 Good morning. My name's Gail Thackeray and I was at DEF CON 1. I was the only prosecutor they invited to come who would. And my assignment then was to debate the issues of hacking. And initially when Dead Attic called me, I told him I don't attend conventions of car thieves either. And later on we had some discussions and I did go. It was very interesting for all of us. I got up in front of a very tiny group of people in a very tiny conference room in the old sands and I said there's no debate. You've already lost. Hacking is illegal in 50 states, the federal government and a lot of other countries. And it went downhill from there. So let's go back. Where were we at DEF CON 1? First of all, I am thrilled to see how many women are in the audience. At DEF CON 7, Kevin Mitnick was still on the lamb. And the FBI sent an agent to try and capture him if he showed up. And even though Spot the Fed was a big deal, as late as DEF CON 7, and they spotted a bunch of feds and trotted them out on the stage, they never got the FBI agent. You know why? She was a girl. So what we had at DEF CON 1 were a bunch of cops who were suddenly confronting a world they knew nothing about. Cops were not using computers then. Then we had a bunch of hackers, some of whom were doing exploratory, interesting stuff, some of whom were doing very expensive, destructive stuff, which is what led to the prosecutions of the late 80s and early 90s that got all the press attention and that started the debate and led to DEF CON, led to the formation of the Electronic Frontier Foundation. And I want to add, for those of you who think that we were always divided communities, I was an early card-caring dues-paying member of the EFF. At the point when DEF CON 1 happened, we had a huge national debate going on. A lot of it was being played out and distorted in the press because we had cops who didn't understand the technology. We had hackers who didn't understand why other people were mad at them. And we had the press who couldn't talk to either of those groups. I remember there was a conversation going on on the well. Some of you may remember the well. There was no internet then, so you had to be paying very large long-distance bills if you were commuting to the well. And some of the best educated press people in America were asking things like, in Operation Sun Devil, you did 19 simultaneous search warrants across the country. Nobody got arrested. That's why we call them a search warrant. The arrest warrant is when you used the information from your search warrant to arrest the guy who did the bad stuff. We had different factions who could not communicate at DEF CON 1. And that's kind of what led to DEF CON 1, right? We were all really nervous. The hackers weren't necessarily cool with being in the room with a prosecutor. I did have to ask them not to commit any felonies in front of me. And the cops were not at that time comfortable with being on the stage with a hacker or even in the same room unless they were interviewing said hacker. I want to say that 20 years later, we've come a long way in our ability to communicate. This is proof of that. We don't agree on a lot of things. It's 9-11. We agree on a lot of things. The fact that this many people here want to hear what the general will have to say in a few minutes is proof that you've changed. The fact that so many law enforcement and security people are here is proof of the fact that we've changed. What we had at the time of DEF CON 1 was mass confusion. The issues weren't all that clear. The factions didn't share a language. Today, we have cops using computers. It was actually law enforcement that pretty much invented the field of computer forensics. I know those early guys, and they were writing code because they were desperate. They needed help. They went to Peter Norton, and they got some tweaks to Norton utilities. And that was kind of the beginning of computer forensics, the stuff they were writing and what Peter Norton did to assist us. Now, some of you are in the position of protecting the systems that we all rely on. And I think everybody in this room can agree that whatever we think about the exploratory form of hacking, there is a reliability factor that we all depend on in a civil society. And that means that you don't take risks and endanger my stuff. And that was the fundamental divide we had at DEF CON 1. We're still debating it now. As Americans, I don't think most of you who are here are Americans, but we have a lot of foreign guests. As Americans, I don't think most of you would take kindly to a group of hackers from some other country shutting down any of our infrastructure, especially if it affects you. We have evolved in our attitudes towards privacy over 20 years. We're still arguing about it. I know some of you are pretty mad at Facebook about every six months. Privacy is where you feel you're invaded. Hackers didn't, at that time, from my point of view, respect other people's property and other people's privacy. There's a lot of misinformation about those early prosecutions. A couple of the high-profile ones that led to DEF CON and the EFF were actually fraud investigations. Huge financial losses were being suffered as a result of some people's behavior. So cops didn't sit around and say, gee, whose civil liberties can we go trample on today? Oh, let's pick hackers. The cops are responsive to a need, a demand from their constituents, which is at some point in our lives, all of us. And that's what happened. We were trying to solve huge financial losses. You know why we don't have as many hacker cases today? Because you all have internet access for free. You're not running up other people's phone bills. And you're not robbing other people off their credit cards. As much. We also have better educated cops. We have spent a lot of time training them. They're