Dissecting Stuxnet

[@stheripper]

This person definitely deserves better audiance.

[@OmmerSyssel]

saurabh chikate maybe this audience was used to more demanding issues. Ongoing presenting simple matters with "right" doesn't raise any level.. Right?

[@shockthemuscle3810]

😂

[@nekilof-2363]

@@brysonmalakai6769 Nobody cares & nice pitch for your stupid hacking program.

[@deemarty6618]

I agree...strongly also to the fact that you beat me to this comment by four years

[@mlassz009]

1:44...... " Killa what, John I don't know what he's saying "

[@tekobari]

Without a doubt, this is the best video I've seen on Stuxnet for non-computer people. There's no coding shown or any other stuff, and it's step-by-step. Imma put the link wherever I can. Terrific!

[@BillKinsman]

Stuxnet demonstrates what is possible when you have access to everything you need.

[@daintellekt]

excellent ! room filled with people waiting for their retirement and devoid of any enthusiasm or interest.

[@jordanmanco5216]

his thing is so advanced that it will probably take decades or more for the world to understand Stuxnet. This is so complex and advanced, I still can't believe this is possible.

[@biz4twobiz463]

Agreed. We already know stuxnet. The key here...is that since the source code is in the wild...others interested in copying and/or converting the code for specific needs can be done. instead of 7 interests...they inject 10 or 12 or etc. ???

[@OmmerSyssel]

Jordan Manco Ask any electrician, instead of computer nerds.. ;-)

[@solsteinbergowitzgreenbaum411]

Thank you, Nicholas Cage. Very informative.

[@OEFarredondo]

Sol Steinbergowitzgreenbaum yeah man I was about to say that guy does everything

[@wicksrabach8545]

Brilliant presentation of a very complex subject...

[@mlassz009]

Comments from the Crowd: "I hope i don't miss bingo" "Why does my hip hurt" "Wheres my heart pills"

[@paulegonkluwe2597]

Know what you are? A DAMN FUCKING MORON.

[@mlassz009]

@@paulegonkluwe2597 I take it your over the age of 50, It might be nap time for you now....I sense a bit of geriatric anger

[@paulegonkluwe2597]

@@mlassz009 How about a nice big cup of shut the fuck up, you spastic??!

[@yair4616]

@@paulegonkluwe2597 Okay boomer

[@asiamies9153]

:DDDDDD

[@3hundredyearsago296]

The complexity of this is mind boggling. To have a worm that actually re writes logic and makes it appear as nothing is awry. Wow i have trouble writing basic ladders.lmao

[@PAULBLUNTZER]

14:13, finally hit Level 90 in World of Warcraft.

[@josephmartin6219]

Israel's Unit 8200 and the NSA wrote something the Iranians never saw coming in 20 years lol Absolutely incredible the abilities of the worm!

[@therockstar17]

Whats up with all the old people looking like they have no clue what this guy is talking about? They look like they broke out of the retirement center and accidentally went to the wrong class and instead of making pottery for the afternoon.

[@weenir299]

+therockstar17 NSA agents

[@nathwalsh1]

+weenir that old dude trying to hide his face

[@atheist_realist]

LOOL! Oldies from Standford look like they don't quite understand whats all the fuzz about

[@biz4twobiz463]

Agreed. Looks like a lot of folks that need to retire and get off the payroll. LOL!! Seriously, old folks like that should go off and live their lives. Let some young folks in...and reduce the unemployment rate. LOL!!

[@koovar]

what a stupid fucking comment, you must be thick as pig shit

[@kelkiiii]

This is a really great explanation and the enthusiasm was awesome

[@anonmouse529]

people who program not only have a effect on the virtual world but can also impact the physical world since the two are closely met the only way to get rid of the problem altogether is to get rid of technology but i dont foresee that from happening so all we can do is take precautions and actively monitor for new threats and adjust as necessary.

[@OmmerSyssel]

anon mouse The impact on the physical world from desk guys is pretty low, just like the influence from smiths or carpenters on the virtual world is pretty easy to manage ;-) Which job do you earn your living?

[@metaparcel]

This should have a million views.

