{"id":1192298,"date":"2026-11-03T10:14:38","date_gmt":"2026-11-03T17:14:38","guid":{"rendered":"https:\/\/www.microsoft.com\/en-us\/research\/?p=1192298"},"modified":"2026-11-03T10:14:40","modified_gmt":"2026-11-03T17:14:40","slug":"learn-the-rules-the-hacker-mindset","status":"publish","type":"post","link":"https:\/\/www.microsoft.com\/en-us\/research\/podcast\/learn-the-rules-the-hacker-mindset\/","title":{"rendered":"Learn the rules: The hacker mindset"},"content":{"rendered":"\n<figure class=\"wp-block-embed is-type-video is-provider-youtube wp-block-embed-youtube wp-embed-aspect-16-9 wp-has-aspect-ratio\"><div class=\"wp-block-embed__wrapper\">\n<div class=\"yt-consent-placeholder\" data-video-id=\"uuXijUuj4MA\" data-poster=\"https:\/\/i.ytimg.com\/vi\/uuXijUuj4MA\/hqdefault.jpg\" style=\"background-image:url(https:\/\/i.ytimg.com\/vi\/uuXijUuj4MA\/hqdefault.jpg)\"><iframe aria-hidden=\"true\" tabindex=\"-1\" title=\"Learn the rules: The hacker mindset\" width=\"500\" height=\"281\" data-src=\"https:\/\/www.youtube-nocookie.com\/embed\/uuXijUuj4MA?feature=oembed&rel=0&enablejsapi=1\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" referrerpolicy=\"strict-origin-when-cross-origin\" allowfullscreen><\/iframe><div class=\"yt-consent-placeholder__loading\" aria-hidden=\"true\"><svg viewBox=\"0 0 48 48\" focusable=\"false\"><circle cx=\"24\" cy=\"24\" r=\"19\"><\/circle><\/svg><\/div><div class=\"yt-consent-placeholder__overlay\" hidden><button class=\"yt-consent-placeholder__play\"><svg width=\"42\" height=\"42\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" aria-hidden=\"true\" focusable=\"false\"><g fill=\"none\" fill-rule=\"evenodd\"><circle fill=\"#000\" opacity=\".556\" cx=\"21\" cy=\"21\" r=\"21\"\/><path stroke=\"#FFF\" d=\"M29 21l-12 8.5v-17z\"\/><\/g><\/svg><span class=\"yt-consent-placeholder__label\">Video playback requires cookie consent<\/span><\/button><\/div><\/div>\n<\/div><\/figure>\n\n\n<div class=\"wp-block-msr-podcast-container my-4\">\n\t<iframe loading=\"lazy\" src=\"https:\/\/player.blubrry.com\/?podcast_id=155931356&modern=1\" class=\"podcast-player\" frameborder=\"0\" height=\"164px\" width=\"100%\" scrolling=\"no\" title=\"Podcast Player\"><\/iframe>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\">For some, rules pose limitations. For others, like Microsoft Research Manager Mike Walker, they\u2019re opportunities.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Walker\u2019s fascination with rules and their role in the social order has allowed him to find success professionally and personally, from uncovering weaknesses in networked systems to redefining how computers are trained to fend off cyberattacks to pushing the limits of a reliable mode of transportation\u2014the bicycle\u2014in ultra-endurance racing.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In this conversation with Principal Technical Program Manager Weishung Liu, Walker describes how his participation in hacker culture led him to a career building next-generation cyber defense, including his work developing the first all-machine hacking tournament. Along the way, he reflects on why effective security depends on understanding trust and context, what competitive hacking taught him about teamwork and collective intelligence, and how an early lesson reshaped his understanding of leadership. He also tackles an important question: are today\u2019s networked systems any safer than they were a decade ago?<\/p>\n\n\n\n<div style=\"height:20px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<section class=\"wp-block-msr-subscribe-to-podcast subscribe-to-podcast\">\n\t<div class=\"subscribe-to-podcast__inner border-top border-bottom border-width-2\">\n\t\t<h2 class=\"h5 subscribe-to-podcast__heading\">\n\t\t\tSubscribe to the <a href=\"https:\/\/www.microsoft.com\/en-us\/research\/podcast\">Microsoft Research Podcast<\/a>:\t\t<\/h2>\n\t\t<ul class=\"subscribe-to-podcast__list list-unstyled\">\n\t\t\t\t\t\t\t<li class=\"subscribe-to-podcast__list-item\">\n\t\t\t\t\t<a class=\"subscribe-to-podcast__link\" href=\"https:\/\/itunes.apple.com\/us\/podcast\/microsoft-research-a-podcast\/id1318021537?mt=2\" target=\"_blank\" rel=\"noreferrer noopener\">\n\t\t\t\t\t\t<svg class=\"subscribe-to-podcast__svg\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"black\" viewBox=\"0 0 32 32\">  <path d=\"M7.12 0c-3.937-0.011-7.131 3.183-7.12 7.12v17.76c-0.011 3.937 3.183 7.131 7.12 7.12h17.76c3.937 0.011 7.131-3.183 7.12-7.12v-17.76c0.011-3.937-3.183-7.131-7.12-7.12zM15.817 3.421c3.115 0 5.932 1.204 8.079 3.453 1.631 1.693 2.547 3.489 3.016 5.855 0.161 0.787 0.161 2.932 0.009 3.817-0.5 2.817-2.041 5.339-4.317 7.063-0.812 0.615-2.797 1.683-3.115 1.683-0.12 0-0.129-0.12-0.077-0.615 0.099-0.792 0.192-0.953 0.64-1.141 0.713-0.296 1.932-1.167 2.677-1.911 1.301-1.303 2.229-2.932 2.677-4.719 0.281-1.1 0.244-3.543-0.063-4.672-0.969-3.595-3.907-6.385-7.5-7.136-1.041-0.213-2.943-0.213-4 0-3.636 0.751-6.647 3.683-7.563 7.371-0.245 1.004-0.245 3.448 0 4.448 0.609 2.443 2.188 4.681 4.255 6.015 0.407 0.271 0.896 0.547 1.1 0.631 0.447 0.192 0.547 0.355 0.629 1.14 0.052 0.485 0.041 0.62-0.072 0.62-0.073 0-0.62-0.235-1.199-0.511l-0.052-0.041c-3.297-1.62-5.407-4.364-6.177-8.016-0.187-0.943-0.224-3.187-0.036-4.052 0.479-2.323 1.396-4.135 2.921-5.739 2.199-2.319 5.027-3.543 8.172-3.543zM16 7.172c0.541 0.005 1.068 0.052 1.473 0.14 3.715 0.828 6.344 4.543 5.833 8.229-0.203 1.489-0.713 2.709-1.619 3.844-0.448 0.573-1.537 1.532-1.729 1.532-0.032 0-0.063-0.365-0.063-0.803v-0.808l0.552-0.661c2.093-2.505 1.943-6.005-0.339-8.296-0.885-0.896-1.912-1.423-3.235-1.661-0.853-0.161-1.031-0.161-1.927-0.011-1.364 0.219-2.417 0.744-3.355 1.672-2.291 2.271-2.443 5.791-0.348 8.296l0.552 0.661v0.813c0 0.448-0.037 0.807-0.084 0.807-0.036 0-0.349-0.213-0.683-0.479l-0.047-0.016c-1.109-0.885-2.088-2.453-2.495-3.995-0.244-0.932-0.244-2.697 0.011-3.625 0.672-2.505 2.521-4.448 5.079-5.359 0.547-0.193 1.509-0.297 2.416-0.281zM15.823 11.156c0.417 0 0.828 0.084 1.131 0.24 0.645 0.339 1.183 0.989 1.385 1.677 0.62 2.104-1.609 3.948-3.631 3.005h-0.015c-0.953-0.443-1.464-1.276-1.475-2.36 0-0.979 0.541-1.828 1.484-2.328 0.297-0.156 0.709-0.235 1.125-0.235zM15.812 17.464c1.319-0.005 2.271 0.463 2.625 1.291 0.265 0.62 0.167 2.573-0.292 5.735-0.307 2.208-0.479 2.765-0.905 3.141-0.589 0.52-1.417 0.667-2.209 0.385h-0.004c-0.953-0.344-1.157-0.808-1.553-3.527-0.452-3.161-0.552-5.115-0.285-5.735 0.348-0.823 1.296-1.285 2.624-1.291z\"\/><\/svg>\n\t\t\t\t\t\t<span class=\"subscribe-to-podcast__link-text\">Apple Podcasts<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/li>\n\t\t\t\n\t\t\t\t\t\t\t<li class=\"subscribe-to-podcast__list-item\">\n\t\t\t\t\t<a class=\"subscribe-to-podcast__link\" href=\"https:\/\/subscribebyemail.com\/www.blubrry.com\/feeds\/microsoftresearch.xml\" target=\"_blank\" rel=\"noreferrer noopener\">\n\t\t\t\t\t\t<svg class=\"subscribe-to-podcast__svg\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewBox=\"0 0 32 32\"><path fill=\"currentColor\" d=\"M6.4 6a2.392 2.392 0 00-2.372 2.119L16 15.6l11.972-7.481A2.392 2.392 0 0025.6 6H6.4zM4 10.502V22.8a2.4 2.4 0 002.4 2.4h19.2a2.4 2.4 0 002.4-2.4V10.502l-11.365 7.102a1.2 1.2 0 01-1.27 0L4 10.502z\"\/><\/svg>\n\t\t\t\t\t\t<span class=\"subscribe-to-podcast__link-text\">Email<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/li>\n\t\t\t\n\t\t\t\t\t\t\t<li class=\"subscribe-to-podcast__list-item\">\n\t\t\t\t\t<a class=\"subscribe-to-podcast__link\" href=\"https:\/\/subscribeonandroid.com\/www.blubrry.com\/feeds\/microsoftresearch.xml\" target=\"_blank\" rel=\"noreferrer noopener\">\n\t\t\t\t\t\t<svg class=\"subscribe-to-podcast__svg\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewBox=\"0 0 32 32\"><path fill=\"currentColor\" d=\"M12.414 4.02c-.062.012-.126.023-.18.06a.489.489 0 00-.12.675L13.149 6.3c-1.6.847-2.792 2.255-3.18 3.944h13.257c-.388-1.69-1.58-3.097-3.179-3.944l1.035-1.545a.489.489 0 00-.12-.675.492.492 0 00-.675.135l-1.14 1.68a7.423 7.423 0 00-2.55-.45c-.899 0-1.758.161-2.549.45l-1.14-1.68a.482.482 0 00-.494-.195zm1.545 3.824a.72.72 0 110 1.44.72.72 0 010-1.44zm5.278 0a.719.719 0 110 1.44.719.719 0 110-1.44zM8.44 11.204A1.44 1.44 0 007 12.644v6.718c0 .795.645 1.44 1.44 1.44.168 0 .33-.036.48-.09v-9.418a1.406 1.406 0 00-.48-.09zm1.44 0V21.76c0 .793.646 1.44 1.44 1.44h10.557c.793 0 1.44-.647 1.44-1.44V11.204H9.878zm14.876 0c-.169 0-.33.035-.48.09v9.418c.15.052.311.09.48.09a1.44 1.44 0 001.44-1.44v-6.719a1.44 1.44 0 00-1.44-1.44zM11.8 24.16v1.92a1.92 1.92 0 003.84 0v-1.92h-3.84zm5.759 0v1.92a1.92 1.92 0 003.84 0v-1.92h-3.84z\"\/><\/svg>\n\t\t\t\t\t\t<span class=\"subscribe-to-podcast__link-text\">Android<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/li>\n\t\t\t\n\t\t\t\t\t\t\t<li class=\"subscribe-to-podcast__list-item\">\n\t\t\t\t\t<a class=\"subscribe-to-podcast__link\" href=\"https:\/\/open.spotify.com\/show\/4ndjUXyL0hH1FXHgwIiTWU\" target=\"_blank\" rel=\"noreferrer noopener\">\n\t\t\t\t\t\t<svg class=\"subscribe-to-podcast__svg\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewBox=\"0 0 32 32\"><path fill=\"currentColor\" d=\"M16 4C9.383 4 4 9.383 4 16s5.383 12 12 12 12-5.383 12-12S22.617 4 16 4zm5.08 17.394a.781.781 0 01-1.086.217c-1.29-.86-3.477-1.434-5.303-1.434-1.937.002-3.389.477-3.403.482a.782.782 0 11-.494-1.484c.068-.023 1.71-.56 3.897-.562 1.826 0 4.365.492 6.171 1.696.36.24.457.725.217 1.085zm1.56-3.202a.895.895 0 01-1.234.286c-2.338-1.457-4.742-1.766-6.812-1.747-2.338.02-4.207.466-4.239.476a.895.895 0 11-.488-1.723c.145-.041 2.01-.5 4.564-.521 2.329-.02 5.23.318 7.923 1.995.419.26.547.814.286 1.234zm1.556-3.745a1.043 1.043 0 01-1.428.371c-2.725-1.6-6.039-1.94-8.339-1.942h-.033c-2.781 0-4.923.489-4.944.494a1.044 1.044 0 01-.474-2.031c.096-.023 2.385-.55 5.418-.55h.036c2.558.004 6.264.393 9.393 2.23.497.292.663.931.371 1.428z\"\/><\/svg>\n\t\t\t\t\t\t<span