11–20 of 507 posts
If this short read piked your interest in Stuxnet, I can recommend the book "Countdown to Zero Day: Stuxnet and the Launch of the World's First Digital Weapon". It explains in great detail how Stuxnet worked and, which I found the most exciting, how it was discovered and reverse engineered.
So.... For people who have followed this story more closely then i have, did the hostile actor ever get identified? Last i checked it was a toss up between USA, Israel and France, was a conclusion ever drawn?
So.... For people who have followed this story more closely then i have, did the hostile actor ever get identified? Last i checked it was a toss up between USA, Israel and France, was a conclusion ever drawn?
The current belief is that it was a joint effort between at least Israel and the USA.
I've been arguing about this for the last three days. Mostly around the reason that "complexity" is not strictly the same thing as "sophistication" when it comes to software. Noobs will conflate the two, but experienced programmers will agree that -- just to illustrate my point -- some code which solves a complex problem in a very clever way while also being very clean and easy to maintain will be considered strictly…
I find it very satisfying to understand a problem so well, up to the point you can find a simple and elegant solution to it. It makes the solution easier to reason about with other team members, and easier for the team to maintain it later. I see this as making your domain expertise available as a framework for the other team members.
This is my idea of sophistication in the software development world.
I wonder how many people worked on this, and for how long
Earlier quoted context omitted.
The current belief is that it was a joint effort between at least Israel and the USA.
Considering that Israel is the nation always mongering war against Iran I second you.
> that driver started signing it with secret keys from JMicron
I think this is the scariest part of the worm. Not only do the people writing it have access to zero-days, they also somehow have (possibly physical) access to the private keys of two large corporations.
Earlier quoted context omitted.
Considering that Israel is the nation always mongering war against Iran I second you.
Well, to be fair, Iran is trying to build a nuclear weapon and wants to wipe out Israel.
> This driver was digitally signed by Realtek > that driver started signing it with secret keys from JMicron I think this is the scariest part of the worm. Not only do the people writing it have access to zero-days, they also somehow have (possibly physical) access to the private keys of two large corporations.
> This driver was digitally signed by Realtek > that driver started signing it with secret keys from JMicron I think this is the scariest part of the worm. Not only do the people writing it have access to zero-days, they also somehow have (possibly physical) access to the private keys of two large corporations.
Try not to think about how many SREs in the big five are likely receiving a second secret paycheck from Langley and/or Fort Meade.