Dissecting Stuxnet

[@stheripper]

This person definitely deserves better audiance.

[@OmmerSyssel]

saurabh chikate maybe this audience was used to more demanding issues. Ongoing presenting simple matters with "right" doesn't raise any level.. Right?

[@shockthemuscle3810]

😂

[@nekilof-2363]

@@brysonmalakai6769 Nobody cares & nice pitch for your stupid hacking program.

[@deemarty6618]

I agree...strongly also to the fact that you beat me to this comment by four years

[@mlassz009]

1:44...... " Killa what, John I don't know what he's saying "

[@tekobari]

Without a doubt, this is the best video I've seen on Stuxnet for non-computer people. There's no coding shown or any other stuff, and it's step-by-step. Imma put the link wherever I can. Terrific!

[@BillKinsman]

Stuxnet demonstrates what is possible when you have access to everything you need.

[@solsteinbergowitzgreenbaum411]

Thank you, Nicholas Cage. Very informative.

[@OEFarredondo]

Sol Steinbergowitzgreenbaum yeah man I was about to say that guy does everything

[@daintellekt]

excellent ! room filled with people waiting for their retirement and devoid of any enthusiasm or interest.

[@mlassz009]

Comments from the Crowd: "I hope i don't miss bingo" "Why does my hip hurt" "Wheres my heart pills"

[@paulegonkluwe2597]

Know what you are? A DAMN FUCKING MORON.

[@mlassz009]

@@paulegonkluwe2597 I take it your over the age of 50, It might be nap time for you now....I sense a bit of geriatric anger

[@paulegonkluwe2597]

@@mlassz009 How about a nice big cup of shut the fuck up, you spastic??!

[@yair4616]

@@paulegonkluwe2597 Okay boomer

[@asiamies9153]

:DDDDDD

[@3hundredyearsago296]

The complexity of this is mind boggling. To have a worm that actually re writes logic and makes it appear as nothing is awry. Wow i have trouble writing basic ladders.lmao

[@jordanmanco5216]

his thing is so advanced that it will probably take decades or more for the world to understand Stuxnet. This is so complex and advanced, I still can't believe this is possible.

[@biz4twobiz463]

Agreed. We already know stuxnet. The key here...is that since the source code is in the wild...others interested in copying and/or converting the code for specific needs can be done. instead of 7 interests...they inject 10 or 12 or etc. ???

[@OmmerSyssel]

Jordan Manco Ask any electrician, instead of computer nerds.. ;-)

[@PAULBLUNTZER]

14:13, finally hit Level 90 in World of Warcraft.

[@wicksrabach8545]

Brilliant presentation of a very complex subject...

[@anonmouse529]

people who program not only have a effect on the virtual world but can also impact the physical world since the two are closely met the only way to get rid of the problem altogether is to get rid of technology but i dont foresee that from happening so all we can do is take precautions and actively monitor for new threats and adjust as necessary.

[@OmmerSyssel]

anon mouse The impact on the physical world from desk guys is pretty low, just like the influence from smiths or carpenters on the virtual world is pretty easy to manage ;-) Which job do you earn your living?

[@therockstar17]

Whats up with all the old people looking like they have no clue what this guy is talking about? They look like they broke out of the retirement center and accidentally went to the wrong class and instead of making pottery for the afternoon.

[@weenir299]

+therockstar17 NSA agents

[@nathwalsh1]

+weenir that old dude trying to hide his face

[@atheist_realist]

LOOL! Oldies from Standford look like they don't quite understand whats all the fuzz about

[@biz4twobiz463]

Agreed. Looks like a lot of folks that need to retire and get off the payroll. LOL!! Seriously, old folks like that should go off and live their lives. Let some young folks in...and reduce the unemployment rate. LOL!!

[@koovar]

what a stupid fucking comment, you must be thick as pig shit

[@josephmartin6219]

Israel's Unit 8200 and the NSA wrote something the Iranians never saw coming in 20 years lol Absolutely incredible the abilities of the worm!

[@senorretard]

"my biggest fear is... spiders...I fucking hate spiders"

[@MaynardKeenanX]

90% of the people listening were just absolutely clueless about everything he said...

