start	end	text
0	7740	All right, all right, all right, all right, man. Hi, everybody walking by. I know you
7740	14840	can hear me. This is Keenan from the XR Village, and we are about to have an amazing kickoff
14840	20680	talk to talk about what the XR Village is and what we do. And we have a special guest
21240	25020	who is the most amazing person that I've met in my life. She does such cool badass stuff
25020	28680	that it's just crazy. And I'm going to let her tell you about all of that. But they do
28680	33700	like packet capture and crazy XR stuff that is super fun. And you want to know more about
33700	38180	it, trust me. We do have a booth that's set up, just letting everybody know before we
38180	42740	kick off. If you go right around the corner there, you'll see big balloons that say XRV
42740	48320	for the XR Village. And that is my little intro. And now I'm going to get into the fun
48320	53300	stuff. But all of y'all in the back, why don't you come on in here? Why don't you come on
53300	62420	up? Anyone? Okay. So, hi again. Kenan Skelly. I am the founder of the XR Village and I'm
62420	67480	really excited that you guys are here with us today. This is our first village at DEF
67480	72380	CON and we are super excited to be here. So I'm going to give you a little bit of history
72380	78940	about why there's an XR Village and what it means and all of that fun stuff. So I started
78940	84780	my life out doing a lot of training and educational things that involved, you know, video
84780	92500	games and fun stuff like that, which is really cool. It's really cool. And the problem with
92500	97740	that is I started a company that was really meant to build out cyber security training
97740	103140	and education, like ready player one style, using artificial, I'm sorry, not artificial
103140	108680	technology, using AR VR, which we now call XR. And we're calling it XR forever now because
108680	115020	last year I had it put on our T-shirts and so that's what it is now. Make sure your companies
115020	121400	comply. So we started looking at development platforms where we could actually get in and
121400	129200	build AAA quality games on the AR, I did it, XR devices. And what was really interesting
129200	133080	about it is we looked at four or five different platforms and we found that there was no
133080	139060	security developer kit in any of those platforms. And we are a cyber security company trying
139060	143360	to teach cyber security to other people and we can't build something, we can't build our
143360	149200	ready player one without any actual security being put into the platform. So that's kind
149200	153880	of how the XR village was born. It was really me saying, I see a gap here where there's
153880	158440	not enough security and there's not enough really happening from a policy level, from
158540	163360	a legislation level, and at a technological level. And we need to kind of get ahead of
163360	170200	that because AR, VR, XR is about to explode. Now last year we were super, super lucky at
170200	175500	the very last minute to get a slot at the biohacking village. Nina was kind enough to
175500	181360	give us an hour on Sunday and we had bad VR there last year too, doing cool things and
181360	189440	scaring people with their magic. It was only supposed to be a one hour talk and for 25
189440	196060	people it was a 25 person room. And we stopped counting at 75 standing room only and they
196060	200560	had to kick us out after four hours. That was the level of security interest that was
200560	206760	garnered just by that one hour talk. And we got so many great ideas about what this needs
206760	212740	to address, what this problem looks like. Right now, the United States, and you might not
212740	218280	know this, but I hope you do because you're at this talk, we don't really have privacy laws.
218640	223000	Like, just, we don't. We don't have GDPR. We don't have the European Union stepping in
223000	227440	and saying that everybody's data is protected, dot, dot, dot, dot, dot, dot. And when you
227440	234380	think about that in context of XR, that really scares the shit out of me. I don't know if
234380	239300	it scares you, but it scares me. So right now we have, you know, 5-year-olds, 6-year-olds,
239300	245060	7-year-olds who are going to school and being taught using a meta quest, being taught using
245060	250220	all of these XR devices. And the thing that's really interesting is that most of them have
250220	255640	some sort of AI capability along with the fact that they have biometrics, along with the
255640	260380	fact that there are like 17 cameras all the way around the outside of it that are actually
260380	266440	recording your entire environment. So just that right there should scare everybody in this
266440	270700	room. Especially if your kids are walking around your house and you're naked and out of the
270700	276220	shower. Because you're getting some recorded stuff. But mostly it's about safety. When we
276220	281760	start talking about how we make a safe future in technology, security by design is really
281760	287320	like the buzz word of the day. But it's not new. It's just something we don't do well. And
287320	292140	we need to get better at it. So I think that the real purpose of the village is to help
292140	299580	promote secure by design. But by driving policy technology and fun stuff like hacking, you
299580	304480	know, meta quests which we're doing over there. And also on Sunday for people who are
304480	310580	interested, we have Dave Maynor, our favorite hacker in the whole wide world who's actually
310580	316640	going to do a live stream hacking the meta quest as a training event for everybody that
316640	321680	participates in our hackathon this week. And he's actually going to hack into the meta
321680	327900	quest using the meta quest pro. Will be live streamed. You can check out more data on our
327900	333220	website or you can check it out with the DEF CON information. So those things are all super,
333220	338940	super exciting. But there's so much work to be done here. One of the things that I envisioned
338940	344760	when I kind of started this was we really need to have that triangle approach and do the
344760	349500	policy technology and legislation at the same time. Because privacy is already an issue
349500	356560	that's super important and super covered. And I'm a policy wonk nerd and I really believe
356560	363240	that when there's a lot of big legislation, you can kind of slip in stuff, right? So what I
363240	367340	would like to see is some privacy slipped in for some of the technologies that we're talking
367340	374460	about. The European Union, I think I said before, is very strict on this. In fact, they just
374460	379720	passed something that says that if you're in technology and you have something like
379720	384820	artificial intelligence and combined with biometrics, that you have to go through a government
384820	392380	approval process to do that. That would be cool. When we talk about XR, we're adding an
392380	398400	entire other element to it that is chaos and that's the AI biometrics and all of the cameras
398400	402380	that go with it. And the fact that we're giving it to five year olds in schools and having
402380	407820	them teach or do things, right? It's scary. It's a really scary world. But the policy piece
407820	414040	really has to be almost at the forefront in terms of pushing that, driving that and making
414040	418540	sure that people on the hill understand the complexities of this problem. That it's not just
418540	423960	an AI problem. That it's not just a privacy problem. It's not just a safety problem. It is all
423960	429980	of those things combined. And way more scary. So that's a big piece of it for me. The
429980	435620	legislation piece is the second part that I thought would be really crucial. There are so
435620	440500	many cybersecurity bills on the floor at any given point in time. It's actually ridiculous and
440500	448000	insane. Scary insane. And they all try to address privacy. They all try to address security.
