WEBVTT 00:00.000 --> 00:03.280 Welcome to our talk. 00:03.280 --> 00:09.700 I am Starr Brown, and I am pleased to introduce Bob Gorley of 00:12.860 --> 00:25.100 OODA Datalink, and I am the executive director of the XR Village, and you're joining us today to understand, from fiction to reality, the history of the metaverse and XR. 00:27.540 --> 00:28.480 Thanks, Starr. 00:28.480 --> 00:31.540 And Starr, first I want to say thanks for pulling together the XR Village. 00:31.560 --> 00:41.880 For those of you who haven't done it yet, please sign up for our Discord, because there's going to be a lot of persistent content in the Discord, including things like these slides that we'll put there. 00:43.100 --> 00:51.960 And the XR Village has got a Capture the Flag going on right now, and some demos with some advanced technology that's really awesome. 00:52.040 --> 00:59.460 What we'd like to talk about today is the past, present, and future of the metaverse, and some threats to the metaverse. 01:00.010 --> 01:09.000 We thought I'd start with some slides that I'll quickly go through just to talk about my view of the threats, and then Starr and I will have a discussion on the topic. 01:09.000 --> 01:09.780 Sound about right? 01:09.780 --> 01:10.680 Sounds good. 01:10.680 --> 01:11.780 Okay, let's do it. 01:11.780 --> 01:19.560 So the topic of these slides is defending the metaverse, and I wanted to give you just an overview of what I'm trying to capture in these notes. 01:19.560 --> 01:26.660 If you want a copy of this, just send me an email or come to the Discord server for the XR Village, and I'll post these there that you can download. 01:26.660 --> 01:31.940 So we are going to talk about the metaverse and what it is and what it's not, and how that relates to XR. 01:31.940 --> 01:36.280 We're going to talk about then the key threats and some ideas of mitigating the threats. 01:36.280 --> 01:38.800 And we're going to talk a little bit about the history of this stuff. 01:38.880 --> 01:43.980 Before going further, I wanted to talk about the history of XR. 01:44.460 --> 01:57.100 XR, meaning virtual reality, extended reality, augmented reality, all together, has a long history that I think actually starts in science fiction. 01:58.500 --> 02:11.020 There was a 1935 science fiction story called Pygmalion's Glasses, which outlined what the metaverse is talked about today and what XR is talked about today. 02:11.020 --> 02:20.480 Science fiction, a nice short story, but it was really an exciting vision of what could happen if you can put on goggles and be in a different world. 02:20.480 --> 02:24.980 And that's what we're building and experimenting with today in the XR village. 02:25.460 --> 02:26.760 But there are threats. 02:26.760 --> 02:29.840 And that's what we wanted to get into with this presentation. 02:29.960 --> 02:34.760 I say there's five threats, but I'm going to talk about a sixth one that I learned about today. 02:34.800 --> 02:37.720 And with your feedback, maybe there's more. 02:37.720 --> 02:41.460 We need to talk about the threats so we can figure out how to mitigate the threats. 02:41.860 --> 02:52.440 The bottom line up front, we are building through extended reality a new system, a metaverse, a new wave of technology. 02:52.440 --> 02:57.220 And it is not going to be more secure than the current waves of technology. 02:57.220 --> 03:06.200 The three waves as we see them, the first wave was the Internet itself connecting computers and servers together in an interoperable way. 03:06.200 --> 03:18.600 The second wave of Internet technologies is the mobile revolution based upon cell technologies that included mobile devices and all the applications that came with that. 03:18.600 --> 03:23.800 The third wave that is now being built is this XR wave. 03:23.800 --> 03:26.620 It's a wave towards the metaverse. 03:26.620 --> 03:28.380 It really is the future. 03:28.380 --> 03:39.880 The first two waves are still going to be there for a long time, but the third wave, the XR wave, is what is being built right now and is why this village is so hopping over here. 03:39.880 --> 03:40.780 Next, please. 03:40.780 --> 03:42.420 So what is the metaverse? 03:42.420 --> 03:44.760 You hear metaverse frequently. 03:44.760 --> 03:48.700 My view is don't lock into anyone's specific definition. 03:48.700 --> 03:50.220 It's far too early for that. 03:50.220 --> 04:01.080 But what is being built is a massive, scalable, interoperable network of networks and persistent virtual reality and augmented reality worlds. 04:01.080 --> 04:04.520 That metaverse is being built, but it's not here yet. 04:04.520 --> 04:08.080 We have hints of what's coming, and I'll show you a few on the next slide. 