class=\"subscribe-to-podcast__link-text\">Spotify<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/li>\n\t\t\t\n\t\t\t\t\t\t\t<li class=\"subscribe-to-podcast__list-item\">\n\t\t\t\t\t<a class=\"subscribe-to-podcast__link\" href=\"https:\/\/www.blubrry.com\/feeds\/microsoftresearch.xml\" target=\"_blank\" rel=\"noreferrer noopener\">\n\t\t\t\t\t\t<svg class=\"subscribe-to-podcast__svg\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" fill=\"none\" viewBox=\"0 0 32 32\"><path fill=\"currentColor\" d=\"M6.667 4a2.676 2.676 0 00-2.612 2.13v.003c-.036.172-.055.35-.055.534v18.666c0 .183.019.362.055.534v.003a2.676 2.676 0 002.076 2.075h.002c.172.036.35.055.534.055h18.666A2.676 2.676 0 0028 25.333V6.667a2.676 2.676 0 00-2.13-2.612h-.003A2.623 2.623 0 0025.333 4H6.667zM8 8h1.333C17.42 8 24 14.58 24 22.667V24h-2.667v-1.333c0-6.618-5.382-12-12-12H8V8zm0 5.333h1.333c5.146 0 9.334 4.188 9.334 9.334V24H16v-1.333A6.674 6.674 0 009.333 16H8v-2.667zM10 20a2 2 0 11-.001 4.001A2 2 0 0110 20z\"\/><\/svg>\n\t\t\t\t\t\t<span class=\"subscribe-to-podcast__link-text\">RSS Feed<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/li>\n\t\t\t\t\t<\/ul>\n\t<\/div>\n<\/section>\n\n\n<div class=\"wp-block-msr-show-more\">\n\t<div class=\"bg-neutral-100 p-5\">\n\t\t<div class=\"show-more-show-less\">\n\t\t\t<div>\n\t\t\t\t<span>\n\t\t\t\t\t\n\n<h2 id=\"transcript\" class=\"wp-block-heading\">Transcript&nbsp;<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">[MUSIC]&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>MIKE<\/strong> <strong>WALKER:<\/strong> Well, you have to understand the rules if you want to be able to do what you want. So I have, I have a definite fascination with the rules, [LAUGHTER] but the thing you have to understand about the rules is that rules are a social construct. And I think that a lot of \u2026 in the computer security field, when, when people hear the word \u201csecurity\u201d and they think about the rules that the security system is imposing on them, every time a security system asks something of users, then you&#8217;re asking for their trust. And that trust is a precious commodity. And so when you squander user trust, then the security regime falls down. So I think it&#8217;s really important to understand the social context of rules instead of just having instant adjudication.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">[THEME MUSIC]&nbsp;<\/p>\n\n\n\n\t\t\t\t<\/span>\n\t\t\t\t<span id=\"show-more-show-less-toggle-1\" class=\"show-more-show-less-toggleable-content\">\n\t\t\t\t\t\n\n\n\n<p class=\"wp-block-paragraph\"><strong>STANDARD INTRODUCTION:<\/strong> This is the\u202f<em>Microsoft Research Podcast<\/em>, where Microsoft researchers\u2014driving advancement through fundamental science and technology research\u2014explore the who, how, and\u202fwhat\u2019s\u202fnext in computing and AI.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">[MUSIC ENDS]&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WEISHUNG<\/strong> <strong>LIU:<\/strong> Hi, and\u202fwelcome.\u202fMy name is\u202fWeishung Liu,\u202fand I\u2019m a principal technical\u202fprogram\u202fmanager here at\u202fMicrosoft Research. And today,\u202fI\u2019m\u202fjoined by\u202fMike Walker, who is a research manager here in MSR, or Microsoft Research, where he leads projects at the intersection of AI, cybersecurity, and large distributed systems.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Before Microsoft, Mike led DARPA\u2019s Cyber Grand Challenge, the pioneering program that demonstrated autonomous AI systems capable of finding and patching software vulnerabilities. And CGC actually just celebrated its 10th anniversary this year in 2026.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Mike&#8217;s work spans groundbreaking efforts that include cloud native memory analysis, automated malware analysis, and next-generation cyber defense technologies.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Mike, thanks for joining me.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>MIKE WALKER:<\/strong> Good to be here, Wei.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> All right, so, Mike, we have known each other for a couple of years now. And I&#8217;ve heard, like, bits and pieces of your story over time as we&#8217;ve gotten to talk. But before I really knew who you were, sort of, as a person, I, kind of, knew you as, like, \u201cMike Walker, the hacker guy that&#8217;s working over there,\u201d which I&#8217;m sure you love. And I know you love that, when I call you \u201cThe Hacker.\u201d&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">But you&#8217;ve worked on so many things that I&#8217;ve never really thought about before. Like, new words have entered my vocabulary as a result of knowing you and working with you, like <em>threat intelligence<\/em>, <em>nation states<\/em>, and I think there are a couple other ones that I think would have never been in my lexicon had I not known you.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">So I&#8217;m hoping we can spend this time to also have the audience get to know you, as well. So we&#8217;re going to start at the beginning then. And the beginning is, I believe, Mike, you grew up in Ohio.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> Columbus, Ohio.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> Columbus, Ohio. What kind of a kid were you in Columbus, Ohio?&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> I think I was a kid who spent a lot of time in the woods. [LAUGHTER] I was a skateboard kid. I was a basketball kid. But I think mostly I was a kid who read books and lived in a world of their own imagination.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> Were you on a farm in Columbus, Ohio, or were you in, like, or is this more suburban, rural, urban?&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> It was halves and halves. I spent my \u2026 most of the year in Columbus, Ohio, and then every summer, I would go out to the town of Tappahannock on the Rappahannock River in Virginia. And I lived completely on the farm.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> So what was the lifestyle in <strong><\/strong>what you were doing different between, like, Columbus, Ohio, and the farm?&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> So, like, some things that I was doing in Columbus, Ohio, is that my father, who was sort of half scientist, half venture capitalist, would bring me home industrial equipment and say, \u201cSee what you can make out of this,\u201d and drop it in my room. [LAUGHTER] Really dangerous stuff. And he would always give me safety warnings, right, like, \u201cThis is a helium neon laser.\u201d You know, \u201cThis is \u2026 this tube is made out of glass. Don&#8217;t break it.\u201d And then, \u201cThis is a really, really high-voltage power supply driving it, and it can arc and kill you,\u201d right. And I knew what that meant. [LAUGHTER] And then he would leave me with it. And what can you make out of this, right.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">So I would do stuff like, like try to replicate the Michelson-Morley experiment, you know, because I had the, had the table and the mirrors and I could do that. And then also I spent a lot of time with the Apple II, which was this just incredible machine from some other universe that I had never gone to. I later found out that was, you know, hackerspace and, and information technology culture, but it came from nowhere and there was nobody I could talk to about it. And so I spent a lot of time trying to hook the Apple II up to stuff in my life and, and try to control it with that thing.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> OK, so you brought up some hacker stuff, so I have to ask. There was farm stuff. There was, you know, \u201cdad brought home interesting tools and equipment.\u201d How did all of that get you interested in cybersecurity?&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> I think I was always in cybersecurity. I just didn&#8217;t know.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> Explain.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> You know, there&#8217;s this idea that you live two lives: the one before you find out your purpose and the one after you find it. This was, sort of, life before purpose, where I didn&#8217;t know why I was so interested in how these things worked.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">So, you know, I ran a bulletin board system. Before the internet, this was how computers communicated with each other. Dial-up modems, not even backbone linked. Each, each BBS\u2014<em>bulletin board system<\/em>\u2014[LAUGHTER] was, was a universe unto itself, you know, architected by its creator. And so there were all these little universes you could dial into. And then at some point, all these things I&#8217;d been doing my whole life, sort of, got connected to a career.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">When you say, you know, somebody <em>could<\/em>, right, somebody <em>could<\/em> listen to every single badge swipe event on the network, on campus, and then replicate them and badge themselves into any building they wanted because this is all in a broadcast LAN [local area network] and somebody should change that, there was a time when if you said things like that, the people you told it to would just be like, \u201cWell, don&#8217;t do that,\u201d [LAUGHTER] right? And then \u2026&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> Did you listen to them?&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> No. [LAUGHTER] I was young.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Um, and then at some point, the world started getting serious about imposing rules onto networked computers, and they started hiring people who are interested in that. And that&#8217;s \u2026 suddenly it was a career, right. I was like, \u201cOh, I was always here, but now it has a name.