448000	452220	They all try to address the things that we're talking about here. But it's not in a cohesive
452220	458300	way that really is going to let that legislation get off the floor and really move forward. And
458300	462420	then the third pillar of that for the technology is where we bring in our partner technology
462420	470880	companies like BadVR. And we really focus on how those are doing security, one. Two, how are
470880	475560	they helping the cybersecurity community? Because there's a lot of folks out there who are
475560	480160	using it to do really cool stuff for security and protection. And I think we're going to talk a
480160	487140	little bit about that today. And we also have a playground over there where you can get your
487140	491560	hands on a lot of haptic stuff and just kind of play with it and see what happens. But our
491560	496200	vision going forward for the next three years is to really have these hackathon events all
496200	501980	over the show at B-sides, at local places. And we got very fortunate this year that Meta was
501980	506720	able to supply devices for us. And we're hoping to work with them in the future to continue to
506720	514780	make this a very community style event. So that's all very exciting. I'm going to hand this
514780	519700	off to Susie in a second. But I want to say one of our core functions this year for being a
519700	525500	first-time village was making sure that everybody understood the concept of it takes a
525500	530780	village. I would not be here, our village would not be here if it weren't for Nina at Biohacking
530780	536080	who kind of pulled us in and gave us a platform to actually talk about. We would not be here
536080	540680	without the ICS village who had us at Hack the Capital this year and let us go on and on
540680	545800	about really cool stuff. We would not be here if it was not for the red team village who
545800	551460	helped coordinate us getting all of the stuff from Meta. So you'll see throughout the day,
551460	556820	throughout the weekend, that all of our talks are in collaboration with another village.
556820	562360	Today's talk is in collaboration with the ICS village. Unfortunately our ICS representative,
562960	567680	we had some timing issues with this talk and he had to go to another talk. But we're still
567680	573480	going to talk about ICS today. We're going to talk about the really interesting ways that XR is
573480	578760	kind of approaching security, both from a let's protect this device, also how to enable
578760	584000	cybersecurity, and also what are we doing when it comes to the grid and XR? What are we doing
584000	589360	when it comes to power plants and XR? So that's where we're going to hand it over to Susie and
589360	592980	we're going to introduce her and we're going to have a little chat about all of the fun things
592980	593860	that she does.
595100	600680	Thank you so much, Keenan. I appreciate it. Hello, everyone. Thank you for being here and thank
600680	606160	you for taking the time to come over and listen to this talk. We were actually billed at 2 p.m.