04:08.080 --> 04:09.180 Next, please. 04:09.180 --> 04:11.840 So these are some of the hints that we're seeing. 04:11.840 --> 04:15.960 I don't think of any of these as the metaverse. 04:15.960 --> 04:22.020 They're just indicators of what's coming when it's all linked together in a scalable, persistent way. 04:22.020 --> 04:26.680 You have all seen the business collaboration tools and the education collaboration tools. 04:26.680 --> 04:36.480 I think you've probably all seen the games that are out there that can be accessed through any computer or mobile devices through extended reality, augmented reality, virtual reality. 04:36.480 --> 04:39.920 You don't have to have the goggles, but the goggles help a lot too. 04:39.920 --> 04:48.700 You have also seen the other tools that are being the games like Roblox, Fortnite, and others. 04:48.700 --> 04:51.560 The digital twins in the business world you've seen. 04:51.560 --> 04:54.560 These are all hints of what's coming, but it's not the metaverse yet. 04:54.560 --> 04:55.820 Next, please. 04:55.960 --> 05:11.840 The metaverse is coming, however, and that metaverse of tomorrow is going to impact so many industries, as you can see over in the XR Village, and get hints of what is coming, including just about anyone who needs to work with data for a business or professional reason, 05:11.840 --> 05:16.540 but also anyone who likes entertainment in a nice 3D interactive way. 05:16.540 --> 05:18.900 It is going to be a trillion dollar industry. 05:18.900 --> 05:19.680 Next, please. 05:19.680 --> 05:27.800 I'd like to jump in and share that we have a live working model of a digital twin scenario in collaboration with ICS Village. 05:27.800 --> 05:34.840 It's off the rails, and you can interact and explore practical uses of this novel technology. 05:34.840 --> 05:39.700 You remind me of another thing that I think we should have told these folks about, and that is BadVR. 05:40.140 --> 05:42.460 BadVR is awesome. 05:42.460 --> 05:50.780 First of all, it's a great name for a company, but Bad stands for bring all your data to VR, and there's a demo in your village. 05:50.780 --> 06:06.080 There is all new ways to visualize real-time with spatial packet capture directly into the goggles, so that in your living world, you can see Wi-Fi signals, other cellular signals, RF signals, and so on. 06:06.860 --> 06:07.840 Awesome. 06:07.840 --> 06:11.720 The way the business analysts look at this trillion dollar industry is shown here. 06:11.720 --> 06:12.840 Next, please. 06:12.900 --> 06:22.680 Now, I want to talk about the threats, and when I built this, I was thinking of five major threats that are coming in the metaverse that are not being dealt with yet, in my opinion. 06:22.680 --> 06:30.040 Now, running a village, I want to be able to take input from everybody in the village to see if this covers all the threats or not. 06:30.040 --> 06:32.620 I did hear of a sixth one today I want to tell you about. 06:32.620 --> 06:37.240 Brief review of these threats being built, I mean, that are impacting the metaverse. 06:37.240 --> 06:39.520 There's new privacy threats we all need to worry about. 06:39.520 --> 06:47.560 If you have a device on your head, and that is collecting data and moving that data to the cloud, there are privacy issues that we need to sort out today. 06:47.560 --> 06:49.120 There's the issue of languor. 06:49.120 --> 06:55.960 What happens if you put on devices and it just pulls you into this world in ways that make you want to detach from the real world? 06:55.960 --> 06:59.700 And if too much of that happens in society, what's going to happen to all of us? 06:59.700 --> 07:07.560 And that relates directly to the third one, the onophrenia, which is an inability over time to distinguish what is real and what is not real. 07:07.560 --> 07:08.980 A very serious threat. 07:09.000 --> 07:09.860 Absolutely. 07:09.860 --> 07:11.740 There's new fraud vectors. 07:11.820 --> 07:19.100 If someone can know so much about you, including what you really desire, it's going to make it easier for them to commit fraud against you. 07:19.100 --> 07:22.660 And then I list the last one here of unleashing demons. 07:22.660 --> 07:28.840 The worst of human spirit may be tapped into and brought out in ways that are not good. 07:28.840 --> 07:32.160 Now, I wanted to talk about the sixth threat, Star. 07:32.160 --> 07:42.020 It's one that it really didn't dawn on me, this threat, until conversations this morning about the future of all this technology. 07:42.020 --> 07:45.880 And it's the threat to us humans and our livelihoods. 07:45.880 --> 07:48.440 Now, this relates to far more than just XR. 07:48.440 --> 07:54.880 This is XR plus artificial intelligence plus overall better automation and technologies. 