[@senorretard]

"my biggest fear is... spiders...I fucking hate spiders"

[@deadlock107]

This was very intertesting and understandable for regular people (like me).

[@danscott8899]

The guy in in audience hiding his face from the camera. Hilarious. Great video! Thanks!

[@hunterbiden7391]

He must be wanted.

[@MattAndersomm]

This is Proper Noun you are giving as an example, neither of us is wrong.

[@Reparaturkanal]

So what about those 2 Hertz? Did it do so to damage the motors, keeping them from spinning because of the low frequency, but still putting power thru to damage the motor windings?

[@clownworld5474]

Like a spinning top, when it slows to zero it starts to lose balance. The loss of balance created damage

[@iansullivan3547]

Also uranium enrichment centrifuges have to spin fast enough to separate enriched uranium from regular uranium. So when it spins to slow, the two don’t separate and you can’t use the enriched uranium that would go in the bombs. So too fast causes damage, and too slow doesn’t allow you to get the specific type of uranium (enriched) you need to make the bombs

[@attilagergely6734]

The update feature allows the worm to be easily rendered useless. If the engineers upload a version that is inoperable and specify that it is the latest version then the worm will no longer cause a problem.

[@canaanthedj]

They didn’t know they were getting hit with this so there was no strategy to defend against it. Also it’s highly probable that this was created for the sole purpose of attacking this specific network meaning it was built to exploit flaws in its design

[@fieldingmellish6856]

I guess the best way to avoid these kinds of break ins is with hard safeties. If all the operating data goes through one source(the PLC)it can be manipulated. All critical operating parameters ie: speed/freq, temp, level, ?? Etc, should have separate safety shutdown hardware that does NOT relay through PLC. Wait till this kind of stuff hits autos who now use similar data collecting/controlling methods Connectivity is sometimes very overrated.

[@rbrtchng]

I know your point, and my counterpoint is that it doesn't matter. A second word is a second word.

[@MaynardKeenanX]

90% of the people listening were just absolutely clueless about everything he said...

[@jvigil2007]

So when the code "put the picture in front of the camera" what would the PLC show when an engineer tried increasing or decreasing the frequency of the centrifuges? If an engineer tried increasing it from 800 to 1200, would the PLC show that value while the code was still doing its mission?

[@William_sJazzLoft]

In the case of the Iranian technicians at Natanz, for the first payload the values displayed were within the normal parameters.

[@ankitsuthar3776]

Great Explanation ! You definitely deserve better audiences:)

[@neosapien247]

5:17 corner guy: I have no idea what I'm doing here.

[@mkimball6]

Not a lack of, just being cheap. Nobody pays for something they don't need and nobody expects a cyber attack, though they should. I bet the physical security on the place was top notch.

[@kvmairforce]

This thing is so advanced that it will probably take decades or more for the world to understand Stuxnet. This is so complex and advanced, I still can't believe this is possible.

[@MelindadelosSantos]

Two paws up and a circle (for the lucid breakdown)! :)

[@pyrrho314]

short version: they exploited the fact that they ran mission critical systems on microsoft operating systems. I assume they use duct tape to assemble the plants in place of bolts.

[@glepp]

they would of exploited any other OS, no OS is 100% failsafe.

[@MattAndersomm]

Both nouns epilogue and epilog are correct.

[@alexkantor8238]

Could you mimic human immune systems, and make a "deactivated" version of stuxnet that could be used to train antivirus software? Or to make it attack other instances of itself?

[@robbzooi]

this is actually quite an interesting thought

[@vytautasgaldikas7588]

Alex Kantor Sure that's how antiviruses work already. But this was an entirely new virus, hence the immune system was not trigerred.

[@biz4twobiz463]

Absolutely. Once a hacker has the source code they can do with it as they please. Similar programs exist...and they run the virus, malware, worm in a so called isolated Sandbox environment.

[@cougar231000]

that doesn't make any sense

[@lurkenskanal405]

now thats one complex virus

[@flexzionist]

"It's called a Trojan Horse because it does damage"... ehhh okeee

[@AntiHolyChrist]

I haven't watched TV in 12 years since this. I've been tryna figure it out.

