TED
2 HN recommenders · recommended in 3 months, 2011–2021
10:41 · 323K views · Mar 29, 2011
In an 11-minute TED talk, Ralph Langner explains how his team reverse-engineered the Stuxnet worm and worked out that it targeted industrial control systems, with a covert state origin. It is a compact look at cyber-forensics.
HN points people to it as the short, accessible account of how Stuxnet was dissected, usually when Stuxnet or state-sponsored malware comes up.
5 comments from Hacker News
PSY-OP MOTHERFUCKER, CAN YOU HACK IT?! This is NOT script kiddies going at it, this is bio-stux.... See the following: Watch these in this order: [LINK] - brief overview great animation this video - ted talk on stux [LINK] . detailed analysis of stuxnet the last one is long and Bruce appears to be an arrogant prick, but it is clear - cyber war has been here for a while. --- As I have mentioned, cyber war is here - and the legislation is lacking in its awareness - but becuase we have incompetant douches in charge of tech legislation, we will have physical war used as a metaphor to cyber warfare and thus have draconian influences from physical imprisonment being applied to digital situations. Utterly broken.
Watch these in this order: [LINK] - brief overview great animation this video - ted talk on stux [LINK] detailed analysis of stuxnet the last one is long and Bruce appears to be an arrogant prick, but it is clear - cyber war has been here for a while.
I assume we are going to see a complicated and interesting dissection a la Stuxnet? The Stuxnet TED talk [0] was really interesting, I ended up giving a talk to my department at work afterwards. [0] - this video
One other point not mentioned, is copying 4GiB of data across a network does take a bit of time, over the internet even longer. This link [LINK] is to a 2.9GB file so you can see how long it will take to download 4GiB over your internet connection. There is also the point on ASLR making life difficult, well if ASLR is switched on, there are a number of other options which may be also switched on in that part of the system, eg Control Flow Guard, DEP (been around for a couple of decades now), forced ASLR, bottoms up ASLR, High Entropy (more useful if you have shed loads of ram installed than minimum amounts), SEHOP ( [LINK] ) and Validate Heap integrity which are all on by default now a days in the systems I have seen. Then there is group policy where in Pro or above, you can control what programs run, in home you can add some of the group policy reg keys and get the same functionality when the functionality exists in the dll's. It reminds me of the bug where you could use notepad to pop a shell, but I'd be interested to see if this would still work with core isolation switched on, Defender Application Guard switched on to sandbox different apps, not just Edge. The number of installers for various apps which dont handle Ransomware Protection aka Controlled Folder Access being switched on, even some big names like Dell's Data Vault havent got that sorted yet, but I still think the best way to hack a system is the old way and get them to download and install an app which can run
> Its worth reminding ourselves about Stuxnet, they still havent caught those people, but lots of assumptions exist. [LINK] [LINK] this video I thought it was widely known that stuxnet is very likely if not certainly a join NSA and Israel operation.