07:54.980 --> 08:00.920 And we see what's going on right now in Hollywood to screenwriters and actors and actresses. 08:01.060 --> 08:03.220 And this is a serious threat to them. 08:03.220 --> 08:05.760 But it's also a threat to journalists. 08:05.760 --> 08:07.760 It's a threat to truck drivers. 08:07.760 --> 08:10.920 It's a threat to those who work in agriculture and the mining industry. 08:10.920 --> 08:13.100 This is another threat we need to think about. 08:13.100 --> 08:14.300 The future of XR. 08:14.300 --> 08:16.160 Is that a threat to us humans? 08:16.160 --> 08:19.940 Which leads to the need for frameworks to solve these threats. 08:20.100 --> 08:23.700 And I'll just rapidly push through these frameworks. 08:23.700 --> 08:30.520 I believe personally we need to think through what does everybody need to do to mitigate these threats? 08:30.520 --> 08:32.340 And I'm looking for open ideas here. 08:32.340 --> 08:35.240 So please get a copy of these slides off our server. 08:35.240 --> 08:36.220 Read through this. 08:36.220 --> 08:37.220 Give me your feedback. 08:37.220 --> 08:39.200 How do we address these threats? 08:39.380 --> 08:44.740 I've put in suggestions for individuals, communities, companies, governments, and academia. 08:45.380 --> 08:47.940 And we don't need to go through all of this right now. 08:47.940 --> 08:50.820 It's my suggestions, things for people, us to do. 08:50.820 --> 08:52.200 We need to keep learning. 08:52.560 --> 08:54.220 Go ahead and hit the next. 08:54.220 --> 09:04.300 For communities, the communities like DEF CON community, what do we want out of this new world of extended reality and virtual reality and enhanced and augmented reality? 09:04.300 --> 09:05.800 We need to figure that out. 09:05.800 --> 09:08.260 For companies, companies have a role to play here too. 09:08.260 --> 09:12.300 They really need to be building in security that meets our requirements. 09:12.960 --> 09:15.260 So I interject here. 09:15.260 --> 09:30.540 The thing with building, you hit a keynote for me, and the point is that we need to start thinking about building products, software, hardware, and policy better by design from the beginning so that we avoid problems in the future. 09:30.780 --> 09:31.480 Yeah. 09:31.480 --> 09:32.500 Yep. 09:32.580 --> 09:33.580 Cool. 09:33.760 --> 09:35.340 There's a role for governments. 09:35.440 --> 09:40.980 I don't want the government in our VR, but they're going to be there. 09:40.980 --> 09:49.100 And also, I think there's a role in our government in pushing back against hostile nation states that are going to be in our extended reality. 09:49.100 --> 09:53.840 So we need to decide what we want our government to do in this world. 09:53.840 --> 09:55.000 Yeah, absolutely. 09:55.000 --> 10:00.060 The entire purpose of XR Village is to drive better public policy. 10:00.060 --> 10:07.800 No one likes being told what to do, but the reality is that for society to function, we all need some set of regulations. 10:07.800 --> 10:17.660 A framework is a good place to start, but we need to get collectively informed, educated, have a little fun, but then go make the rules better. 10:17.660 --> 10:32.480 Make the rules we want to see because we're in a position now with emerging policies and other legal representations in Washington and beyond that these conversations are happening. 10:32.480 --> 10:38.900 So now is the time to scream to make sure that we can inform better public policy for tomorrow. 10:38.900 --> 10:47.860 Yeah, what a great goal, and it's a great opportunity to engage with this village, which gets to this recommendation list here. 10:47.860 --> 10:54.120 Join our Discord server, come meet with Star over in the village, and get engaged. 10:54.200 --> 11:04.060 And that Star is kind of the end of the graphics, really, if you wanted to transition to the discussion portion of our time together here. 11:04.060 --> 11:07.780 Yeah, I think the time is now. 11:08.020 --> 11:10.860 I don't know how to make that go away, so we're going to live with it. 11:10.860 --> 11:17.900 But the point is, how many people in this room knew what extended reality was before sitting down? 11:18.460 --> 11:20.140 You knew the umbrella term. 11:20.140 --> 11:25.560 That's wonderful, because every single person with the exception of one has said, I have no idea. 11:25.560 --> 11:44.420 I've talked to thousands of people so far this weekend, and in a room of computer people or security people, I might expect that you'd have more understanding of at least what the umbrella encompasses, so that we can understand the vulnerabilities that lie ahead to help. 11:44.540 --> 11:52.340 You know, and Star, I think this is one, it underscores for me that you are a pioneer, and the other village founders, and I'm very glad this is starting. 