\u201d&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> So I have to ask then, like, you brought up the notion of rules. I feel like cybersecurity and rules has a relationship there. How much of a rule follower were you growing up versus how much do you think you are a rule follower now, and was there a difference or have you always been some version of \u201crule following\u201d?&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> Well, you have to understand the rules if you want to be able to do what you want.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> Yes.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> So I have a definite fascination with the rules, [LAUGHTER] but the thing you have to understand about the rules is that rules are a social construct. And I think that a lot of \u2026 in the computer security field, when, when people hear the word \u201csecurity\u201d and they think about the rules that the security system is imposing on them, every time a security system asks something of users, then you&#8217;re asking for their trust. And that trust is a precious commodity. And so when you squander user trust, then the security regime falls down. So I think it&#8217;s really important to understand the social context of rules instead of just having instant adjudication.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> OK. I&#8217;m going to have to ask you then about a game that we played recently called <a class=\"msr-external-link glyph-append glyph-append-open-in-new-tab glyph-append-xsmall\" href=\"https:\/\/novehiclesinthepark.com\/\" target=\"_blank\" rel=\"noopener noreferrer\">No Vehicles in the Park<span class=\"sr-only\"> (opens in new tab)<\/span><\/a>.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> No Vehicles in the Park is \u2026 it&#8217;s a game about content moderation is one way to look at it. I think it&#8217;s a fascinating thought experiment. But it just takes the thesis that rules are simple and challenges it with putting the player in the position of judge. And so the name of the exercise is the name of the rule, which is no vehicles in the park.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">And then it asks you some very simple commonsense questions about, is this a violation of the rule no vehicles in the park? Like if the International Space Station overflies the park, is that a vehicle in the park, and is it against the rules?&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> Mike, do you think the ISS flying over the park is a violation of the rules?&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> No. [LAUGHTER] But it&#8217;s important that we have a resilient way to adjudicate things that, that bridges social norms.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> OK. How much did you agree with the population, by the way, of No Vehicles in the Park?&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> I&#8217;ve rarely ever broken 50%. Yeah.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> I got like 90 \u2026&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> I play often.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> I think I got 96% on my first try, so I think I \u2026 does that mean I&#8217;m kind of like a lemming that, like, just understands the social construct of rules?&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> I think it means you, you channel the zeitgeist.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> Mm, OK, I&#8217;ve been assimilated.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> Right \u2026&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> That&#8217;s what it feels like.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">All right. So let&#8217;s talk about something that I love, which is you had a <a class=\"msr-external-link glyph-append glyph-append-open-in-new-tab glyph-append-xsmall\" href=\"https:\/\/www.youtube.com\/watch?v=OVV_k73z3E0\" target=\"_blank\" rel=\"noopener noreferrer\">short segment in <em>60 Minutes<\/em><span class=\"sr-only\"> (opens in new tab)<\/span><\/a> where you had a conversation with Lesley Stahl, and she described you as \u201cone of the world&#8217;s top hackers,\u201d at least at the time in which she interviewed you. And so now I have to know, how did you find hacker cultures? What was the extent of your involvement and, you know, how did you really get into it?&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> It, sort of, happened all at once, and I can tell the beginning of the story, and then I can tell you the day that the story stops.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">So the beginning of the story is that I was working at a, at a startup building telecommunications technologies on Sept. 11, 2001, and I was living in Maryland, outside of Washington, D.C., but my wife was in Washington, D.C., on that day, and, um, and then all the phones stopped working. My workplace was overflown by an F-16, and, and after that, in the nation&#8217;s capital, there was this sudden talent search for people who understood computer security or people who&#8217;d always been there but didn&#8217;t know what it was called. And that talent search found me.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> What, uh, what were the qualifications, like, that you had that, you know, matched with their list of talent that they were looking for?&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> I wish I knew.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> World&#8217;s top hacker?&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> I think, I think that that label was placed on me much later.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> [LAUGHS] All right, fine.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> I think that I became part of a series of cultures after that day, and one of them was the, the group of people who play in DEF CON Capture the Flag, which is a hacking contest in Las Vegas. And when you start getting involved in trying to get, get better at something in a way where you can compete at a national or international level, especially in sort of a coffeehouse environment where everyone else is trying to get better, too, it sort of propels you upward very quickly.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> OK, let&#8217;s, let&#8217;s go back later to talk about Capture the Flag, because I think it&#8217;s related to the, sort of, next arc of your life, which was your time as a project manager\u2014<em>program<\/em> manager\u2014at the Defense Advanced Research Projects Agency, also known as DARPA, which is also why Lesley had been interviewing you at the time. It was associated with your affiliation at DARPA, and you were there for about four years.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">How did you, how did you go from, you know, let&#8217;s say call, call to action from the nation&#8217;s capital looking for people with your specific set of skills to being at DARPA as a PM.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> So we should, we should be clear, we&#8217;ve just, sort of, skipped over 11 years of Mike trying to get better at hacking.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> [LAUGHS] <strong><\/strong>You were world&#8217;s top\u2014look, I just believe world&#8217;s top hacker, <em>one<\/em> of the world&#8217;s top hackers.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> Well, I think, uh, I think my, my friends, colleagues, and teammates from the time, if they were here to, to hear that accusation being made, would give me endless grief about it.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Certainly, there was a, there was, sort of, a golden age of Capture the Flag, and I got to be part of it and see some of the people. I got to see the game change over time. But it was a <em>competition<\/em>, so &#8230; and it was very reflective of a skill set that was of national interest. I think at the same time, the think tank RAND had published an <a class=\"msr-external-link glyph-append glyph-append-open-in-new-tab glyph-append-xsmall\" href=\"https:\/\/www.rand.org\/pubs\/research_reports\/RR430.html\" target=\"_blank\" rel=\"noopener noreferrer\">opinion piece called <em>Hackers Wanted<\/em><span class=\"sr-only\"> (opens in new tab)<\/span><\/a>, right, which, sort of, described the immense need for more people who could think that way at a high level.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">And DARPA, specifically Norm Whitaker and Dan Kaufman, who were leading I2O [Information Innovation Office] \u2026&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> DARPA Dan!&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> DARPA Dan \u2026 looked at the game of hackers, right, and if you could think of that as soccer, their immediate question was, what about robot soccer? You know, could we make automated systems that could play this game? And so they encountered myself and some colleagues giving a talk about, sort of, the, the interleaving of Capture the Flag as, you know, hacking contests and talent development. And they said, you know, could you do talent development for computers the same way, right? Could machines play Capture the Flag? And that, that was the beginning of the conversation about building the world&#8217;s first all-machine hacking tournament.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> OK, so now, now maybe let&#8217;s go back and explain what DEF CON Capture the Flag was, or <em>CTF<\/em>, because I think a lot of us who are again not in the space, you say, \u201cCapture the Flag,\u201d and I&#8217;m thinking, like, summer camp. And, you know, each \u2026 there are two teams, and there&#8217;s kids who hide flags, and then you try to run around and find the flag, you find the defenders and whatnot. So what was the DEF CON version of this?