606160	610920	So if you're wondering, if you want a little bit more information about stuff, you can look at us,
610920	617000	look us up, and we were the ones initially in the 2 p.m. slot. That being said, thank you so much
617000	622660	for having me. I really appreciate it. A little bit of background about myself. I'm the CEO and
622660	630180	co-founder of a company called BadVR. It stands for bring all your data to VR. And similar to
630180	633860	your story, when I founded the company, we originally thought we were going to be a VR
633860	639740	company. But, you know, as with all sort of company journeys, that sort of morphed and changed over
639740	646220	time. So the irony of now is, of course, most of our products are actually AR products. But I do
646220	651700	believe that in the future, VR and AR are going to combine together to be sort of one device,
651700	658760	call it XR, call it what you will. But, yeah, our focus is really visualizing or using AR and VR
658760	665520	technology to visualize really large, complex data sets. And, you know, when people hear that
665520	670200	tagline or hear that description of my company, they usually think, like, oh, you're looking at
670200	676040	3D charts and graphs using a VR headset. And that could not be further from what we're actually
676040	682400	doing. So when I founded the company, my background was in doing 2D data visualization
682400	690080	interfaces. I was a UX designer, product designer. I really wanted to find a way to make data more
690080	695340	accessible to everyone. I felt that it was one of the world's most valuable commodities, more
695340	701820	valuable than even gold. And oil or anything like that. But the problem now is that a lot of people
701820	706660	can't see data, they can't work with data unless they're very highly technically trained. And a
706660	710660	lot of the people who are technically trained tend to be of the same sort of background and
710660	717680	skill set. So my vision for founding the company was to use that new technology, AR and VR, to make
717680	723420	data and the visualization of data and the analysis of data much more universally accessible
723420	729120	to everyone. So non-technical people could put on a headset and easily explore data. So to do that,
729120	733540	I couldn't just make it 3D charts and graphs because that's still very difficult for
733540	739960	non-technical people to understand. So long story short, really came up with brand new ways to
739960	746240	visualize data, new and novel interfaces. An example of this would be our product called
746240	751740	C-Signal, which we're demoing over here right by the front door. So you can actually stop by the
751740	757840	booth and demo this product if you're interested. Basically, you put on a headset and it allows you
757840	764480	to see your entire RF spectrum. So you can see anything from wireless signals to telecom signals,
764480	771120	5G signals, Bluetooth signals. You're able to see that data in the real world as it actually exists.
771120	778880	So think about it as x-ray vision for your networks or x-ray vision for the RF spectrum.
778920	782800	So you're able to see information as it's flowing through these networks. You're able to see the
782800	787580	strength of the network. You're able to see who accessed the network at what point, go through
787580	794340	time, go backwards, see it in present moment, see it in real time, interact with it, all of these
794340	800920	good things. So we visualize this as sort of signal sticks in space and you're able to look
800920	805820	at it multi-dimensionally. So just as an example of some of the stuff, some of the innovation that
805820	811220	we're working on, some of the product sets that we have. So yeah, we're really excited to be here.
811220	817000	A lot of applications obviously in the cyber security space. We also have a lot of telecom
817000	824080	applications using technology like C-Signal to help do 5G deployments and help troubleshoot
824080	829920	with home Wi-Fi networks and stuff like that. We also have another product that sort of goes away
829920	834900	from the RF spectrum and helps just visualize large disparate data sets. So it's sort of like
834900	840400	an immersive command and control center. So you can bring together live data feeds, you can bring
840400	846520	together historical data feeds, geospatial, non-geospatial, into this sort of multi-dimensional
846520	852300	command and control room and collaborate together and notate and all of that good stuff. But my baby
852300	855960	is C-Signal. That was the first product that we came up with. And I think that really fits
855960	861800	the atmosphere here. I think it's very, would be a lot of interest to people here. So definitely
861800	866920	be sure to come and check it out. My co-founder, Jad, who's over here, would be happy to give you
867000	872740	a demo. He's my technical co-founder, so if you have any super technical questions, he can answer
872740	878620	those for you as well. But yeah, thank you so much for having me and looking forward to this talk.
879540	887200	Yay! I told you she was amazing, right? And really, seriously, go check out the gear,
887200	892060	go check out all of the stuff that they brought with them. It really is amazing and scary to
892060	898700	think about. It will scare you, but in a good way that will make you want to change the world.
898920	906540	So one of the interesting things that when I first met Susie and when we first had them involved
906540	911380	kind of last year, they were the only technology partner that we had in our little tiny room of
911380	918100	25 people that had 75 people in it. And they did a great demonstration. So really wanted to bring
918100	923880	them back and talk about some of the applications that they have, not just what they've built, but
923880	929420	how they're using it. Now because this talk is meant to be a collaboration with the ICS Village,
929420	935060	our talk is going to focus on some of the things that apply directly to the electric grid, that
935060	941280	apply directly to nuclear power plants, that apply to things that might be scary to think about in
941280	947820	terms of that much access to data. However, on the flip side of that, having that much access
947820	952560	to data also makes it easier for cybersecurity professionals to visualize and understand what
952560	958540	the problem is. So it's kind of a double-edged sword and one that I think that I think is
958540	963200	absolutely critically important. There are two sides to that coin and we have to be dealing with
963200	970200	both of them at the same. So just out of curiosity, how many like critical infrastructures would you
970200	978480	work with? We work with several, one of them being telecom that I mentioned earlier. We've also done
978480	985760	work with utility companies like large electrical grids, power grids, stuff like that. We've had
985760	992100	demonstrations in smart cities, so visualizing like camera feeds from around different locations
992100	998140	in a city or a campus, stuff like that. So that speaks a little bit to like traffic flow and then
998140	1004320	also security. So on the campus scenario, it was like monitoring video feeds and access points,
1004320	1009360	who's accessing what at what time, going back through it historically and then also monitoring
1009360	1014400	that data live. But I would say the biggest one would just be telecom because that's such an
1014400	1020220	important utility and it's such, most of our customers for C-Signal in the private sector
1020220	1026220	have that specific use case. And then also some public safety stuff too, I should mention that as
1026220	1032680	well, like police and firefighting and like wildfire response. So we did have an amazing
1032680	1038240	use case for our other products, which is the command and control center that was visualizing
1038780	1045900	wildfire data in Southern California, monitoring and visualizing ground temperature,
1045900	1053480	fire spread, asset resources, and then also monitoring water response and all of that sort
1053480	1061660	of stuff too. So yeah. So when you guys are looking at a power plant or telecom or any of
1061660	1067620	that kind of stuff, what is the most focal point that those utilities tend to be thinking
1067620	1076300	about? And then in tandem to that, have you guys had to face any unusual requests or
1076300	1081680	unusual ideas because it's critical infrastructure and critical infrastructure is challenging?