still not where they need to be. They're light years behind most of you. But we have officers. The Arizona Computer Forensics Lab at the Anti-Terrorism Center, where I know work, is a marvelous resource. And we have people who specialize in things that weren't even invented when DEF CON 1 was happening. Phone forensics. That's an oxymoron. There's no forensics with phones. You can't do, for most phones, you can't do a true forensic examination. So we're doing with phones now, and with GPS, and all the other widgets, what we were doing in a very primitive way at the time of DEF CON 1. One of the legends of the Computer Investigation Early Committee, which was a federal loose group that was trying to teach each other, what is this stuff? How are we dealing with it? What's the law? There's no law. This is a bad thing. We were involved in all those early issues in law enforcement. We had some contact with members of the hacker community. Some of them educated us, not always as volunteers. Their interviews were extremely educational. And I'm proud to say that, as far as I know, as of four years ago, all of my alumni are really respectable citizens, and most of them working in the computer security field. So the hacker community has evolved to become part of the solution, and not just the problem. When we look at the evolution, and that's a common theme that Attic and I were talking about last night, the evolution of the whole community, not just DEF CON community, but the whole society around us, as the general will talk about, we have more stuff in common than we have disagreements about. You don't want me, or any of my alumni, shutting down the electricity when you're working on an important project. We don't want other countries taking our stuff, giving it away so that our brilliant minds, and some of you in this audience actually make money from your skills, when you're not at DEF CON, you don't want people stealing your stuff. You don't want people data mining your stuff and misusing it. Those are all areas we have in common. And I think DEF CON and EFF have contributed greatly to the shared understanding that brings us all here to listen to the general. So I'm gonna turn this over to Eli, and, oh, sorry, dead Eli. Dead Eli. And let him give you the other side of the perspective of DEF CON 1. Just think, when we were here the first time, half of you weren't born, nobody had a computer except the people in the room who were not cops. We didn't have the internet, and we didn't have a conversation going. Look how far we've come in 20 years. Thank you. First of all, I'd like to thank Jason Scott. If anyone's looked at your DVD, there's a good amount of material, including the tap issues of tap from way back when scammed in, and all those came from textfiles.com. So if you like the sort of thing you found on the DVD, visit textfiles.com, and the community owes him, he's our historian. So thanks, Jason Scott. So I'd like to talk a little bit about some of the motivations DEF CON 1, and why we brought people and groups together that hadn't been brought together before. And as far as I know, DEF CON was the first hacker conference to actually invite law enforcement. This was something new. And at the time, I'll be honest, it wasn't, at least for myself, it wasn't to try to get some understanding of the two sides and to bring everyone together or anything like that. We knew they were gonna come anyways. They actually went to all the hacker conferences and then busted people when they were doing silly, stupid things. So we thought we just to invite them, and then all the hackers would know, hey, the cops are here. Let's have a weekend free from blatant felonies all over the place. And it's worked out. The only arrests that I am aware of that have occurred at DEF CON over the years have been alcohol-induced party-related offenses for the most part. So you get 15,000 drunk people together and that will happen occasionally. So we brought in Gail Thacker, the most terrifying conversation I ever had. When I invited her, she was actively prosecuting two or three very good friends of mine, including one of the DEF CON one speakers who wisely changed his talk from security-related to car repair. It was an awful train wreck of a speech, but he stayed out of jail. So that was probably wise. Also, we invited the press. That was a relatively new thing too. I don't think hacker conferences had done that in the past either. So that was something new. And I sort of, I had this idea of a checks and balances system that was sort of what was going through our minds. And it was just me and Jeff planning DEF CON one. So the idea was, okay, we'll bring the feds because they're coming anyways. We'll invite them. And then in case they do anything ridiculous that we think maybe it'll violate someone's civil liberties, we'll bring the press there so they can report on that. And that hasn't happened. Although all these various stakeholders have behaved relatively well, except for a single undercover reporter a number of years ago. If you Google her name, you'll find the first hits and probably for the rest of that poor woman's life, the DEF CON related poor judgment. I blame her employer. So we brought the press in. And at the time the press coverage on security issues and hacking issues was abysmal. It was, they were ignorant. The stories in the most mainstream publications were truly awful. So in addition to that, we thought, well, so bring the prosecutor because they're gonna come anyways. Bring the press to cover anything. We should bring some civil liberties lawyers in in case anything bad happens. So we have lawyers on site. And while there hasn't been any law enforcement action over the years, thankfully at DEF CON, having civil liberty lawyers around has been a wonderful thing for DEF CON speakers because