&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> It&#8217;s changed over time. That&#8217;s the thing about this game that I should lead with is that Capture the Flag is different with every generation, and at least in my opinion, I think it&#8217;s gotten better with every generation, right. Each hacking group that\u2019s picked up the lessons of the past and the game has made it better, but it is, sort of, based around that playground idea, right. My team has some flags. Your team has some flags. We&#8217;re going to try to take each other&#8217;s flags. Whoever takes the most wins, right. It is that simple.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Now there are more than two teams, somewhere between eight and 16, and each team is trying to take flags from every other team. They&#8217;re trying to protect their own flags. But, of course, the flags are made of data, right, \u2026&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> Mm-hm.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> \u2026 or control over a networked system. And the way that you protect your own data and control of your own network system is network defense, right, and computer defense. And the way that you take flags from other, other teams is you hack into their servers and you take their flags and you do it without getting caught. And then what makes this game, sort of, unique is that all the software that you&#8217;re protecting is written just for that game. It will never be used again. It&#8217;s boutique. It was written by the organizers, kept in secret, revealed to the teams the minute they sit down. They&#8217;ve got new software they&#8217;ve never seen before. They don&#8217;t know what it does, and they&#8217;re in a race to understand it, and they&#8217;re racing everybody else. Because if you can understand it, then you can protect it, and if you can understand it, you can hack it.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> OK. So let&#8217;s get into this thing called DARPA&#8217;s Cyber Grand Challenge, or CGC, which just celebrated its 10th anniversary. And so from what I understand, CTF\u2014humans playing soccer. CGC \u2026 <em>robots<\/em> playing soccer? Is that probably a good way to, to &#8230;&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> That&#8217;s exactly it.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> OK, so now explain to me a little bit further, like, what was CGC, what was your role, and then more importantly, did it feel historic at the time or just, kind of, impossible and you somehow figured out with a large group of folks at DARPA, \u201cThis is how we&#8217;re going to solve this impossible thing\u201d?&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> Well, there&#8217;s, there&#8217;s two ways to answer that. There&#8217;s the, the day before it worked and the day after it worked, right. [LAUGHTER] There were actually three and a half years before it worked. So if you&#8217;d ask me, I think, in any of that three and a half years, I would have said let&#8217;s wait and see.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> So, so what was it, though, like\u2014by the way, I think you can <a class=\"msr-external-link glyph-append glyph-append-open-in-new-tab glyph-append-xsmall\" href=\"https:\/\/www.youtube.com\/watch?v=-g5Kt2ayMN0&list=PL6wMum5UsYvZx2x9QGhDY8j3FcQUH7uY0\" target=\"_blank\" rel=\"noopener noreferrer\">watch the first CGC online<span class=\"sr-only\"> (opens in new tab)<\/span><\/a>. Like, there&#8217;s a whole recording of the event.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> There is a recording of the event, which we had sports casted live with announcers, and, and so you can watch it as it happened, and it was, it was a capture the flag, right\u2014protect data, steal data\u2014that was run entirely by autonomous systems behind an air gap, so if they failed, there was no person even to turn them off and turn them back on again.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> So how did \u2026 so if I think about how you just described Capture the Flag with DEF CON, but there were, like, people on the floor coding, I&#8217;m assuming, though, you&#8217;re saying CGC <em>did not<\/em> have that. So were there teams that had, like, pre-created something?&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> Yes. They had spent many years of their life actually building these autonomous systems, and you can&#8217;t really preflight an autonomous system whose purpose is to fight. You can preflight an autonomous system whose purpose is to maybe go for a drive, right. You can take it for a drive. But if you&#8217;re going to fight other systems, you have to, like, build another one, right. And we did give them some exposure to a, sort of, scripted opponent.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The DARPA infrastructure team built a scripted opponent and attempted to give teams some pre-exposure. But that first confrontation between adversarial hacking machines, there wasn&#8217;t really a great way to prepare for it. And so the teams were in this really tough position of watching the systems play\u2014<em>win<\/em> or <em>lose<\/em>\u2014in a way where they couldn&#8217;t do anything but watch.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> So, you know, I want you to think back on that time, as well, because, like, now when we&#8217;re talking about AI, it seems a little bit more commonplace, right? We&#8217;re like, oh, you know, we have GPT, we have Claude, we have a lot of other models, as well. So, like, how historic <em>was<\/em> that? Because I think it can&#8217;t be understated how vastly different, sort of, autonomous or artificial intelligence capabilities were like 10 years ago versus now.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> It was, it was a different universe of capability, and Cyber Grand Challenge had a role in the development of the technology stacks that we&#8217;re seeing today, but it was an expert systems contest. There was, there was no\u2014at that time, we would have called it machine learning\u2014but there&#8217;s no, no real involvement, <em>critical<\/em> involvement, in machine learning.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">But there was this fusion of tooling where you had, sort of, an autonomous set of tools that could perform a lot of these tasks as far as conventional compute could push the state of the practice at the time. I think if we look back from the perspective of today, which is, which is still a perspective that&#8217;s difficult to keep up with and difficult to appreciate how, how radically different the intelligence displayed by today&#8217;s models is from what we had in 2013, 2016, we&#8217;re still seeing the technology stacks that we would have called \u201cexpert systems\u201d in 2016 being used as what we call a harness today.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">So if \u2026 just to talk about another DARPA project, <a class=\"msr-external-link glyph-append glyph-append-open-in-new-tab glyph-append-xsmall\" href=\"https:\/\/www.darpa.mil\/research\/programs\/ai-cyber\" target=\"_blank\" rel=\"noopener noreferrer\">AIxCC [AI Cyber Challenge]<span class=\"sr-only\"> (opens in new tab)<\/span><\/a>, which happened a few years ago, some of the people from <a class=\"msr-external-link glyph-append glyph-append-open-in-new-tab glyph-append-xsmall\" href=\"https:\/\/aicyberchallenge.com\/\" target=\"_blank\" rel=\"noopener noreferrer\">Team Atlanta, which won that competition<span class=\"sr-only\"> (opens in new tab)<\/span><\/a>, are building a <a href=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2026\/05\/12\/defense-at-ai-speed-microsofts-new-multi-model-agentic-security-system-tops-leading-industry-benchmark\/?msockid=2e1b6d36f56b66a01edb7aa3f44d67b6#codename-mdash-microsoft-security-s-new-multi-model-agentic-scanning-harness\" target=\"_blank\" rel=\"noopener\">harness called MDASH<\/a>, which is, I think we could call it a cyber reasoning system that is powered by models and used to do these sorts of tasks autonomously.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> You were <a class=\"msr-external-link glyph-append glyph-append-open-in-new-tab glyph-append-xsmall\" href=\"https:\/\/www.nytimes.com\/2016\/10\/17\/technology\/security-internet.html\" target=\"_blank\" rel=\"noopener noreferrer\">interviewed by <em>The New York Times<\/em> in 2016 about CGC<span class=\"sr-only\"> (opens in new tab)<\/span><\/a>, and you said that making networked technology safer was a \u201cchallenge for civilization.\u201d And, you know, what do you think about that? Has civilization made progress on, you know, resolving that challenge? <strong><\/strong>And what are some tangible takeaways that you think, you know, from 10 years ago till now, think through sort of how, how we&#8217;re making things safer for civilization?&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> I&#8217;d say that&#8217;s as true now as it was then, maybe more so. And I think our dependence on networked systems for every piece of civilization has only increased. I think it&#8217;s difficult to buy a car or to participate in a utility grid that isn&#8217;t networked, right.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">How we&#8217;re doing? I think that we&#8217;re seeing a great disruption of the status quo right now. I think that we reached a pretty steady-state equilibrium, where our, our security in our networked civilization was, sort of, dictated by offensive scarcity. There was a known cost for high-end computer network attack, and that cost equation has been completely upended by the capabilities of models.