1083480	1089440	I would say like, you know, working with the power grids and stuff like that, there is a lot of
1089900	1096880	like older technology and stuff that's like not exactly like the most cutting edge stuff. So
1096880	1102740	there are a lot of like unexpected types of data that we would have to work with that we
1102740	1108260	were not anticipating would be the type of data that would be running our critical infrastructure
1108260	1115360	in our country. But, you know, it's great, I think, to see the interest in the public sector
1115360	1121580	and in the utility sector for adopting AR and VR technology. So while there is a lot of like,
1121580	1126600	you know, older databases and older technology, you know, sort of running it, clearly they are
1126600	1132000	thinking about modernizing that and they are thinking about how that can be in the future.
1132000	1137320	So that's very heartening for me and definitely very exciting to see the interest that's there.
1138260	1139180	Yeah.
1140340	1146560	That's great. And I think a little bit of my background, I actually started another life
1147620	1151720	a long time ago at DHS. So I was very involved with critical infrastructure. I ran a program
1151720	1156460	called the Comprehensive Review that actually did the very first systems of systems-based
1156460	1162840	vulnerability assessments on critical infrastructure from nuclear power plants all the way to the
1162840	1170460	chemical plants, which you're welcome, chemical sector, you now have CSAT because of our stuff.
1170900	1176960	And it's challenging, and we've been having this problem probably for 15, 30 years, where
1176960	1182720	the OT versus the IT is really the complication. And when she's talking about thinking about how
1182720	1188660	visualizing, you know, an old piece of Siemens hardware that, you know, is never going to be
1188660	1194100	replaced, there's never going to be anything that does exactly what it does, and then how do you
1194100	1199820	kludge that together with some high-tech stuff that they have in the IT space? And it's really
1199820	1205320	scary, and I know I'm using that word scary a lot because these things scare me, like legitimately.
1205320	1209840	When you start thinking about a nuclear power plant, when you start thinking about a water
1209840	1215760	utility, when you start thinking about those things, and how hard it is to replace parts,
1215760	1220840	how hard it is to upgrade the things that keep our infrastructure running, that's just
1220840	1225780	crazy and insane. Do you have any, like, wild use cases of kludging stuff together?
1227120	1235080	Yeah, I mean, it was really crazy to me. We actually did an installation with a telecom
1235080	1240800	company where, you know, it's like it was in another country, but it was the largest telecom
1240800	1244740	in that other country. And just thinking about, like, the sheer number of people
1244740	1250940	that utilize that service, and that if this, for whatever reason, this telecom would have
1250940	1255880	interrupted service, like, people literally in the middle, it was in a country, Norway,
1255880	1260480	like, way out in the middle of nowhere, would be completely cut off from the rest of humanity. And,
1260480	1265120	like, having that much responsibility in terms of, you know, obviously we're not operating the
1265120	1270460	company, but we are visualizing data that they are using to make these very critical decisions,
1270460	1275300	and, you know, just, like, felt really heavy. And it was a very big realization to me,
1275300	1280280	the importance of critical infrastructure and the impact, the broad scale impact of it,
1280280	1286400	that I had never really considered before. In terms of fusing together, like, new and old
1286400	1291480	technology, one of our products, like I was talking about, the command and control center,
1291480	1298540	can also be used for training. So, we actually had a situation in a sort of, not a smart city,
1298540	1303960	but an IoT enabled factory floor, where there was this piece, this old machine, that, like,
1303960	1308540	was literally from, like, the 80s, that they hadn't updated, that, like you said, there's no
1308540	1315100	other machine made that does that, and they wanted to use one of our products to put in data on how
1315100	1319740	to do maintenance on this, how to replace pieces of it. So, we were taking, like, these, like,
1319740	1325420	literally printed documents on paper, and, like, translating them into multiple steps in this
1325420	1330520	data visualization. So, like, environment, so someone could put on a headset, look at the
1330520	1335280	machine, see the information about this really, really old machine, and then see information for
1335280	1341180	how to perform maintenance on it. How to, you know, replace this specific part, when that part was
1341180	1348240	last replaced, and be able to work with a machine, but enabled with AR and VR technology. So, that
1348240	1352280	was really cool to me. It was, like, sort of, like, working on a, for example, like, building
1352280	1357420	dinosaur bones, or assembling a dinosaur, but using AR and VR technology, this really cool
1357420	1363140	fusion of, like, very, very old and very, very new. So, yeah, there's a lot of, like, really
1363140	1368100	cool use cases. You know, data is such a broad term. So, you know, I've talked about everything
1368100	1374800	from visualizing live data feeds to visualizing historical data feeds, non-geospatial, geospatial,
1374800	1380160	but, you know, speaking to this last scenario, we also do a lot of stuff when it comes to training.
