, 20-plus years.
2268290	2271410	Us, average tenure in a company, year or two?
2271890	2274010	And they're like, well, I'm sorry, you haven't got dust...
2274010	2277250	I mean, it's a very, very different mentality.
2277250	2280190	But again, communication, collaboration, and cooperation.
2280850	2283710	And it takes the engineers coming to the table to understand
2283710	2286690	that most of us kind of know what the hell we're doing,
2286690	2289550	but we also have to come to the table in a way
2289550	2291570	that we're willing to listen.
2291570	2293330	And that's something we haven't done well.
2293990	2295910	So I think it takes both.
2296190	2299150	But I don't want to go through a whole set of certification
2299150	2300890	on the stuff we're doing. I mean, we do it.
2300890	2303350	I mean, we do it on the CISSP, we do it on the annual stuff.
2303350	2305330	How many of you actually have to deal with CPE?
2305330	2308490	Actually, I don't, because I got banned from the CISC...
2309670	2311610	ISC squared. I got banned from ISC squared.
2311610	2312630	I'm like, yes!
2313530	2316390	Yeah, apparently when you break into avionics and airplanes
2316390	2319930	and make shit do the shit that shit shouldn't do,
2319930	2322010	yeah, they get all upset with that shit.
2322410	2324730	Yeah, we'll have that conversation in a minute.
2324930	2328270	I don't have an easy answer for you. I really don't.
2328270	2330870	Am I missing something? Tell me if I'm missing something.
2331530	2332990	Go for it.
2338310	2340130	Yeah, that's true. That's a huge one.
2340130	2341290	The support of the people around you.
2341290	2342730	It's kind of what we've been talking about on the human side.
2342730	2343630	Yeah, absolutely.
2344650	2346510	Other questions? Go for it.
2346510	2348390	I love your fucking hat, by the way. It's awesome.
2349370	2350670	I saw it, and I'm like, look.
2350890	2352150	Squirrel, squirrel, squirrel.
2352150	2354450	I was waiting for it to say, motherfucker, me next.
2365680	2367620	They're just so angry. I'm like, I have a problem.
2367620	2369200	Why are you bringing this to me?
2370220	2372260	Don't bring the problem to them.
2374320	2376840	No, no, no. Don't do it that way.
2377780	2380620	Have you done anything with social engineering?
2381260	2383720	Alright, use your social engineering skills.
2383760	2387380	If you walk in and go, hey, I've got a problem with this.
2387580	2389880	I've got a problem with this. You deal with it.
2390940	2392000	Yeah, exactly.
2392080	2397200	If I walk in and go, I'm sorry, I have no clue how to do with this.
2397200	2400100	Could you help me, please?
2404000	2407700	Because for 20 plus years, we've gone and gone, hey, I've got a problem with this.
2407700	2409060	You fucking fix it.
2409520	2411100	Tell me I'm wrong.
2411320	2414580	Yeah, that's the challenge.
2414920	2421200	As a security professional, I have blamed you people for fucking years.
2421580	2425100	I have looked at developers and gone, motherfuckers code better.
2425100	2427440	Tell me I'm wrong.
2427440	2430720	How many people in security have walked up and gone, hey, you're a coder.
2430720	2432780	What the fuck were you thinking?
2433680	2434520	Yeah.
2434920	2438260	Rather than come up to you and go, hey, you're a coder.
2438460	2439720	Can we sit down?
2439720	2446760	Let me show you what I've found that I would love some help with, please.
2447380	2451660	If you walk up to somebody in the engineering and network team and say, hey, look, I found this.
2451660	2457280	Can we find 10 or 15 minutes later on this week or next week or whenever you've got time,
2457280	2459800	can we sit down and quickly schedule it now?
2459920	2461300	Don't let them off the hook.
2461460	2464420	And then I would love to work with you on trying to solve this.
2464420	2465440	Is that okay?
2466060	2467060	Come at it.
2467060	2467900	Use those social...
2468620	2469860	I know we don't have...
2469860	2471940	Use the social engineering skills.
2471940	2474440	Like, seriously, go hang out with Rachel Arnold.
2474440	2478300	Go hang out with Rachel and just learn some of those different ways of approaches.
2478360	2479900	It's nuts.
2479900	2482320	And there's a human as well.
2483460	2484200	I'm tall.
2484200	2487480	I'm a lot smaller than I physically used to be.
2487520	2488520	But I'm still tall.
2488520	2489040	I'm large.
2489040	2489800	I'm imposing a bit.