[@kevinparsley6806]

not feeling so excited for my next roller coaster ride after this...

[@EETechs]

Problem is, no PLC software is for Linux. The most used PLC's are either from Siemens or Allen-Bradley. Not even virtualizing Windows onto Linux would stop this virus.

[@JosephTX89]

This is pretty cool. I don't understand why computer worms like this are treated as alien technology by the media when the espionage factor is much more exciting anyway.

[@shudukahn555]

Get ready for Stuxnet 2

[@SloeJuice]

Stupid camera man - showing the person talking, but not the slides.

[@OmmerSyssel]

Orange Juice Typical intellectuals? Ordinary issues seldom handled to ordinary standards, by products of elitarian circumstances ...?

[@gromby783]

Whitfield Diffie at 5:52.

[@ScottishAtheist]

Fascinating.

[@AntiHolyChrist]

I ran around the east coast tryna escape while everyone was stuck to a screen. I was so scared.

[@unclewaggy09]

Anyone know how they know it was named Stuxnet? Or is that just a name given out randomly? I'm not a computer guy.

[@Benjam901]

The original name given by VirusBlokAda was "Rootkit.Tmphider"; Symantec however called it "W32.Temphid", later changing to "W32.Stuxnet". Its current name is derived from a combination of some keywords in the software (".stub" and "mrxnet.sys")

[@ravirajgupta153]

Thanks Benjam901

[@rr.studios]

Steve Jobs, Part time CEO of Apple, Parttime Stanford lecturer. RIP... you will be missed

[@Silhouette93]

Great video

[@tammyroyce8013]

Okay there you're making a benchmark that is traveling

[@75Prelives]

Pretty amazing anyway you look at it....

[@xEePiiCzZ]

The virus would make the interface believe that everything is running fine, when it secretly makes the centrifuges run at 2Hz or 1410Hz.. I'm not quite sure or it reacts on the interaction of people it just analyses the scheme and then simulates it.

[@TristanMorrow]

>> There's actually word processors you CAN'T infect with viruses ...or are there?

[@tammyroyce8013]

And judging by what I can see and feel since I am clairvoyant I'm pretty much saying he's either a medics a doctor or nurse

[@accentz123]

that's kinda awesome...i wish i could program and write code..

[@musashidanmcgrath]

Why can't all the imperative systems that drive centrifuges/etc just be 100% offline with no external ports and a properly-encrypted network?(retinal scans instead of a default/ridiculous password) If there is no way to introduce these tools to the system then surely they are safe from attack?

[@mfascino]

musashidanmcgrath the system was 100% offline.. with a USB port. even the most remote, offline system still needs to be updated somehow

[@renovatiovr]

@@mfascino that, or the system was offline with an internal closed network

[@egg-iu3fe]

the problem is that as long as there are spies, an offline system is susceptible to attack. Doesn't matter how much you try to secure it if one of your own trusted people is a double agent or being blackmailed or bribed by the CIA or Mossad. Iran arrested some spies after stuxnet happened, those spies were probably executed.

[@ThePayola123]

One Giant Leap for Computer Viruses, One Teeny Tiny Step for Mankind.

[@PapaCuppa]

Half the people in that room thought he was talking about the flu virus.

[@A-Milkdromeda-Laniakea-Hominid]

Look at the guy at 5:18 and 14:50, conscious of being seen on camera. God I couldn't stand to be in national security. Too much paranoia, not worth it.

[@tammyroyce8013]

All because if you take a regular Android phone that is a prepaid and you get it from the store you dissected you take out the little sticker with the barcode on it and underneath that you have that little stabbed blood

[@ParentBeater123]

While this is mostly true, Stuxnet used Windows as a vehicle to gain access to PLCs. If you replaced Windows with Linux it wouldn't have been able to spread and find it's way into the PLCs and deliver it's payload.

[@canaanthedj]

Then the virus would have been built to exploit Linux instead

[@akhTubed]

The audience is actually very impressive, critics in the comments have no idea. He’s got Whitfield Diffie in the front row… awkward moment there feeling the need to explain public key crypto.