1380160	1387000	So, taking data about machines, or about different parts or pieces, and putting it into an immersive
1387000	1392280	space to help people better perform these maintenance, critical maintenance that they
1392280	1399500	need to perform on these machines. So, I'm totally going to, like, rope her in
1399500	1403980	to making some kind of commitment on stage, just so everyone sees it.
1405900	1412760	I like this training idea, the training in AR and VR. That sounds cool, right, cyber folks?
1412760	1420800	That sounds cool. And I feel like most cyber security people, like, we like to see things
1420800	1425280	and understand how they work and take them apart and put them back together again. And right now,
1425460	1430560	a lot of the tools that we use don't necessarily make that easy for us. There's a lot of us who
1430560	1435720	can only see things this way or can only see things that way, but imagine the power you would
1435720	1439980	have to understand your network, imagine the power you would have to actually implement things in
1439980	1447120	your network if you had that level of visualization. So, do you have any, like, training planned for
1447120	1458320	the future that might include cyber security? Yes, absolutely. Yes, absolutely. So, as I was
1458320	1462940	talking about our C signal product, which is the product that allows you to put on the headset
1462940	1468800	and then have, like, x-ray vision for your, you know, RF spectrum or your wireless network,
1468800	1474860	we are looking to really hone that product and bring it into the cyber security space.
1474860	1479960	So, we're adding in a bunch of exciting new features. So, for example, one of them being
1479960	1485380	you're not only able to see your network and see the data flowing through your network, but it'll
1485380	1492480	be able to pinpoint the location of different items. So, it can say, hey, you know, we think,
1492480	1497600	or the system thinks something is transmitting from over there behind the wall. And it'll,
1497600	1503220	as you get closer, will allow you to exactly pinpoint where that thing may be. And obviously
1503220	1508880	that thing may be something that shouldn't be there, like a bug or some sort of other
1510200	1514900	security-related concern. So, that is a feature that, you know, we are working on
1514900	1519800	and integrating into the product. And we have a bunch of other sort of cyber security focused
1519800	1526260	features as well on our roadmap. But we are very much looking to provide C-Signal as a tool for
1526260	1532940	cyber security experts to monitor traffic across the RF spectrum and networks, public, private,
1532940	1539780	all of those things. I love it. You guys heard it first here. It's happening.
1539960	1546120	So, one of the really interesting things that stood out to me after working with
1546120	1552900	BadVR last year and after doing Hack the Capital with Susie this year,
1553880	1560900	as I was looking for companies for folks that had either devices or technology or infrastructure
1560900	1567580	that fit into the world of XRB, not a lot of them want to really talk about their security
1568140	1573500	for some reason. Right? Which if you remember the beginning of the talk, which is why I started
1573500	1578560	this village, is because I found that there wasn't security built into these devices and we kind of
1578560	1584260	need to have that. So, a lot of the first round of companies I went to were like, oh, that sounds
1584260	1591400	so cool. Until we got to the, but we want to hack your stuff. Like, we will responsibly disclose
1591400	1595780	and we will work with you as a company to make sure that those things are taken care of and
1595780	1601660	provide you assistance and all of these things. But they were like, we need to get the lawyers
1601660	1609340	involved. And what I absolutely love about BadVR is she didn't skip a beat. They're like, yes,
1609340	1614760	we definitely want to do this. And one of the reasons is that Susie herself is very
1614760	1621520	passionate about privacy and data privacy. So, there are device makers out there. There are
1621520	1626220	companies out there who are putting that first. And I'm going to throw a shout out right now to
1626220	1633380	Apple with the Vision Pro coming out and saying it's made with security by design. Because that
1633380	1638340	is what we need to be doing. That's what all of us need to be doing. And at this cusp right now
1638340	1643320	where XR is suddenly becoming way more interesting with Apple jumping into the game
1643940	1649800	and things of that nature, it's so important that the collaboration that we do in the XR Village
1649800	1656700	goes across all types of organizations, schools, goes across the policy piece that I talked about
1656700	1661880	before and hackathons. And that's not possible without those private companies who come in and
1661880	1666420	say, yeah, here's our stuff. Let's do something cool with it. Let's make this happen. We'll be
1666420	1672720	apart. So, I want to talk a little bit about why you're so passionate about privacy. Because I
1672720	1676480	think that's really important. And this is a view you're not going to hear from
1677960	1681040	other very large companies that might be sponsoring us.
