Ralph Langner: Cracking Stuxnet, a 21st-century cyber weapon
Why Hacker News recommends it
HN points people to it as the short, accessible account of how Stuxnet was dissected, usually when Stuxnet or state-sponsored malware comes up.
What it is
In an 11-minute TED talk, Ralph Langner explains how his team reverse-engineered the Stuxnet worm and worked out that it targeted industrial control systems, with a covert state origin. It is a compact look at cyber-forensics.
Recommended by 2 HN commenters across 2 different months, 2011 to 2021.
What Hacker News said
Recommends phlux · 2011-06 · on “Stuxnet Virus Weapon Now Being Sold On The Black Market”
Watch these in this order: [LINK] - brief overview great animation [this video] - ted talk on stux [LINK] detailed analysis of stuxnet the last one is long and Bruce appears to be an arrogant prick, but it is clear - cyber war has been here for a while.
Recommends phlux · 2011-06 · on “LulzSec releases trove of AZ law enforcement documents”
PSY-OP MOTHERFUCKER, CAN YOU HACK IT?! This is NOT script kiddies going at it, this is bio-stux.... See the following: Watch these in this order: [LINK] - brief overview great animation [this video] - ted talk on stux [LINK] . detailed analysis of stuxnet the last one is long and Bruce appears to be an arrogant prick, but it is clear - cyber war has been here for a while. --- As I have mentioned, cyber war is here - and the legislation is lacking in its awareness - but becuase we have incompetant douches in charge of tech legislation, we will have physical war used as a metaphor to cyber warfare and thus have draconian influences from physical imprisonment being applied to digital situations. Utt
Recommends vecinu · 2012-05 · on “Flame: Massive cyber-attack discovered, researchers say”
I assume we are going to see a complicated and interesting dissection a la Stuxnet? The Stuxnet TED talk [0] was really interesting, I ended up giving a talk to my department at work afterwards. [0] - [this video]
Cites Terry_Roll · 2021-12 · on “Microsoft Windows RCE Vulnerability Gives an Attacker Complete Control”
One other point not mentioned, is copying 4GiB of data across a network does take a bit of time, over the internet even longer. This link [LINK] is to a 2.9GB file so you can see how long it will take to download 4GiB over your internet connection. There is also the point on ASLR making life difficult, well if ASLR is switched on, there are a number of other options which may be also switched on in that part of the system, eg Control Flow Guard, DEP (been around for a couple of decades now), forced ASLR, bottoms up ASLR, High Entropy (more useful if you have shed loads of ram installed than minimum amounts), SEHOP ( [LINK] ) and Validate Heap integrity which are all on by default now a days
Cites _kbh_ · 2021-12 · on “Microsoft Windows RCE Vulnerability Gives an Attacker Complete Control”
> Its worth reminding ourselves about Stuxnet, they still havent caught those people, but lots of assumptions exist. [LINK] [LINK] [this video] I thought it was widely known that stuxnet is very likely if not certainly a join NSA and Israel operation.