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> So in thinking about, sort of, capabilities of models then, some terms that, that I&#8217;ve heard used are things when we&#8217;re testing models, for example, is\u2013\u2013we call it\u2013\u2013<em>red teaming<\/em>. But then I also hear that there&#8217;s something called <em>blue teaming<\/em>. And then, of course, if you&#8217;ve taken primary colors or understood kindergarten primary colors, if you put red and blue together, you get <em>purple teaming<\/em>. Can you explain to the audience a little bit about those differences?&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> Yeah. <em>Red team<\/em> and <em>blue team<\/em> is sort of an artificial separation between being an attacker and being a defender, and it&#8217;s also, sort of, an oversimplification and an abnegation of capability, right. Attackers attack; defenders defend. But if you, if you take that simplification away and you look at what&#8217;s going on under the hood, you&#8217;ll see that the difference between offense and defense most of the time is, sort of, who&#8217;s in control or who&#8217;s driving.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you were to give a name to a program that encrypted every file in your computer and then unlocked it when you needed it, that is either a cryptography utility or it&#8217;s ransomware depending on who holds the key. If you were to give a name to a program that, that allows you to log in to your computer remotely and control it, maybe your home automation setup, that is either malware or remote administration utility [LAUGHTER] depending on who holds the key, right? Who holds the key.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">So there&#8217;s, there&#8217;s this, sort of, blurring of offense and defense where computer security capabilities at their most atomic basic level aren&#8217;t offensive or defensive. They&#8217;re dual use. And so the idea of <em>red teaming<\/em> and <em>blue teaming<\/em> is sort of this idea that we can impose single use onto dual-use capabilities, and <em>purple team<\/em> is the acknowledgment that that&#8217;s not true, right.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Attackers, as soon as they break into a network, they have an intrusion that they need to defend. You&#8217;ll hear all these terms like <em>moving laterally<\/em>, which just means breaking into more computers, or <em>exfiltration<\/em>, which means taking data. But the whole time they&#8217;re doing that, they&#8217;re trying not to get caught, right. So they are <em>defending<\/em> their attack, right.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> Mm.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> And at the same time, when defenders are doing things like log analysis or really any\u2014or traffic analysis\u2014their tools themselves can be broken into, right. They have a duty to defend their own tooling, and they also need to, in order to prevent attackers, they need to be able to find vulnerabilities, find weaknesses, and then grade weaknesses in their own software. And the way that you find vulnerabilities is vulnerability research, and you grade weaknesses by writing exploits or at least proof of vulnerability, and that&#8217;s offense, right. So purple team is just this idea that attack and defense are the same skill set. They&#8217;re the same tooling. They&#8217;re blended. And it&#8217;s really a contest to control the logic of memory of networked computers run all the time.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> All right. So, so I&#8217;m going to ask you a little bit about the team that you manage then. It&#8217;s called <a href=\"https:\/\/www.microsoft.com\/en-us\/research\/group\/new-security-ventures\/?msockid=254de47df4f967cf07e7f346f58f6643\" target=\"_blank\" rel=\"noopener\">New Security Ventures<\/a>. And would you classify the type of work that you and your team do as being red, blue, or purple? Or are we going to introduce a different coloring from the rainbow?&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> I think that we do highly offense-aware defensive tool development. So we build defensive tools, but we build them knowing that they are a target.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> What&#8217;s one example of a project that your team has been working on?&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> We have a project we call <a href=\"https:\/\/www.microsoft.com\/en-us\/research\/project\/project-freta\/\" target=\"_blank\" rel=\"noopener\">Project Freta<\/a>. It&#8217;s named after the <a class=\"msr-external-link glyph-append glyph-append-open-in-new-tab glyph-append-xsmall\" href=\"https:\/\/www.bing.com\/maps?osid=207f4a10-cacf-477c-9a3b-f070a4008478&cp=52.251633~21.007387&lvl=18&imgid=8878a1c7-8a60-4ab7-adf3-394be45a9708&v=2&sV=2&form=S00027\" target=\"_blank\" rel=\"noopener noreferrer\">birthplace of Marie Curie<span class=\"sr-only\"> (opens in new tab)<\/span><\/a>, the <a class=\"msr-external-link glyph-append glyph-append-open-in-new-tab glyph-append-xsmall\" href=\"https:\/\/www.smithsonianmag.com\/history\/how-marie-curie-brought-x-ray-machines-to-battlefield-180965240\/\" target=\"_blank\" rel=\"noopener noreferrer\">pioneer of battlefield imaging<span class=\"sr-only\"> (opens in new tab)<\/span><\/a>. [LAUGHTER] And the idea is, is that \u2026 well, first I actually need to introduce tampering. We think of ourselves as the solution to tampering, but, but first, what&#8217;s tampering, right?&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> What\u2019s tampering?<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> What problem are we solving?<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">So let&#8217;s say that my job is to break into a store undiscovered, right? It&#8217;s mission impossible, right? I&#8217;m going to break in, take the Doritos, not get caught, right.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&nbsp;<strong>LIU:<\/strong> Wait. Hold on. What flavor of Doritos?&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&nbsp;<strong>WALKER:<\/strong> I don&#8217;t know.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&nbsp;<strong>LIU:<\/strong> What?!&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> I don&#8217;t actually eat them. I&#8217;m sorry.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> OK, fine.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> But that&#8217;s, you know, it&#8217;s mission impossible. I have to take them.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> Fine. You got to go get Doritos.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> I have to not show up on the video.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> Yeah.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> I can compute this path of not being observed by the video camera. It&#8217;s really hard, right. Maybe I do some, some kung fu, some gymnastics. I slide into the laser wire, I grab it, and I get out. But there is another way to break in and not get caught, which is to walk in, right, wave at the camera, cut the feed on the camera, take it down, and replace it with a fake video camera that just plays good video, like there&#8217;s nobody in the, in the store, and then go in and change the tape and leave. That&#8217;s tampering, right?&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> OK.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> And it sounds actually less complicated, right, than trying to simply not be observed. And if you look in the computer security world at tampering, tampering is often the easier way to accomplish the objective of an attacker, which is to break in and not get caught and defend their intrusion, right. They&#8217;re doing defense while they&#8217;re doing offense. And so Project Freta is an attempt to solve that at cloud scale, to make it so that when defenders acquire defensive signals, right, telemetry signals about what&#8217;s happening in computers, they don&#8217;t do it with software that can be removed or tampered with. They do it by acquiring signals from cloud hardware. And so we&#8217;re a whole-system memory analysis environment built from the ground up for looking at memory that&#8217;s acquired from cloud hardware.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> So, OK, so you just revealed, for example, how Project Freta works and how it protects or is trying to defend against something like tamper. But then, you know, I&#8217;m kind of curious, though. You just revealed how it works. So, you know, you&#8217;re kind of telling the attackers what you&#8217;re doing and how you&#8217;re defending. How does that work if you&#8217;re like, \u201cThis is how I&#8217;m defending, like, this is how I&#8217;m defending my castle. Here you go\u201d?&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> Well, you can reveal a technology or you can reveal its deployment. And I&#8217;ve revealed a technology, and I haven&#8217;t said anything about its deployment.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> OK, so there&#8217;s a, there&#8217;s a difference, and there&#8217;s layers that you&#8217;ve described so that, you know, even though you&#8217;ve revealed something, you haven&#8217;t revealed the full extent.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> Well, you&#8217;re, you&#8217;re bringing up a really interesting part of the game theory of, of adversarial computer network attack-computer network defense, which is that attackers condition their behavior based on their perception of what the defense is doing. And so that gets into these, these strange effects of, is the best way to protect a network to say that you have something or to actually have it or to have a mismatch between what you say you have and what you have.