1681040	1688580	Thank you. Thank you. Yeah, I think one thing to mention before I go into this story is,
1688580	1696560	my product, BadVR, and our software, a lot of people think of data visualization companies
1696560	1703280	or data companies as making their money off of somehow saving the data that flows through their
1703280	1707880	system and then selling it on the back end. We don't do that at all. In fact, all of the data
1707880	1713600	that comes through our system or that you see in our system, we make a huge, like, we go out
1713600	1717900	of our way to make sure that we don't save it and that we couldn't save it. The way, I mean,
1717900	1721840	you would have to ask Jad a little bit more about how we do that technically. But that was a big
1721840	1728540	thing coming for me. Like, I don't have any desire to store or to any way monetize other people's
1728540	1733920	data. I think paying for access to my product is enough. And we make more than enough money
1733920	1739160	doing that that we don't need to then also sell people's, like, data out the back door in this
1739160	1745020	very shady way. So, the reason that I feel this way is, like I had mentioned earlier, I'd worked
1745020	1751740	before I founded BadVR back in 2018, I was a UX and product designer for other data visualization
1751740	1758020	and analytics companies. And I, at the very beginning of my career, did not understand
1758020	1764800	that there was this, like, huge market for data. Until I started really building interfaces to
1764800	1769460	visualize that data. And once I started doing that, it became very clear to me that there was
1769460	1776340	this enormous amount of data out there in the world that could be accessed by anyone about me,
1776340	1781540	about my family. Like, I remember going through some of the data that I was visualizing and
1781540	1787700	putting my own name in to see all of the information that came up about me. My home,
1787700	1793100	you know, like, purchases that I had made. If somebody had a nefarious reason to come after me,
1793100	1798800	they could very easily access this information. And I just felt so violated and I felt, like,
1798800	1804520	I just felt really icky. And I was, like, I had no idea that this was a thing. I am now then putting
1804520	1808760	my family members' names into this, you know, database, seeing what comes up about them. And
1808760	1814220	it just really blew my mind. And it really made me think, like, well, number one, I think data is
1814220	1820200	an amazing resource. But number two, if I am going to make a company that visualizes data or that
1820200	1826840	provides a tool to analyze data, I want to make sure that I am not partaking in that aspect of
1826840	1831220	the industry because I don't like it. I don't think it's ethical. And quite frankly, I want
1831220	1836140	nothing to do with it. So, I want to make sure that we're using data and visualizing data and
1836140	1843220	analyzing data and providing data tools in the service of what I consider to be good. Which is
1843220	1849100	broadening and democratizing access to the insight that you can draw from that data. And not just
1849100	1854400	using it and abusing it in terms of, like, how much data can we gather, you know, behind people's
1854400	1859600	backs and how much data can we then monetize and, you know, line our pockets with. So, you know,
1859600	1865200	that part was very important to me. And I'm very proud to say that my, you know, my technology,
1865200	1869840	that's not our business model. It never has been and it never will be. So...
1870700	1878580	Hell yeah. That's awesome. I love it. So, one of the other interesting things that we're trying
1878580	1885480	to do with XR Village is research. Because there's not a lot of research out there on devices,
1885480	1890940	on platforms, on the infrastructure. And now we have big players throwing stuff out like
1890940	1897900	NVIDIA who just is ruling the world now. After, you know, all the XR fun stuff that's come out.
1897960	1904380	So, as we move forward and as part of our technology relationship, we're working to do
1904380	1909980	research partnerships with labs. We're working to do research partnerships with companies who
1909980	1915820	are interested in trying to understand what is going on kind of there and what the use cases
1915820	1922100	could be. But most importantly, how we can do that safely with security and privacy.
1922140	1928700	And that's a hard thing. That's not we're not going to solve this problem this weekend. So,
1928700	1935400	it's going to be years of coordinating not just the research and the technology and the policy
1935400	1942460	and the legislation, but also we want to be able to do teaching using these tools. So, going out
1942460	1949320	to B sides all over the country. Going to schools. Going to universities and giving people
1949320	1954400	opportunities to do the hackathon like the haptics hackathon we have right over there in the
1954400	1963680	corner using the meta quest. Which is really fun. You should definitely check it out. And also,
1963680	1969420	really trying to take to the next level the generation that's coming after us who is already
1969420	1975180	being grown up on this technology and doesn't necessarily understand the security risks that
1975180	1980440	go to it. Right? So, by having these hackathons, by bringing the technology out, letting them
1980440	1986680	touch it, play with it, break it, put it back together, they start to understand all of that
1986680	1993140	data. All of those things that make them think differently about what they should be doing and
1993140	2004180	on the internet. Now, that is also hard. It's very, very hard. But XR, more than probably any
2004180	2010620	of the villages here, and yes, I just said that, it covers all of them. It covers everything. Which
2010620	2015520	is one of the reasons we wanted to do all the collaborations this year. So, if you want to talk
2015520	2020800	about what's happening in XR with ICS village, there are power plants. There are things that
2020800	2025100	are happening in telecom. There are things that are already going on in that space. If you want
2025100	2030680	to talk about the adversary village who we're partnering with and the red team village, that
2030680	2036000	bug bounty on the devices themselves, on the software itself, on the infrastructure, that is
2036000	2043240	absolutely critical. But we also have to start thinking about bringing in, you know, other folks
2043240	2047680	like the biohacking village. One talk that we were going to have this year, but I think we're
2047680	2054360	going to do it as a recording, was a collab with biohacking. And I have four titanium vertebrae
2054360	2061060	because I used to blow up bombs. And so, I have a spinal surgeon and we're kind of in the early
2061060	2067100	phases of planning my next spinal surgery. And he kind of just lightly dropped into a conversation
2067100	2075860	not too long ago that he's going to be using VR. And I was like, what? Can we talk about that more?