[@danscott8899]

The guy in in audience hiding his face from the camera. Hilarious. Great video! Thanks!

[@hunterbiden7391]

He must be wanted.

[@deadlock107]

This was very intertesting and understandable for regular people (like me).

[@kelkiiii]

This is a really great explanation and the enthusiasm was awesome

[@nyariezhou8470]

Very informative! Thank you for the information about The Stuxnet computer worm and all the stuxnet threats!!

[@metaparcel]

This should have a million views.

[@attilagergely6734]

The update feature allows the worm to be easily rendered useless. If the engineers upload a version that is inoperable and specify that it is the latest version then the worm will no longer cause a problem.

[@djcanaan1]

They didn’t know they were getting hit with this so there was no strategy to defend against it. Also it’s highly probable that this was created for the sole purpose of attacking this specific network meaning it was built to exploit flaws in its design

[@fieldingmellish6856]

I guess the best way to avoid these kinds of break ins is with hard safeties. If all the operating data goes through one source(the PLC)it can be manipulated. All critical operating parameters ie: speed/freq, temp, level, ?? Etc, should have separate safety shutdown hardware that does NOT relay through PLC. Wait till this kind of stuff hits autos who now use similar data collecting/controlling methods Connectivity is sometimes very overrated.

[@Reparaturkanal]

So what about those 2 Hertz? Did it do so to damage the motors, keeping them from spinning because of the low frequency, but still putting power thru to damage the motor windings?

[@clownworld5474]

Like a spinning top, when it slows to zero it starts to lose balance. The loss of balance created damage

[@iansullivan3547]

Also uranium enrichment centrifuges have to spin fast enough to separate enriched uranium from regular uranium. So when it spins to slow, the two don’t separate and you can’t use the enriched uranium that would go in the bombs. So too fast causes damage, and too slow doesn’t allow you to get the specific type of uranium (enriched) you need to make the bombs

[@neosapien247]

5:17 corner guy: I have no idea what I'm doing here.

[@MattAndersomm]

This is Proper Noun you are giving as an example, neither of us is wrong.

[@mkimball6]

Not a lack of, just being cheap. Nobody pays for something they don't need and nobody expects a cyber attack, though they should. I bet the physical security on the place was top notch.

[@flexzionist]

"It's called a Trojan Horse because it does damage"... ehhh okeee

[@MelindadelosSantos]

Two paws up and a circle (for the lucid breakdown)! :)

[@lurkenskanal405]

now thats one complex virus

[@rbrtchng]

I know your point, and my counterpoint is that it doesn't matter. A second word is a second word.

[@AntiHolyChrist]

I haven't watched TV in 12 years since this. I've been tryna figure it out.

[@alexkantor8238]

Could you mimic human immune systems, and make a "deactivated" version of stuxnet that could be used to train antivirus software? Or to make it attack other instances of itself?

[@robbzooi]

this is actually quite an interesting thought

[@vytautasgaldikas7588]

Alex Kantor Sure that's how antiviruses work already. But this was an entirely new virus, hence the immune system was not trigerred.

[@biz4twobiz463]

Absolutely. Once a hacker has the source code they can do with it as they please. Similar programs exist...and they run the virus, malware, worm in a so called isolated Sandbox environment.

[@cougar231000]

that doesn't make any sense

[@jvigil2007]

So when the code "put the picture in front of the camera" what would the PLC show when an engineer tried increasing or decreasing the frequency of the centrifuges? If an engineer tried increasing it from 800 to 1200, would the PLC show that value while the code was still doing its mission?

[@William_sJazzLoft]

In the case of the Iranian technicians at Natanz, for the first payload the values displayed were within the normal parameters.

[@gromby783]

Whitfield Diffie at 5:52.

[@pyrrho314]

short version: they exploited the fact that they ran mission critical systems on microsoft operating systems. I assume they use duct tape to assemble the plants in place of bolts.

[@glepp]

they would of exploited any other OS, no OS is 100% failsafe.