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> So you&#8217;re like bluffing in poker.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> There&#8217;s a reason this game is played in Vegas. [LAUGHTER]&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> OK, OK. So we&#8217;ve had, we&#8217;ve had some, like, more serious, like, topics for a while. And I want to get into something that maybe a lot of folks who maybe even know you don&#8217;t know about you, which is you love\u2014I think I&#8217;m going to use \u2026 I think I can say <em>love<\/em>\u2014cycling.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> That&#8217;s true.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> How did you get into cycling?&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> I got into cycling in, sort of, the way that I&#8217;ve gotten into a lot of things in my life, which is I got into it through what I thought at the time was, was a disaster. I blew out my knee playing basketball, which was one of my first great loves, right. And I went through surgical repair. And afterwards, the surgeon told me you can&#8217;t do the stuff with this knee that you used to do.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">I said, \u201cWell, what can I do?\u201d You know, I hadn&#8217;t even thought to ask this question before surgery. You know, I&#8217;m sitting there trying to, like, rehabilitate the knee. And he said, \u201cWell, you could try swimming or you could try riding a bike.\u201d&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">I didn&#8217;t really know anything about either one. You know, I used to ride a bike to get around. And then a friend of mine in college introduced me to mountain biking, which is sort of this idea that you could take a bicycle, which is a very stable system\u2014you know, you go out and you ride it down the sidewalk; it works great\u2014and ride it over, you know, just horrible, you know, really steep, rough terrain that no one should ever try to ride a bike on.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> OK. And you did this recently at a 100-mile endurance race called High Cascades.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> <a class=\"msr-external-link glyph-append glyph-append-open-in-new-tab glyph-append-xsmall\" href=\"https:\/\/www.mudslingerevents.com\/high-cascades-100\" target=\"_blank\" rel=\"noopener noreferrer\">High Cascades 100<span class=\"sr-only\"> (opens in new tab)<\/span><\/a>.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> And what was it like to prep for that? Because I feel like you&#8217;ve been, you&#8217;ve been working on some very important things on the professional side. And then you also had this big 100-mile endurance race that you were prepping for on the personal side. How did that go?&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> There are very few things in life where you have a fixed date and time where you have to show up and deal with uncertainty, and ultra-endurance racing is one of those. Um, there&#8217;s, there&#8217;s the parts that you can prepare for and the parts you can&#8217;t, right. You can&#8217;t prepare for the smoke forecast or the weather. You can just have a range of options.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">But then, you know, as far as the conditioning, I do spend a lot of time on the indoor trainer. I just wake up really early. I have, I have a whole structured plan. I think I started around January to race in July.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> Do you follow them like you follow rules? [LAUGHS]&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> Well, I&#8217;m much more strict about following my training plan. Actually, I think, I think I&#8217;ve been advised\u2014this is real\u2014not to be trainer robot.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> Wow.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> So I had to back off on being trainer robot.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> OK, so you had to ease up on the rules that you were following, that you wrote for yourself.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> Yeah. There&#8217;s this mode \u2026 all the cycling fans on the \u2026 watching this are going to, are going to be like, [WHISPERS] \u201cOh my gosh, he\u2019s talking about erg mode.\u201d There&#8217;s this mode called erg mode where the, the trainer decides how hard you should pedal. And it took me \u2026 and so I would just set it to that and do what it told me, right. And so it was this big thing to, to actually go into free ride and try to, try to ride the terrain.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> OK.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> Yeah. Back, back off and try to, try to listen to your body a little bit rather than just do whatever it takes.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> [LAUGHS] I feel like there&#8217;s a relationship between what we are talking about now and something maybe related to the cybersecurity side of Mike. But I have to \u2026 I really want to get a photo of this on this podcast, this video podcast. So I am going to ask you about Orange Crush.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> Oh, OK.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> Can you tell the audience, what is Orange Crush?&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> Orange Crush is the project bike that I built over the year when I was out with a blown shoulder.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> I think that&#8217;s when I met you.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> Yeah. The problem with riding the bikes down the steep hills is, like, sometimes, it doesn&#8217;t go completely perfect.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> Didn&#8217;t we have \u2026 we also had a colleague who also likes to mountain bike who, like, broke his back at around the same time you had a shoulder injury.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> Yeah.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> Also mountain biking.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> Yeah. Kind of depends on how you break your back versus how you break your shoulder on which one of those works out better.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">I got a \u2026 I messed my shoulder up pretty good, so it took some time, but it meant that I got to, kind of, conceive of something and put it together, mostly left-handed, which is its own challenge. So it&#8217;s, it&#8217;s a gravel bike, but it&#8217;s \u2026 and, of course, my wife named it. She gets the naming rights because she&#8217;s better at it, but it is very orange.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> Um, we&#8217;re, we&#8217;re coming up close on time, so I&#8217;m going to start wrapping up with a few questions, but I, I love this question and I can&#8217;t help but ask you, Mike, what is the difference between suffering on a bike and suffering through a hard technical project?&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> Well, I don&#8217;t think of riding a bike as suffering at all. That&#8217;s like the good part.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> Even, even, OK. Because in your 100-mile endurance race on High Cascades, I think you said it was, like, nine hours of \u2026&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> Yeah.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> \u2026 nonstop riding, like, in terrain.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> <em>Racing.<\/em> Yeah.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> That seems like there might have been a little bit of suffering.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> No, that&#8217;s absolutely the best part. [LAUGHTER] No, no, the suffering is, the suffering is the checklist and the logistics the day before. Suffering is going out for a pre- ride and getting a flat and trying to find a bike shop that can get a tire patch in the day before High Cascades. [LAUGHTER] No, the logistics and the, and the worrying, right, that&#8217;s always the hard part. Once, once, once you&#8217;re at \u2026 you know, it just gets worse and worse up until the start. And then you&#8217;re racing, and it&#8217;s wonderful.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> And I want the audience to know\u2014because High Cascades, you can actually look it up on the internet \u2026&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> That&#8217;s true.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> \u2026 Mike finished <a class=\"msr-external-link glyph-append glyph-append-open-in-new-tab glyph-append-xsmall\" href=\"https:\/\/my.raceresult.com\/411350\/results#0_88ABFD\" target=\"_blank\" rel=\"noopener noreferrer\">69th out of 329 participants<span class=\"sr-only\"> (opens in new tab)<\/span><\/a>. I\u2019d say that&#8217;s pretty, that&#8217;s pretty darn good. I don&#8217;t even know how to ride a bike, Mike.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> Um, <strong><\/strong>I, I race these days to learn about myself, you know.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> Do you work on hard technical projects to also learn about yourself?&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> I work on hard technical projects half because just getting to solve hacking problems is, it\u2019s, sort of, what I&#8217;ve always done. But then also, I get to work with great people, and I get to, I get to see impact. I get to see the impact of our work.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> All right. So I have a lightning round of questions that I&#8217;m going to ask you.