2075860	2080980	I would like to know some things. And so, right there, I just started asking him questions that
2080980	2085880	he had really bad answers to. Like, okay, so you've got me on the table and you've got this
2085880	2090700	device. Does everybody have access to it? Like, can anybody go in and calibrate it? Can anybody
2090700	2096620	go do whatever? And he's like, yeah, yeah, anybody, speaking as a, anyone can get in. It's
2096620	2101100	really easy to get in. It's really easy to use and manipulate. And I'm like, do you hear what
2101100	2108440	you're saying? I'm pretty sure I'm not going to let you operate on my spine with that. But it
2108440	2112240	goes so much further than that, too. You know, when you think about the password protections,
2112240	2117680	when you think about, you know, what is that projecting? I know a lot of hackers and I know
2117680	2122840	some of them don't like me and I don't want them getting into my little VR spinal surgery
2122840	2128740	and giving me a couple of extra vertebrae, right? But all of the villages that are here
2128740	2135020	have an XR component to the world that they're in right now. For example, we also have a
2135020	2141600	partnership with the aerospace village and TSA where we are working on an event that's coming
2141600	2148200	up and we're going to have another hackathon there coming up. But the idea is that right now,
2148200	2155660	like Alaskan Airlines and other airlines are actually using XR to train pilots. Now,
2155660	2161740	that sounds really cool, right? That sounds like amazing. And so you think about it a little bit
2161740	2169000	more. So anybody can go in and get this program and teach themselves what the inside of any
2169000	2176980	cockpit looks like. That is scary. Another scary thing that I've found in this space.
2177120	2182200	So what's really interesting about our village is that we have the opportunity to cross section
2182200	2187600	across all of the other villages who have an XR component and do really interesting,
2187600	2195700	amazing things. That's why we have T-shirts. They're for sale. And bucket hats and really,
2195700	2202080	you know, cool merch. It says it takes a village. DEF CON, it takes a village. We are one of the
2202080	2208300	fortunate villages that has the ability to impact so many other sectors. And that's a good thing.
2208300	2213520	That's a really exciting thing. So I'm really looking forward to what comes next. What are
2213520	2219900	you looking forward to? I'm looking forward to a great number of things. I'm actually really
2219900	2228080	excited for our we have released C-Signal, a version of C-Signal, which is the RF visualization
2228780	2235980	technology. There is a demo version of that available now in the Quest app lab. So if you
2235980	2240200	have a MetaQuest headset, you can go to the app lab and download a version of that. So I'm really
2240200	2245960	excited about this. So you can try it out at home. It's a lot more limited than our enterprise
2245960	2252360	software, but it allows everyone with a MetaQuest headset to, for free, download the technology and
2252360	2257140	just sort of get a sneak peek of it. So you can look at your home Wi-Fi network. You can play
2257140	2262380	around with moving the routers and, yeah, reach out and touch your signals. Literally reach out
2262380	2267960	and touch them. So I'm really excited about that. I'm also really excited about the upcoming
2268920	2275660	sort of fusion, as I mentioned earlier, of AR and VR technology into one headset. So, you know,
2275660	2282080	this is sort of happening with the Apple Vision Pro, where you have, like, a headset that is
2282080	2288060	VR or AR. It can do one or the other, or it can do a little version of both. So you have the
2288060	2292140	pass-through technology where the headset can be turned on and you can still see the world around
2292140	2297160	you. I think that evolution of the hardware is very exciting, and I think it's happening a lot
2297160	2304960	faster than originally anticipated. And lastly, I'm really excited about seeing, as you mentioned,
2304960	2313200	privacy continue to be and continue to grow as a concern within the XR space. So, you know,
2313200	2321840	XR hardware has so many more sensors and cameras and things in it than your smartphone does. And
2321940	2326900	a lot of people are very concerned about, you know, oh, my smartphone, like, is giving away
2326900	2332740	my location. It's tracking me. The microphone's listening to me. Now, imagine if your smartphone
2332740	2340160	was on steroids and had video feeds of your irises and, you know, was taking temperature readings of
2340160	2346580	your skin and perspiration readings and could really anticipate or even know before you knew
2346580	2352120	how you were feeling or what you would react to. And imagine that along with the microphone,
2352120	2356480	you know, and instead of having one camera, there's 50 cameras on it and it has all these
2356480	2362880	other things. That's what an XR headset is, essentially. It is a device that has 50,
2362880	2370740	like, many, many, many more sensors than even your iPhone. So, I am so excited to partner with
2370740	2378780	Kenan on this and to really help drive forward the interest in securing the privacy of all of
2378780	2384300	those sensors in the XR space. So, as people are developing apps like my company does and other
2384300	2390660	companies do, that they're developed with this idea that security is of tantamount importance.
2390660	2396980	Especially if, you know, kids are using these devices in classrooms, which I think they should.