[@ronaldbeck8689]

13:44 He explained NFTs in the simplest way 7-8 years before they were really a thing and like 9-10 before the boom.

[@theone3428]

NFT's are 1 of 1. He's talking about digitally signing software so that you know it's unmodified.

[@TheNelso54]

No he’s not lol

[@kvmairforce]

This thing is so advanced that it will probably take decades or more for the world to understand Stuxnet. This is so complex and advanced, I still can't believe this is possible.

[@EETechs]

Problem is, no PLC software is for Linux. The most used PLC's are either from Siemens or Allen-Bradley. Not even virtualizing Windows onto Linux would stop this virus.

[@ankitsuthar3776]

Great Explanation ! You definitely deserve better audiences:)

[@75Prelives]

Pretty amazing anyway you look at it....

[@MattAndersomm]

Both nouns epilogue and epilog are correct.

[@PapaCuppa]

Half the people in that room thought he was talking about the flu virus.

[@JosephTX89]

This is pretty cool. I don't understand why computer worms like this are treated as alien technology by the media when the espionage factor is much more exciting anyway.

[@tammyroyce8013]

And judging by what I can see and feel since I am clairvoyant I'm pretty much saying he's either a medics a doctor or nurse

[@AntiHolyChrist]

I ran around the east coast tryna escape while everyone was stuck to a screen. I was so scared.

[@akhTubed]

The audience is actually very impressive, critics in the comments have no idea. He’s got Whitfield Diffie in the front row… awkward moment there feeling the need to explain public key crypto.

[@SloeJuice]

Stupid camera man - showing the person talking, but not the slides.

[@OmmerSyssel]

Orange Juice Typical intellectuals? Ordinary issues seldom handled to ordinary standards, by products of elitarian circumstances ...?

[@ScottishAtheist]

Fascinating.

[@rr.studios]

Steve Jobs, Part time CEO of Apple, Parttime Stanford lecturer. RIP... you will be missed

[@Silhouette93]

Great video

[@kevinparsley6806]

not feeling so excited for my next roller coaster ride after this...

[@alberoDiSpazio]

14:13, I just won my 'Berries & Cream' on Ebay.

[@xEePiiCzZ]

The virus would make the interface believe that everything is running fine, when it secretly makes the centrifuges run at 2Hz or 1410Hz.. I'm not quite sure or it reacts on the interaction of people it just analyses the scheme and then simulates it.

[@tammyroyce8013]

All because if you take a regular Android phone that is a prepaid and you get it from the store you dissected you take out the little sticker with the barcode on it and underneath that you have that little stabbed blood

[@tammyroyce8013]

Okay there you're making a benchmark that is traveling

[@musashidanmcgrath]

Why can't all the imperative systems that drive centrifuges/etc just be 100% offline with no external ports and a properly-encrypted network?(retinal scans instead of a default/ridiculous password) If there is no way to introduce these tools to the system then surely they are safe from attack?

[@mfascino]

musashidanmcgrath the system was 100% offline.. with a USB port. even the most remote, offline system still needs to be updated somehow

[@renovatiovr]

@@mfascino that, or the system was offline with an internal closed network

[@egg-iu3fe]

the problem is that as long as there are spies, an offline system is susceptible to attack. Doesn't matter how much you try to secure it if one of your own trusted people is a double agent or being blackmailed or bribed by the CIA or Mossad. Iran arrested some spies after stuxnet happened, those spies were probably executed.

[@accentz123]

that's kinda awesome...i wish i could program and write code..

[@shudukahn555]

Get ready for Stuxnet 2

[@unclewaggy09]

Anyone know how they know it was named Stuxnet? Or is that just a name given out randomly? I'm not a computer guy.

[@Benjam901]

The original name given by VirusBlokAda was "Rootkit.Tmphider"; Symantec however called it "W32.Temphid", later changing to "W32.Stuxnet". Its current name is derived from a combination of some keywords in the software (".stub" and "mrxnet.sys")

[@ravirajgupta153]

Thanks Benjam901

[@licensedblockhead]

12:40 OH MY GOD

[@emperorkang]

then why is prologue spelled prologue?

