Skip to content
HomeVideos
AllLongsCategoriesPlaylists
BooksBlogsPodcasts
HistoryListsWatch laterLiked videosFollowing

The videos, books, blogs and podcasts Hacker News keeps recommending, all in one place.

VideosBooksBlogsPodcastsAboutPrivacySettings

Data from Hacker News, HackerTube, HackerBooks, HackerBlogs and Open Library. Credits · Not affiliated with Y Combinator.

HomeVideosBooksBlogsPodcasts
Ctrl K

    27C3: Adventures in analyzing Stuxnet (Bruce Dang from Microsoft)

    basti0007

    8 HN recommenders · recommended in 8 months, 2011–2024

    YouTube

    1:14:56 · 95K views · Dec 29, 2010

    Bruce Dang of Microsoft gives a 27C3 talk on how the Stuxnet vulnerabilities were found and analyzed. He walks through the techniques used to triage them and the details of each zero-day exploit, down to the opcode level.

    HN recommends it as the definitive technical deep dive into Stuxnet's zero-days from someone who analyzed it first-hand.

    Systems, Networks & SecuritySecurity & hacking
    1. 10:41
      Ralph Langner: Cracking Stuxnet, a 21st-century cyber weaponTED323K views • 15 years ago
    2. 53:02
      36C3 - A systematic evaluation of OpenBSD's mitigationsmedia.ccc.de18K views • 6 years ago
    3. 50:59
      DEF CON 22 - Adrian Crenshaw- Dropping Docs on Darknets: How People Got CaughtDEFCONConference219K views • 11 years ago
    4. 44:29
      Breaking the x86 Instruction SetBlack Hat381K views • 9 years ago
    5. 44:11
      27c3: Console Hacking 2010 (en)Christiaan00833K views • 15 years ago
    6. 58:06
      37C3 - Operation Triangulation: What You Get When Attack iPhones of Researchersmedia.ccc.de85K views • 2 years ago
    7. 59:23
      28c3: The Science of Insecurity28c342K views • 14 years ago
    8. 52:51
      DEF CON 22 - Zoz - Don't Fuck It Up!DEFCONConference546K views • 11 years ago
    9. 44:40
      DCEmu Reviews - 27C3 - Chaos Communication Congress 2010 - fail0verflow - FULL VIDEO1KIND Reviews47K views • 15 years ago
    10. 53:44
      Console Hacking 2016 (33c3)media.ccc.de166K views • 9 years ago
    11. 1:05:51
      LibreSSL: The first 30 days, and what the Future HoldsAndrea Ross5.1K views • 12 years ago
    12. 56:37
      36C3 - Uncover, Understand, Own - Regaining Control Over Your AMD CPUmedia.ccc.de23K views • 6 years ago
    13. 1:04:25
      #HITB2012KUL D1T3 - The Grugq - OPSEC: Because Jail is for wuftpdHack In The Box Security Conference158K views • 13 years ago
    14. 1:05:45
      LibreSSL with Bob BeckJason Tubnor25K views • 12 years ago
    15. 43:45
      We Hacked Flock Safety Cameras in under 30 Seconds. 🫥Benn Jordan3.3M views • 11 months ago
    16. 48:29
      DEF CON 30 - Sam Bent - Tor - Darknet Opsec By a Veteran Darknet VendorDEFCONConference557K views • 4 years ago
    17. 1:45:47
      Bryan Cantrill on Jails and Solaris ZonesPapersWeLove34K views • 10 years ago
    18. 52:35
      Debugging Under Fire: Keep your Head when Systems have Lost their Mind • Bryan Cantrill • GOTO 2017GOTO Conferences101K views • 9 years ago
    19. 38:49
      DEF CON 23 - Chris Domas - Repsych: Psychological Warfare in Reverse EngineeringDEFCONConference173K views • 10 years ago
    20. 50:56
      DEFCON 20: Hacker + Airplanes = No Good Can Come Of ThisChristiaan008227K views • 13 years ago

    10 comments from Hacker News

    1. @JonnieCacheMay 2011· in “Did the US write Stuxnet? Deputy Defense Secretary won't deny it”

      Also, check out this excellent 27C3 presentation from Bruce Dang, a microsoft malware analyst, where he cracks numerous gags about mossad. this video It's well worth watching anyway, lots of good info on the various exploits used by stuxnet, down to the opcode level. He's a pretty funny guy as well.

      Strongly recommendsView on HN
    2. @nodesocketJun 2021· in “Microsoft Patches Six Zero-Day Security Holes”

      Are these on the same level as Stuxnet? For an amazing technical deep dive into each 0-day Stuxnet vulnerability watch this talk with Bruce Dang from Microsoft[1]. I really enjoy his natural speaking style (it's like talking about Stuxnet over beers with him). [1] this video

      Strongly recommendsView on HN
    3. @spudlyoFeb 2011· in “Black ops: how HBGary wrote backdoors for the government”

      LNK files can point to DLLs that get loaded by Explorer when it draws the icon for the link target. I only know this because I watched an excellent video explaining the 0-day vulnerabilities that stuxnet used by Microsoft leet hax0r Bruce Dang. this video

      Strongly recommendsView on HN
    4. @tbrockFeb 2013· in “Stuxnet Missing Link Found, Resolves Some Mysteries Around the Cyberweapon”

      If anyone hasn't seen this video from the Microsoft team analyzing how this went down, I highly suggest watching. I was on the edge of my seat! this video

      Strongly recommendsView on HN
    5. @phluxJun 2011· in “LulzSec releases trove of AZ law enforcement documents”

      PSY-OP MOTHERFUCKER, CAN YOU HACK IT?! This is NOT script kiddies going at it, this is bio-stux.... See the following: Watch these in this order: [LINK] - brief overview great animation [LINK] - ted talk on stux this video . detailed analysis of stuxnet the last one is long and Bruce appears to be an arrogant prick, but it is clear - cyber war has been here for a while. --- As I have mentioned, cyber war is here - and the legislation is lacking in its awareness - but becuase we have incompetant douches in charge of tech legislation, we will have physical war used as a metaphor to cyber warfare and thus have draconian influences from physical imprisonment being applied to digital situations. Utterly broken.

      RecommendsView on HN