2396980	2403280	I think there are some really amazing use cases for using XR in the classroom or in the workplace
2403280	2409660	for workplace training, whether that be for pilots or surgeons. But to really do that effectively,
2409660	2414060	they need to secure the headset. So, I think that's a really exciting thing. And then I also
2414060	2420580	think there's this idea that I have of when it comes to security with XR, there's, you know,
2420660	2426140	the digital security, securing all of the, you know, data that's coming out of these sensors.
2426140	2431440	There's the physical security of actually securing the headset, securing the hardware,
2431440	2434880	and all of the sensors in the hardware. But I also think that people need to
2435500	2441400	be aware of a third version, which is the experiential security. So, as you are experiencing
2441400	2446960	an application in XR, that you are able to remain safe. Both physically safe, so you're not, like,
2446960	2452060	walking into walls or walking into other people. But also safe from, like, the data that's being
2452060	2457920	generated from that is not negatively impacting you in the future or not negatively impacting
2457920	2462420	the experience that you're having. You know, keeping people safe within those experiences.
2463040	2467900	You know, making sure that, for example, adults in a chat room are not in a chat room with kids
2467900	2472560	and having, you know, experiences like that that they shouldn't be allowed to have. So,
2472560	2476940	I think bringing attention to all of these things is a really important part of driving forward.
2476960	2483680	All of the security or all of the, you know, adoption of XR technology can't happen without
2483680	2489080	security being front of mind with that. Or it can't happen responsibly. It can happen,
2489080	2492800	but we don't want it to happen unless it's happening responsibly.
2494220	2501000	Thank you so much. Like I said before, isn't she a badass? It's okay, you can clap and yell.
2501480	2507300	She's pretty amazing. What BadVR is doing is really amazing. The technology is amazing. It's
2507300	2513620	all amazing. So, as we kind of wrap up here, we wanted to give a little time back to some folks,
2513620	2521600	but first, I'm going to go full-blown XRV pitch on you guys, okay? So, we have the XR village that
2521600	2527520	is over by the main door. You'll see the balloons, the very big, bright balloons that say XRV.
2527520	2533040	We have a haptics playground over there where you can go get your hands on some haptics and
2533040	2538480	see what they feel like and what it looks like and all of that fun jazz. We also have a haptics
2538480	2544940	hackathon that is happening today and tomorrow, and come participate. We've got representatives
2544940	2551280	on board from Meta who will actually be sitting there with you, and then we will responsibly
2551280	2557700	disclose any bugs that we find, and they have told us that they will use that in their bug
2557700	2563900	bounty program so you can get prizes for it. As a learning experience, as I mentioned before,
2563900	2570980	we're going to have Dave Maynor live streaming on Sunday. He'll be our last event to do kind
2570980	2577220	of training for all of the people who go through the event, the hackathon event today and tomorrow,
2577220	2582460	but take it to the next level and kind of show them what crazy, crazy, crazy looks like.
2582720	2593000	Like I said, he's going to be doing that using a MetaQuest Pro to hack into a MetaQuest. So it
2593000	2597920	should be really interesting and exciting. But we have talks going on all day today,
2597920	2602880	tomorrow, and on Sunday. We have a policy discussion that's really interesting in
2602880	2608500	collaboration with the policy village where we have Liz Wharton and Britton Heller coming in
2608500	2616660	as two fiery lawyers to talk about the craziness that is the XR space. Both very, very privacy
2616660	2624060	tuned in, and Britton is one of the most knowledgeable people about XR, both privacy
2624060	2630240	and law. So that's going to be a really interesting debate. We also have the history of XR. We have
2630240	2635120	our executive director, Star Brown, who's going to be leading that kind of fireside chat like this
2635120	2644020	with Bob Gorley, who knows a tremendous amount of history about XR. It is really fascinating to
2644020	2648660	talk to him about that. So if you see him around, definitely ask him. And then we have some fun
2648660	2654540	stuff that's just happening. We have a GLAAD scientist who's doing a VR musical experience,
2654540	2663420	and I believe that's happening right after us, I think. So it's really cool. And that's kind of
2663420	2669560	it. If you want to get involved with XR Village, please come over and see us, see me, see Star,
2669560	2675140	see Ayliff, and talk to us about how you want to get involved or what you want to learn and
2675140	2680320	how we can work together to do this. Because it takes a village, people.
2681360	2687340	And I just wanted to say as well, thank you so much for having me. You can find Bad VR right next to
2687340	2692380	the XR Village booth. We're a big red thing and we're like a little white mask, like a
2692380	2697920	little bandit mask. So come visit our table, come get a demo of C-Signal, come pick up some shirts,
2697920	2703940	we have some really badass shirts that I designed myself, stickers, pins, a whole bunch of good
2703940	2708500	stuff. But we'd love to hear from you, we'd love to give you a demo, and we'd love to have you
2708500	2710320	stop by. Thank you.
2711040	2718340	All right, so we're going to kind of wrap up. I do want to give anybody an opportunity to ask a
2718340	2724880	question if you have a burning question that can't wait. All right, good, we're going to give the
2724880	2730340	village back some time, the next village, and thank you guys so much for coming to the talk.
2730340	2732740	We look forward to having you at our events this week.