[@William_sJazzLoft]

Engineering systems and automation technology compromised. Valve controllers for the gas centrifuge cascade are duped.

[@ParentBeater123]

While this is mostly true, Stuxnet used Windows as a vehicle to gain access to PLCs. If you replaced Windows with Linux it wouldn't have been able to spread and find it's way into the PLCs and deliver it's payload.

[@djcanaan1]

Then the virus would have been built to exploit Linux instead

[@ThePayola123]

One Giant Leap for Computer Viruses, One Teeny Tiny Step for Mankind.

[@Tej517]

Speaker is excited to teach but audience are like "how boring, keeping up with the Kardashians is better".

[@MattAndersomm]

Becouse again prologue and prolog are correct.

[@xsitescripttactnorris8503]

Awesome.

[@William_sJazzLoft]

Data files contain the command and control logic

[@Evanderj]

His audience must think he’s speaking a different language 😂

[@TristanMorrow]

>> There's actually word processors you CAN'T infect with viruses ...or are there?

[@xander7b]

For people who are actually interested, or want to be, search youtube for Adventures in analyzing Stuxnet [27C3]

[@tullegutt991]

I don't understand why NIcholas Cage is explaining this to old people, makes no sense. they obviously has no clue of what he's saying...

[@Max-zr7hr]

They said there was going to be pudding. Where is the pudding?

[@existenz55]

Imagine in BadBIOS is real too (about 10 times more complex then Stuxnet) and we just don't know what it dose at the moment.

[@existenz55]

@nine virus

[@gitesh987]

And this is why most tech aware countries are going old fashion way so such thing doesn't happen

[@Ishpeck]

Time to start using OpenBSD.

[@muneebbhat3928]

Foiled?

[@chvlumbee]

I had to come for the comments LOL,. When they pane to the viewing audience 😂😂😂, dam near lost my mind.

[@rathemis]

my fear is that some creepy guy is gonna modify this stuxnet to do something more nasty, not only to the iranian plants, but to everybody. that can become really bad...

[@thevivekmathema]

the grandpa just said Dooouggh

[@elev84u]

Choosing the right audience for this topic: You're doing it wrong

[@rmcgraw7943]

This is the pretty typical APT attack we see now.

[@A-Milkdromeda-Laniakea-Hominid]

Look at the guy at 5:18 and 14:50, conscious of being seen on camera. God I couldn't stand to be in national security. Too much paranoia, not worth it.

[@lamborginiish]

Start with Code Academy.

[@TristanMorrow]

good talk, m'kay ...but he reminds me of the school counselor from South Park, m'kay ...

[@the_god_killah]

is he teaching in a retirment home?

[@devopssimplified9055]

Whit Diffie @5:53

[@mlassz009]

14:10.... Looks like Steve Jobs popped in and is trying to hide is face

[@OEFarredondo]

Folks my bad, I let my dog use my computer and she wrote stuxnet. Italian greyhound mixes are shade AF

[@vrghiks]

Are these viruses catching?

[@kipropcollins4220]

the most important part was the epilog

[@simonmessenger7217]

Is he at a nursing home?

[@pyrrho314]

the real issue here is it would be just as easy to break into our power systems and screw them up... windows is a toy... unless you built your power station with duct tape to match, it's not appropriate mission critical software. There's actually word processors you CAN'T infect with viruses... wouldn't it make sense to have a secure facility use them? Isn't BG rich enough off his crap by now?

[@engineersalltheway]

Guy at 5:20 looks real sus.

[@ritvarsdortans]

ye, sure...

[@emperorkang]

you're missing my point. prologue is the opposite of epilogue. it doesnt make sense to call it epilog, if you dont spell prolog.

[@Misterkristo]

2012 end of the world all makes sense

[@neosapien247]

14:13 secretly came.

[@crowntimber1]

that old lady is like if i stare hard enough i will like like im not old as shit. also he said semen hehe

[@ingemarastrom4623]

Why is he talking to that audience?

[@nicholaspetrish8383]

Apparently you don’t recognize the cryptographic players in that audience.