muthameeping stuxnet

Stuxnet did 9/11 Theories.

Or maybe someone just really wants to make meepty legislation like this seem reasonable.

Why would anyone run a nuclear plant using Windows? I've got no answer for this one

This is the classic line of all time!

Shame on anyone using that Siemens garbage.

NATO isn't smart enough to pull this off. It's most likely an Israeli team, or disgruntled former Siemens employee(s).

Also, other than the obvious "sudden brick through the window affect", does this actually slow the Iranian nuke program down or stop it at all? I haven't seen any discussion on that.

from what i've heard, a lot of the reporting kinda has this thing wrong.

this seems solid.

reports are basically 'stuxnet reprograms plcs'. it seems instead that stuxnext infects the management machines and then injects itself into plcs the next time they're programmed, as plcs require some physical access (switch/etc) to accept reprogramming. i mean, either way, but yeah... also, i don't think these things are internet accessible like everyone is going on about. it seems usb key is the propagation method. my money's on israel or israel/us. everything requires intimate knowledge and using four zero day vectors and two certs is a little insane. i also enjoy the replication limit.

also, israelis are leet.

also also, Scott Borg, a U.S. cybersecurity expert. lol.

also also also from wikipedia: Siemens however advises against changing the default passwords because it "could impact plant operations".

_{On 2010-09-30 at 12:50:40, mundhra asked to smell your meep}

Wotak: Shame on anyone using that Siemens garbage.

:shameface:

Siemens however advises against changing the default passwords because it "could impact plant operations"

So wtf is the point of having the password at all if it is well known? zdnet claims that the passwords are not merely the default, but are hard-coded. Garbage indeed!

The forensics that we are getting will ultimately point clearly to the attacked process -- and to the attackers. The attackers must know this. My conclusion is, they don't care. They don't fear going to jail.

I know jack about forensics, but how could an attacker be identified if physical media was used? At best, the schmuck who happened to own the compromised media may be identified....

The one last bit of information that makes some sense for me is the clue that the attackers left in the code, as the fellows from Symantec pointed out

What clue?

What clue?

Deep inside the computer worm that some specialists suspect is aimed at slowing Iran's race for a nuclear weapon lies what could be a fleeting reference to the Book of Esther, the Old Testament tale in which the Jews pre-empt a Persian plot to destroy them.

That use of the word "Myrtus" - which can be read as an allusion to Esther - to name a file inside the code is one of several murky clues that have emerged as computer experts try to trace the origin and purpose of the rogue Stuxnet program, which seeks out a specific kind of command module for industrial equipment.

Thanks for that. I am obviously too lazy to have googled 'stuxnet clue'.

sugarslim: I know jack about forensics, but how could an attacker be identified if physical media was used? At best, the schmuck who happened to own the compromised media may be identified....

details

Schneier

tldr :

.... why is Stuxnet so sloppily targeted? Why doesn't Stuxnet erase itself when it realizes it's not in the targeted network? When it infects a network via USB stick, it's supposed to only spread to three additional computers and to erase itself after 21 days--but it doesn't do that. A mistake in programming, or a feature in the code not enabled? Maybe we're not supposed to reverse engineer the target. By allowing Stuxnet to spread globally, its authors committed collateral damage worldwide. From a foreign policy perspective, that seems dumb. But maybe Stuxnet's authors didn't care.

Good links at the bottom.

moar infos

Well it's obvious who's responsible now.

". . . a year before Stuxnet was discovered, Scott Borg of the United States Cyber-Consequences(WTF?) Unit had suggested . . . "

Whatever . . . resistance is futile--too late for meeping suggestions now.

chanx?

Your text to link here...