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> OK. All right.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> So just come up with\u2014this is not a Rorschach test. Just come up with, like, &#8230;&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> It might be.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> It requires pictures if I do that. But we&#8217;re going to do a lightning round. So the first one: advice that blew your mind or changed your perspective.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> Hm, um, I remember when I was starting at the agency, I was, I\u2019d, I\u2019d worked in an engineering shop for a long time, and the culture of, of many engineering shops is to be critical of leadership, right. They would see what leadership did and then take the information they had and be critical of the decision. Not all the time, but sometimes. And I had a mentor who took me aside and said, \u201cHave you ever considered that the decisions that you don&#8217;t agree with are the result of information you don&#8217;t have?\u201d&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> Ooh.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> And then they took me into a situation where I, sort of, was revealed \u2026 the, the information I didn&#8217;t have about the decision I disagreed with was revealed to me, and suddenly I thought it was a great decision. I was like, \u201cThat&#8217;s incredible.\u201d And then I left and I couldn&#8217;t talk about it, and I saw other people having the same criticism of the decision, and that started the process of reformatting how I thought about leadership. Every time I hear a decision now, I think to myself, \u201cWhat do they know that I don&#8217;t?\u201d And that curiosity process is always running.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> OK. Lesson you learned the hard way\u2014which is \u2026 I feel like this is a very easy question for you\u2014or the misstep that humbled you.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> There&#8217;s so much to choose from here. [LAUGHTER]&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> First one that comes to mind.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> I probably made one on the way here.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">I&#8217;ll, I&#8217;ll pick one that&#8217;s, that&#8217;s relevant to the discussion today, which is that I remember distinctly playing in qualifiers in a hacking competition and getting, getting the answer, right\u2014getting the key, right\u2014and running up to the person who was handing in keys for our team, being like, \u201cI solved\u201d\u2014 you know, I don&#8217;t know what it was; every challenge has a name, right\u2014&#8221;like, 202,\u201d and they were like, \u201cOh, we solved that an hour and a half ago.\u201d [LAUGHTER]&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">And, and I, I remember, you know, \u201cOh, OK. Well, I better find something new to work on.\u201d And I just looked around the room and, you know, we&#8217;re all curled over our hacking workstations, two monitors and a keyboard no one would recognize as a keyboard\u2014you know, we all look the same\u2014and, and thinking to myself, I can quantify the IQ in this room, but I can&#8217;t look around and quantify how well we&#8217;re working together.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> Mmm.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> Right? I don&#8217;t know how aligned we are in this goal of getting the most points and winning here. And I can&#8217;t look around and figure out how many people here are on the right challenge or on a challenge that&#8217;s already been solved, have the tools they need, would be paired with the right person.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">And myself and a couple of my colleagues started thinking about, like, what is the right way to create social intelligence in, in technical teams and hacking teams? And, and that has stuck with me. I mean, that&#8217;s been a constant thread, is, is just the abandonment of the hero journey and net IQ as a way that, that teams accomplish things, because you will find people working on challenges to get the key, right\u2014as a metaphor\u2014where the problem\u2019s already been solved in any organization that isn&#8217;t working on, on its EQ. You\u2019ll find it everywhere.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> OK, talent or\u2014I was going to ask you a bunch more, but we&#8217;re lightning rounding right now. Talent or accomplishment you&#8217;re most proud of if given the chance to brag.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> Mm. <strong><\/strong>Bragging\u2019s not in my nature, I don\u2019t think. But &#8230;&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> I know. Which is the &#8230;&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> But \u2026&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> Go on.<strong>&nbsp;<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> Let\u2019s see.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> Flex a little bit.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> I, uh, <strong><\/strong>I taught myself to juggle while my knee was blown out.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> [LAUGHTER] <strong><\/strong>That&#8217;s the thing you&#8217;re most proud of is juggling.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> Well, so if you haven&#8217;t, if you haven&#8217;t learned how to juggle, it&#8217;s fine, right. But if you have, you know that 99% of it is dropping them and they go everywhere, which when you&#8217;re immobilized with a busted knee, it&#8217;s actually harder than it sounds.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">So I engineered a way to teach myself to juggle where I just got myself into a small enough space that I couldn&#8217;t lose them and I could just sit there with my blown-out post-surgery knee and teach myself to juggle. I did it in a couple of weeks.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> Can you still juggle?&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> Oh, yeah.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> OK, so if I handed you stuff later \u2026&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> I mean, let&#8217;s not break the room, but sure.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> [LAUGHS] <strong><\/strong>OK. Last one: career path you would have chosen\u2014this is going to be hard\u2014if you weren&#8217;t, like, in cybersecurity. And it feels like it&#8217;s, like, in your DNA, so I&#8217;m not sure, but I would love to hear an attempt.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> Oh, it&#8217;s science fiction writer 100%.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> Really?<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> You know, I thought I was going to be a musician, but when you&#8217;re a \u2026 when you go out and you start getting into a music scene, you, kind of, find out if you were a natural or not. So I think science fiction writer is still the thing where I wish I&#8217;d kept at it a little more.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>LIU:<\/strong> All right, I&#8217;m going to, I&#8217;m going to break my own rule, which is not \u2026 which is a social construct, and ask you one more, which is, can you recommend to the audience a really good\u2014your favorite or one of the <em>best<\/em> sci-fi books you&#8217;ve ever read?&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>WALKER:<\/strong> Oh, sure. Easy. It&#8217;s <a class=\"msr-external-link glyph-append glyph-append-open-in-new-tab glyph-append-xsmall\" href=\"https:\/\/openroadmedia.com\/ebook\/the-forever-war\/9781497692350\" target=\"_blank\" rel=\"noopener noreferrer\"><em>The<\/em> <em>Forever War<\/em><span class=\"sr-only\"> (opens in new tab)<\/span><\/a>. Haldeman\u2019s <em>Forever War<\/em>. And it&#8217;s, I think, it&#8217;s about coming to hand in the key except the challenge\u2019s already solved, except sort of writ large in a, in a universe governed by relativity.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&nbsp;<strong>LIU:<\/strong> OK.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&nbsp;<strong>WALKER:<\/strong> No spoilers.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">&nbsp;<strong>LIU:<\/strong> No spoilers. All right. Fine.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Thank you so much, Mike\u2014this was a great time\u2014for joining me.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">To our audience, thank you for listening. If you want to learn a little bit more about any of my colleagues in Microsoft Research and their work, check out the Microsoft Research website at <a class=\"msr-external-link glyph-append glyph-append-open-in-new-tab glyph-append-xsmall\" href=\"https:\/\/aka.ms\/research\" target=\"_blank\" rel=\"noopener noreferrer\">aka.ms\/research<span class=\"sr-only\"> (opens in new tab)<\/span><\/a> [MUSIC] or listen and watch other episodes of the podcast on YouTube and major podcast platforms.