companies often don't like it when we reveal the flaws and they like to keep that a secret. And we're not very good at keeping those sorts of secrets which is why we rock. And so the civil liberties folks came and it turns out that we need protection from the corporations and not from the feds which was a surprise. And I'm thankful they're here. And this year, we had the CPSR originally computer professionals for social responsibility. Later the EFF came. And this year the ACLU is here as well as the National Lawyers Guild. So there's a wide variety of civil liberties groups. And we've been called in years ago. One of our DEF CON stickers was cut up and rearranged to FedCon because frankly, there's a lot of feds here. And a lot of the feds that are here are hackers just straight up. So that's okay. That wasn't necessarily the case when they first started coming but it's certainly the case now and there's a lot of folks that work for the government that are really truly part of our community. They're not the other they are us. And I think that's helped. I think that's helped a lot. And instead of viewing the government as the enemy we just need to infiltrate them and make the government the one we want. So the idea was a whole huge set of checks and balances and it might have been a silly theory and it turned out we didn't actually have to fear law enforcement as much as we thought we did but also I think letting everyone know, hey, this is a weekend to party and have fun and exchange information and rampant obvious criminal activity and multiple felonies and do that on Tuesday, you know? So the initial motivation was that was a checks and balances. What ended up happening was something better and different than was imagined. And that was a greater understanding of all the various parties and all of these groups understood the motivations of the others and feared the others less. And now we kind of get along to a very large extent. Also helpful I think, back 20 years ago there wasn't serious mafia criminal organized crime making millions and millions of dollars off of cyber crime. And frankly the cops have much better things to do than to deal with occasional trespass explorations. And again, I remember when I could pay $20 a month and quit being a felon, that was awesome. I slapped down that $20 for an ISP moment I could do that. And it's, you know, for those that weren't there back in the day, it's kind of an odd idea. What do you mean you were a felon to get on the internet? Well, there was no dot com. There were no ISPs. If you weren't associated with the university the only way you're gonna get onto the internet was essentially break some rules. So the press I think is interesting. I'm on the press team. So I'll talk a little bit about that. They've gotten a lot better over the years. Robert X. Cringley was at DEF CON one and wrote a couple of blurbs about us. But over the years, the press presence has grown and grown and grown and we're over a hundred different media organizations are at DEF CON, including every major television network, et cetera, et cetera. I'll tell you who's not allowed though. There is one segment of press that tried to get into DEF CON one and has tried over the years to get into DEF CON, local press. So Las Vegas, anything. I have nothing against the Las Vegas press. It's just generally as rule of thumb, local press sucks. So they don't need to come in and we don't want an understanding with them. So I'm sorry if anyone hears with some local press somewhere. I'm sure you do a good job. Activists have changed over the years, the nature of activism. EFF is more of a mainstream organization. If you look at what they do, if you look at the contents of their activities, their lobbying, their lawsuits, all of this, it spans a huge, wide range of activities. And I thank everyone here for supporting them. And I found out yesterday that Gail was a member of the EFF and I liked her even more when I found that out. So thank you Gail. And what I really appreciate that actually is having people within the government and within the law enforcement have a deep understanding for the need of civil liberties and that's important and I'm really happy about that. Also, I wanna mention something about government in general. People often refer to it as a single monolithic entity and in fact there's a ton of different pieces of government and they have kind of competing agendas, conflicting agendas. For example, the Federal Trade Commission, which is what does that have to do with anything? Well, they actually hired one of us and a privacy advocate and a technologist and I think he's speaking right now, Christopher Soygan. And so there are federal agencies that have the same passion for activism and protecting consumers that some of us do. So then there's also the FBI, which like I said, they're busy with actual real scary cybercrimes in the nation states and whatnot. The NSA, and I'll briefly mention this, I was gonna talk about how our interests are overlapping and yes, many of us fear the NSA in some ways. We're, there's secrecy and things unknown about both their surveillance capabilities and their offensive capabilities. So in some ways, we have interest in offensive capabilities too, so there's an interest we share in common. But more than that, they have a leadership role in protecting our infrastructure and everyone wants an internet so they can play on it and they've supported Linux SE, they've supported various hardening guides and want our overall infrastructure to be secure and wanna share knowledge to help short vulnerabilities. And so in that way, and I'm very happy, the more public they are with this and the more open they are with that, I think the better defensive posture everyone has. So I think I'm running out of time. Thank you all and enjoy your DEF CON.