[@ronaldbeck8689]

13:44 He explained NFTs in the simplest way 7-8 years before they were really a thing and like 9-10 before the boom.

[@theone3428]

NFT's are 1 of 1. He's talking about digitally signing software so that you know it's unmodified.

[@TheNelso54]

No he’s not lol

[@MattAndersomm]

Becouse again prologue and prolog are correct.

[@muneebbhat3928]

Foiled?

[@alberoDiSpazio]

14:13, I just won my 'Berries & Cream' on Ebay.

[@William_sJazzLoft]

Engineering systems and automation technology compromised. Valve controllers for the gas centrifuge cascade are duped.

[@vrghiks]

Are these viruses catching?

[@William_sJazzLoft]

Data files contain the command and control logic

[@licensedblockhead]

12:40 OH MY GOD

[@会供価]

is he teaching in a retirment home?

[@existenz55]

Imagine in BadBIOS is real too (about 10 times more complex then Stuxnet) and we just don't know what it dose at the moment.

[@existenz55]

@nine virus

[@ritvarsdortans]

ye, sure...

[@xsitescripttactnorris8503]

Awesome.

[@rmcgraw7943]

This is the pretty typical APT attack we see now.

[@Ishpeck]

Time to start using OpenBSD.

[@Max-zr7hr]

They said there was going to be pudding. Where is the pudding?

[@chvlumbee]

I had to come for the comments LOL,. When they pane to the viewing audience 😂😂😂, dam near lost my mind.

[@marshalllapenta7656]

They DUMBED it DOWN to make it GENERIC across the BOARD........that's why they went to a GERMAN GUY because of the SIEMENS REFERENCE......

[@gitesh987]

And this is why most tech aware countries are going old fashion way so such thing doesn't happen

[@kipropcollins4220]

the most important part was the epilog

[@lamborginiish]

Start with Code Academy.

[@pyrrho314]

the real issue here is it would be just as easy to break into our power systems and screw them up... windows is a toy... unless you built your power station with duct tape to match, it's not appropriate mission critical software. There's actually word processors you CAN'T infect with viruses... wouldn't it make sense to have a secure facility use them? Isn't BG rich enough off his crap by now?

[@OEFarredondo]

Folks my bad, I let my dog use my computer and she wrote stuxnet. Italian greyhound mixes are shade AF

[@TristanMorrow]

good talk, m'kay ...but he reminds me of the school counselor from South Park, m'kay ...

[@richardclarke376]

17:00 hilariously he is describing the exact scenario that just occurred..... caused by an AV software company named Crowdstrike!!!!

[@tullegutt991]

I don't understand why NIcholas Cage is explaining this to old people, makes no sense. they obviously has no clue of what he's saying...

[@Evanderj]

His audience must think he’s speaking a different language 😂

[@rathemis]

my fear is that some creepy guy is gonna modify this stuxnet to do something more nasty, not only to the iranian plants, but to everybody. that can become really bad...

[@elev84u]

Choosing the right audience for this topic: You're doing it wrong

[@xander7b]

For people who are actually interested, or want to be, search youtube for Adventures in analyzing Stuxnet [27C3]

[@thevivekmathema]

the grandpa just said Dooouggh

[@johnsnow1516]

okay?

[@devopssimplified9055]

Whit Diffie @5:53

[@Misterkristo]

2012 end of the world all makes sense

[@rbrtchng]

and why is egg spelled "egg"?

[@engineersalltheway]

Guy at 5:20 looks real sus.

[@neosapien247]

14:13 secretly came.

[@pyrrho314]

for all intents and purposes.... you might suggest anything that loads data can in principle be victim to a buffer overrun but in principle doesn't mean in actuality, first of all, and second of all... I'm talking about the fact that Microsoft documents... oh fuck it.

[@mlassz009]

14:10.... Looks like Steve Jobs popped in and is trying to hide is face

[@SmartK8]

Is the audience for real? Or somebody sliced the video with a home for elderly Sunday morning daily program announcement. I just can't believe my own eyes.

[@itsThemuRR]

2018 and I'm agreeing!

[@ravipopat1]

More like a mix of Ryan Gosling and Nicolas Cage.