11:52.340 --> 11:56.420 It was here last year in a small way, but now you've really grown. 11:56.420 --> 12:00.620 And I think next year, you're probably going to be connected to every other village, it seems like. 12:00.620 --> 12:01.840 It seems like it. 12:01.840 --> 12:09.180 And to be honest, a lot of our current setup came because it takes a village, and that is the theme for the year. 12:09.200 --> 12:19.360 And we wouldn't be here without having been accepted as an adjunct to other appropriate areas, from biohacking, to car hacking, to ICS and beyond. 12:19.360 --> 12:21.220 Policy, of course. 12:21.440 --> 12:42.240 This year we're standing alone, and we have pretty, pretty solid interest in the topic, so I'm really here to ask the community to contribute, to think about how the metaverse and how living outside of what you can touch can be affected, and think about the naughty things. 12:42.240 --> 12:46.440 Think about the way we can tell people what we need to fix today. 12:46.980 --> 12:51.040 Right, I think that's exactly what I think needs to happen, too. 12:51.040 --> 12:58.860 If we want our technology to serve humans and make the universe better, we need to figure out what these threats really are and then how to mitigate them. 12:58.860 --> 13:04.800 And I love the way that you said we're informing policy, because we have direct connections now into the policy world. 13:04.800 --> 13:05.180 We are. 13:05.180 --> 13:12.620 We're making great leaps ahead in some regards, but we are still talking to each other. 13:12.620 --> 13:19.660 We need to get to a position where we can include and educate, and I think we're really at the right time to do so. 13:20.100 --> 13:24.260 Another thing I noticed about your village is there's a lot of young people there. 13:24.280 --> 13:25.420 It is. 13:25.420 --> 13:39.200 This morning I think everybody was maybe a little hungover, and that's awesome, but we have a lot of children this morning in this equipment, and really becoming some of the best demonstrators. 13:39.240 --> 13:45.580 I have a seven-year-old grabbing Wi-Fi bars out of the sky and giving bad VRs demo. 13:45.580 --> 13:47.540 They latch on like this. 13:47.540 --> 13:49.140 They adopt like this. 13:49.140 --> 13:51.240 This is why we need to think about this. 13:51.240 --> 14:01.920 I work largely in the education space, and I've encountered many teachers who are actively using AR in the classroom, VR in the classroom. 14:01.920 --> 14:04.140 They've been doing it for five years. 14:04.140 --> 14:06.080 They have zero concept. 14:06.080 --> 14:10.380 Who is looking backwards at their children in said classroom? 14:10.460 --> 14:12.500 They didn't even know it was a thing. 14:12.500 --> 14:14.500 They didn't know that data was stored. 14:14.500 --> 14:20.560 They didn't know that data was perhaps viewable in ways that they might not expect. 14:20.560 --> 14:26.720 So things beyond... there's temperature sensing technology, and I'll just leave that there. 14:26.720 --> 14:34.460 So it's a pretty interesting field to put on glasses and see something that we're not all realizing is being seen. 14:34.760 --> 14:39.420 And can I put you on the spot and ask you for a real definition of XR? 14:39.420 --> 14:41.600 Because I'm not sure I'm using that in the proper way. 14:41.600 --> 14:43.020 And how do you define XR? 14:43.020 --> 14:47.480 I tend to think of XR as being an umbrella term. 14:47.480 --> 14:50.180 So for me, it's less about the metaverse. 14:50.180 --> 14:55.300 And I think working through you, it makes me really think beyond hardware. 14:55.820 --> 15:04.660 So I think it's XR encompasses AR and VR along with the associated virtual worlds. 15:05.000 --> 15:05.300 Wonderful. 15:05.300 --> 15:06.540 That's great. 15:06.620 --> 15:12.260 Well, I really think this village is contributing already. 15:12.260 --> 15:20.640 And I'm wondering if we can entice more people into the Discord server, if we can persist this dialogue between DEF CONs. 15:20.640 --> 15:21.600 Absolutely. 15:21.600 --> 15:22.740 Absolutely. 15:23.100 --> 15:25.760 So join us on Discord, XR Village. 15:25.760 --> 15:28.380 You'll find our information on Twitter and on the slides. 15:28.380 --> 15:29.820 And not those slides, though. 15:29.820 --> 15:31.040 So we'll come over. 15:31.040 --> 15:32.640 We're down yonder. 15:32.640 --> 15:37.160 We'd love to have you come play and then come see the demos and check us out. 15:37.500 --> 15:38.380 Cool. 15:38.840 --> 15:39.340 Thanks.