2489960	2493220	I walk up to people like, shit, is it going to eat me or hump my leg?
2494200	2497720	And so a lot of the times when I walk and when I stand, I come down a bit.
2497720	2498300	I'm down a bit.
2498300	2499060	I'm siding a bit.
2499060	2500240	I've got the funny feet.
2500240	2501180	I've got the weird beard.
2501180	2504140	And you take people's levels of anxiety down.
2504340	2508760	And if you walk up with the coffee and donuts and say, hey, can we trade?
2508760	2509740	Can we do something?
2509740	2511300	So look at that as well.
2511800	2512640	Use those.
2512640	2515520	And if that doesn't work, here's the other way of doing it.
2516320	2517640	We just ran out.
2517640	2521060	We just started using strength finders in the office.
2521120	2522480	Go to the HR team.
2522480	2525740	Go to the people team and say, hey, I would love to be able...
2525740	2530160	And as a leader inside the organization, I've got people that don't want to work with each other.
2530160	2532040	I go to the HR team and I say, do me a favor.
2532040	2533960	Give me those two people's strength finders.
2533980	2538140	I want to see how to coach them on talking and working with each other.
2538140	2540440	We all have different strengths.
2540440	2542280	We all approach things differently.
2542400	2545740	It's all a matter of going, how do we find some common ground?
2546560	2547380	Does that help?
2547900	2548960	No easy answer.
2548960	2552300	I mean, short of drugging them and bribing them, it's always an option.
2553620	2554000	Yeah.
2556020	2556660	Yeah.
2556660	2557440	And that's it.
2557440	2559420	And it sucks in some ways.
2559420	2561140	But once you've done it once, guess what?
2561140	2562560	You end up forming a friendship.
2562880	2566440	And then they bring you into other meetings.
2566440	2567820	Yeah, it's...
2567820	2570000	And then now you have another advocate.
2570420	2571440	I mean, it's...
2572160	2574260	As a security industry, we've sucked.
2574260	2575360	We haven't done well at it.
2575360	2575960	So guess what?
2575960	2580720	We got a whole lot of human debt to go through before we get past that.
2580780	2581500	Does that help?
2581620	2582700	All right.
2585670	2586890	Go for it.
2586970	2588230	Go for it.
2589430	2590670	Wrong hand.
2592670	2593750	Mm-hmm.
2602330	2604070	Okay, so remote collaboration.
2604070	2605590	How do we do remote collaboration?
2605750	2607970	How many of you do remote collaboration?
2607970	2608610	I actually want to...
2608610	2610470	Holy shit.
2610690	2611590	You rock.
2611590	2611930	Do you do...
2611930	2613430	How many of you do remote collaboration...
2614050	2616650	Do remote collaboration successfully?
2617350	2618150	All right.
2618430	2619510	I'm going with you.
2619510	2620090	Go for it.
2620090	2621470	How do you do it successfully?
2621470	2622410	Ten seconds.
2624670	2625770	Seal meetings?
2626070	2628110	Oh, Zoom meetings and screen share.
2628110	2630370	Do you do fun Zoom meetings and screen...
2630370	2633270	Like coffee times, alcohol times, fun times?
2633270	2634030	Ice breakers.
2634030	2635270	Ice breakers.
2635590	2636630	Music.
2636790	2637430	Yeah.
2637430	2640210	So, like, non-work-related shit.
2640210	2641490	And find a time...
2641490	2642970	Okay, so here's a good one.
2643110	2645170	Actually, this goes on this one.
2645890	2647230	Imagine this.
2647610	2651370	A bunch of engineers and a bunch of software folks in America
2651370	2653570	dealing with a bunch of folks in Italy
2653570	2657430	and dealing with a bunch of folks in Spain for the first time.
2657470	2661090	As a European, it's been so fucking fun to watch.
2661750	2663190	I was just...
2663630	2664610	How y'all doing?
2664610	2666470	And the Italian person is just like...
2666470	2667870	English.
2670050	2671410	It's been brilliant.
2671410	2672910	So, here's the other part of this.
2672910	2676290	Put yourself in their fucking shoes.
2676390	2679210	If you're dealing with people across the world,
2679210	2680890	take a step back.
2681130	2683570	Stop using colloquialisms.
2683850	2685910	Stop using slang.
2685910	2691410	Slow the conversation down a little, please.
2691610	2695170	Because your first language isn't theirs.
2695650	2699270	Either that or learn their language.
2701210	2706050	Start thinking outside of your comfort zone.