&nbsp;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">[MUSIC ENDS]&nbsp;<\/p>\n\n\t\t\t\t<\/span>\n\t\t\t<\/div>\n\t\t\t<button\n\t\t\t\tclass=\"action-trigger glyph-prepend mt-2 mb-0 show-more-show-less-toggle\"\n\t\t\t\taria-expanded=\"false\"\n\t\t\t\tdata-show-less-text=\"Show less\"\n\t\t\t\ttype=\"button\"\n\t\t\t\taria-controls=\"show-more-show-less-toggle-1\"\n\t\t\t\taria-label=\"Show more content\"\n\t\t\t\tdata-alternate-aria-label=\"Show less content\">\n\t\t\t\tShow more\t\t\t<\/button>\n\t\t<\/div>\n\t<\/div>\n<\/div>\n\n\n\n<div class=\"wp-block-group msr-pattern-link-list is-layout-flow wp-block-group-is-layout-flow\">\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 id=\"learn-more-1\" class=\"wp-block-heading h5\">Learn more:<\/h2>\n\n\n\n<ul class=\"wp-block-list list-unstyled\">\n<li><a href=\"https:\/\/www.microsoft.com\/en-us\/research\/group\/new-security-ventures\/?msockid=254de47df4f967cf07e7f346f58f6643\" target=\"_blank\" rel=\"noopener\">New Security Ventures<\/a><br>Homepage<\/li>\n\n\n\n<li><a href=\"https:\/\/www.microsoft.com\/en-us\/research\/project\/project-freta\/\" target=\"_blank\" rel=\"noopener\">Project Freta<\/a><br>Homepage<\/li>\n\n\n\n<li><a href=\"https:\/\/www.microsoft.com\/en-us\/research\/blog\/toward-trusted-sensing-for-the-cloud-introducing-project-freta\/\" target=\"_blank\" rel=\"noopener\">Toward trusted sensing for the cloud: Introducing Project Freta<\/a><br>Microsoft Research Blog | July 2020<\/li>\n\n\n\n<li><a class=\"msr-external-link glyph-append glyph-append-open-in-new-tab glyph-append-xsmall\" href=\"https:\/\/www.nytimes.com\/2016\/10\/17\/technology\/security-internet.html\" target=\"_blank\" rel=\"noopener noreferrer\">Stepping Up Security for an Internet-of-Things World<span class=\"sr-only\"> (opens in new tab)<\/span><\/a><br>Article | October 2016<\/li>\n\n\n\n<li><a class=\"msr-external-link glyph-append glyph-append-open-in-new-tab glyph-append-xsmall\" href=\"https:\/\/www.darpa.mil\/research\/programs\/cyber-grand-challenge\" target=\"_blank\" rel=\"noopener noreferrer\">Cyber Grand Challenge<span class=\"sr-only\"> (opens in new tab)<\/span><\/a><br>Research program homepage | DARPA<\/li>\n\n\n\n<li><a class=\"msr-external-link glyph-append glyph-append-open-in-new-tab glyph-append-xsmall\" href=\"https:\/\/www.youtube.com\/watch?v=OVV_k73z3E0\" target=\"_blank\" rel=\"noopener noreferrer\">DARPA\u2019s Cyber Grand Challenge<span class=\"sr-only\"> (opens in new tab)<\/span><\/a><br>Video | February 2015<\/li>\n\n\n\n<li><a class=\"msr-external-link glyph-append glyph-append-open-in-new-tab glyph-append-xsmall\" href=\"https:\/\/www.youtube.com\/watch?v=OVV_k73z3E0\" target=\"_blank\" rel=\"noopener noreferrer\"><a class=\"msr-external-link glyph-append glyph-append-open-in-new-tab glyph-append-xsmall\" href=\"https:\/\/novehiclesinthepark.com\/\" target=\"_blank\" rel=\"noopener noreferrer\">No Vehicles In The Park<span class=\"sr-only\"> (opens in new tab)<\/span><\/a><\/a><br>Homepage<\/li>\n<\/ul>\n<\/div>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Research Manager Mike Walker reflects on a career spanning hacker culture, cybersecurity, and AI, sharing lessons about trust, teamwork, leadership, and why solving difficult problems requires curiosity, judgment, agility\u2014and an understanding of the rules.<\/p>\n","protected":false},"author":44124,"featured_media":1192308,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"msr-url-field":"https:\/\/player.blubrry.com\/id\/155931356","msr-podcast-episode":"","msrModifiedDate":"","msrModifiedDateEnabled":false,"ep_exclude_from_search":false,"_classifai_error":"","msr-author-ordering":[{"type":"user_nicename","value":"Weishung Liu","user_id":"39805"},{"type":"user_nicename","value":"Mike Walker","user_id":"39150"}],"msr_hide_image_in_river":0,"footnotes":""},"categories":[240054],"tags":[],"research-area":[13558],"msr-region":[],"msr-event-type":[],"msr-locale":[268875],"msr-post-option":[243990],"msr-impact-theme":[],"msr-promo-type":[],"msr-podcast-series":[],"class_list":["post-1192298","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-msr-podcast","msr-research-area-security-privacy-cryptography","msr-locale-en_us","msr-post-option-podcast-featured"],"msr_event_details":{"start":"","end":"","location":""},"podcast_url":"https:\/\/player.blubrry.com\/id\/155931356","podcast_episode":"","msr_research_lab":[1161007],"msr_impact_theme":[],"related-publications":[],"related-downloads":[],"related-videos":[],"related-academic-programs":[],"related-groups":[682881,901101],"related-projects":[],"related-events":[],"related-researchers":[{"type":"user_nicename","value":"Weishung Liu","user_id":39805,"display_name":"Weishung Liu","author_link":"<a href=\"https:\/\/www.microsoft.com\/en-us\/research\/people\/weisliu\/\" aria-label=\"Visit the profile page for Weishung Liu\">Weishung Liu<\/a>","is_active":false,"last_first":"Liu, Weishung","people_section":0,"alias":"weisliu"},{"type":"user_nicename","value":"Mike Walker","user_id":39150,"display_name":"Mike Walker","author_link":"<a href=\"https:\/\/www.microsoft.com\/en-us\/research\/people\/walkerm\/\" aria-label=\"Visit the profile page for Mike Walker\">Mike Walker<\/a>","is_active":false,"last_first":"Walker, Mike","people_section":0,"alias":"walkerm"}],"msr_type":"Post","featured_image_thumbnail":"<img width=\"960\" height=\"540\" src=\"https:\/\/www.microsoft.com\/en-us\/research\/wp-content\/uploads\/2026\/10\/WeishungMike-MSRPod_Hero_Feature_River_No_Text_1400x788-960x540.jpg\" class=\"img-object-cover\" alt=\"Illustrated portraits of Weishung Liu and Mike Walker of Microsoft Research\" decoding=\"async\" loading=\"lazy\" srcset=\"https:\/\/www.microsoft.com\/en-us\/research\/wp-content\/uploads\/2026\/10\/WeishungMike-MSRPod_Hero_Feature_River_No_Text_1400x788-960x540.jpg 960w, https:\/\/www.microsoft.com\/en-us\/research\/wp-content\/uploads\/2026\/10\/WeishungMike-MSRPod_Hero_Feature_River_No_Text_1400x788-300x169.jpg 300w, https:\/\/www.microsoft.com\/en-us\/research\/wp-content\/uploads\/2026\/10\/WeishungMike-MSRPod_Hero_Feature_River_No_Text_1400x788-1024x576.jpg 1024w, https:\/\/www.microsoft.com\/en-us\/research\/wp-content\/uploads\/2026\/10\/WeishungMike-MSRPod_Hero_Feature_River_No_Text_1400x788-768x432.jpg 768w, https:\/\/www.microsoft.com\/en-us\/research\/wp-content\/uploads\/2026\/10\/WeishungMike-MSRPod_Hero_Feature_River_No_Text_1400x788-1066x600.jpg 1066w, https:\/\/www.microsoft.com\/en-us\/research\/wp-content\/uploads\/2026\/10\/WeishungMike-MSRPod_Hero_Feature_River_No_Text_1400x788-655x368.jpg 655w, https:\/\/www.microsoft.com\/en-us\/research\/wp-content\/uploads\/2026\/10\/WeishungMike-MSRPod_Hero_Feature_River_No_Text_1400x788-240x135.jpg 240w, https:\/\/www.microsoft.com\/en-us\/research\/wp-content\/uploads\/2026\/10\/WeishungMike-MSRPod_Hero_Feature_River_No_Text_1400x788-640x360.jpg 640w, https:\/\/www.microsoft.com\/en-us\/research\/wp-content\/uploads\/2026\/10\/WeishungMike-MSRPod_Hero_Feature_River_No_Text_1400x788-1280x720.jpg 1280w, https:\/\/www.microsoft.com\/en-us\/research\/wp-content\/uploads\/2026\/10\/WeishungMike-MSRPod_Hero_Feature_River_No_Text_1400x788.jpg 1400w\" sizes=\"auto, (max-width: 960px) 100vw, 960px\" \/>","byline":"<a href=\"https:\/\/www.microsoft.com\/en-us\/research\/people\/weisliu\/\" title=\"Go to researcher profile for Weishung Liu\" aria-label=\"Go to researcher profile for Weishung Liu\" data-bi-type=\"byline author\" data-bi-cN=\"Weishung Liu\">Weishung Liu<\/a> and <a href=\"https:\/\/www.microsoft.com\/en-us\/research\/people\/walkerm\/\" title=\"Go to researcher profile for Mike Walker\" aria-label=\"Go to researcher profile for Mike Walker\" data-bi-type=\"byline author\" data-bi-cN=\"Mike Walker\">Mike Walker<\/a>","formattedDate":"November 3, 2026","formattedExcerpt":"Research Manager Mike Walker reflects on a career spanning hacker culture, cybersecurity, and AI, sharing lessons about trust, teamwork, leadership, and why solving difficult problems requires curiosity, judgment, agility\u2014and an understanding of the rules.","locale":{"slug":"en_us","name":"English","native":"","english":"English"},"_links":{"self":[{"href":"https:\/\/www.microsoft.com\/en-us\/research\/wp-json\/wp\/v2\/posts\/1192298","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.microsoft.com\/en-us\/research\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.microsoft.com\/en-us\/research\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/research\/wp-json\/wp\/v2\/users\/44124"}],"replies":[{"embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/research\/wp-json\/wp\/v2\/comments?post=1192298"}],"version-history":[{"count":13,"href":"https:\/\/www.microsoft.com\/en-us\/research\/wp-json\/wp\/v2\/posts\/1192298\/revisions"}],"predecessor-version":[{"id":1192521,"href":"https:\/\/www.microsoft.com\/en-us\/research\/wp-json\/wp\/v2\/posts\/1192298\/revisions\/1192521"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/research\/wp-json\/wp\/v2\/media\/1192308"}],"wp:attachment":[{"href":"https:\/\/www.microsoft.com\/en-us\/research\/wp-json\/wp\/v2\/media?parent=1192298"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/research\/wp-json\/wp\/v2\/categories?post=1192298"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/research\/wp-json\/wp\/v2\/tags?post=1192298"},{"taxonomy":"msr-research-area","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/research\/wp-json\/wp\/v2\/research-area?post=1192298"},{"taxonomy":"msr-region","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/research\/wp-json\/wp\/v2\/msr-region?post=1192298"},{"taxonomy":"msr-event-type","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/research\/wp-json\/wp\/v2\/msr-event-type?post=1192298"},{"taxonomy":"msr-locale","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/research\/wp-json\/wp\/v2\/msr-locale?post=1192298"},{"taxonomy":"msr-post-option","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/research\/wp-json\/wp\/v2\/msr-post-option?post=1192298"},{"taxonomy":"msr-impact-theme","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/research\/wp-json\/wp\/v2\/msr-impact-theme?post=1192298"},{"taxonomy":"msr-promo-type","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/research\/wp-json\/wp\/v2\/msr-promo-type?post=1192298"},{"taxonomy":"msr-podcast-series","embeddable":true,"href":"https:\/\/www.microsoft.com\/en-us\/research\/wp-json\/wp\/v2\/msr-podcast-series?post=1192298"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}