2706510	2707050	So, that's one.
2707050	2707870	All right, add some others.
2707870	2709290	Give me some other collaboration.
2713030	2715670	I can't get used to you outside of a red shirt.
2715670	2716410	I don't like...
2716410	2717510	Yeah, I know.
2721450	2722730	Yeah, there we go.
2722730	2724310	Meet on their time zone.
2724650	2726630	Which means your ass has got to get up early in the morning
2726630	2729170	or you're doing a Zoom meeting late in the evening after dinner
2729170	2731110	with a bottle of alcohol in hand.
2731110	2735410	All right, other good collaboration tools for remote people.
2735410	2736410	What else you got?
2736870	2738990	A lot of one-on-one nerding out.
2738990	2739810	Yeah, there we go.
2739810	2741050	One-on-one nerding out.
2741050	2742590	Games times for crying out loud.
2742590	2743610	What else we got?
2745690	2747970	How many of you use Slack channels?
2749090	2753110	And have fun or crazy bits or the geek stuff
2753110	2754930	or the meme of the day channels?
2755110	2757050	All right, so let me ask another question
2757050	2759970	because as the CISO over at Boom,
2759970	2763930	one of the first things I did is I formed a CISO channel at Boom
2763930	2766890	and it's the Ask the CISO Anything channel.
2767410	2770490	We started out, we do awareness training every single month
2770490	2771630	and we make it fun.
2771630	2772870	It's a minute and a half, two minutes.
2772870	2775030	We use Gabrielle's stuff over at Wiser Training
2775030	2777930	and we have a shit ton load of fun with this.
2777930	2781590	I now have people who send me a screenshot
2781590	2783730	of the text message scam that they got
2783730	2785870	because they know that I run a program
2785870	2788370	that melts the attacker's phone.
2789050	2791510	I now get inbound shit sent to me.
2791510	2792970	They're like, hey, we see this.
2792970	2795490	When the people team send out a survey,
2795490	2798050	I get like 10 people going, hey, is this legit, people team?
2798050	2799950	I'm like, I fucking love you.
2800710	2802930	We have facilitated, and by the way,
2802930	2805870	I will wander around with $15, $25 gift cards
2805870	2807670	to say thank you to people.
2808290	2810290	Yeah, I will walk around and say,
2810290	2811770	hey, thank you for telling me that.
2811770	2814210	Word gets around real fast when you do that.
2814430	2817150	So it's all about the feedback and reward
2817150	2819510	and conversation and collaboration.
2819770	2820870	Again, use different tools.
2820870	2822270	Some people, no matter who they are,
2822270	2824030	don't want to be on Zoom.
2824250	2826850	So you give them a chat channel to be on.
2828030	2829770	Also, how many of you,
2829770	2833450	when was the last time anybody hand wrote a note
2833450	2835370	to say thank you to somebody?
2835370	2838990	Me, I actually did it the day before yesterday.
2839010	2841530	How many of you hand write a note?
2841750	2844310	Okay, so here's my challenge to every single one of you,
2844310	2845970	every single one of you.
2845990	2849530	Next time somebody does something good for you,
2849530	2852390	hand write a note to say thank you.
2852390	2854430	I don't care if you got to post it abroad,
2854430	2857110	but hand write that note and leave it somewhere they'll find it.
2857110	2860650	It's fucking amazing how much that means to people
2860650	2862630	still in today's age.
2862630	2863970	All right.
2864130	2866490	We got time for no more questions?
2866490	2867350	One more question.
2867410	2868410	One more question.
2868410	2869710	All right, one more question.
2870090	2871350	Anybody else got questions?
2871350	2873250	Or do I just wrap it up and say thank you?
2873830	2875850	All right, so I will wrap it up.
2875850	2881890	Okay, so how many of you need a refresher on DEF CON 101?
2883170	2884370	All right.
2885430	2889710	Three hours of sleep within a 24-hour period.
2890050	2891550	That's why power naps are good.
2891550	2894490	Two meals, one shower.
2894490	2896550	We're geeks, but we still smell.
2897050	2900210	All right, so look after yourselves.
2900210	2903970	We're out here in stupid heat, crazy weather,
2903970	2905970	surrounded by a whole lot of people.
2906130	2909450	Look after yourselves, and even more so,
2909450	2911690	look after each other, please.
2911950	2914470	With that, love you all.
2914470	2915970	Thank you very, very much.
2921930	2923330	DEF CON 101
2923330	2923350	www.defcon101.org