u/jacobmillerin r/netsec • Recommends
Ralph Langner: Cracking Stuxnet, a 21st-century cyber weapon
0:00 / 0:00
Ralph Langner: Cracking Stuxnet, a 21st-century cyber weapon
TED
28M subscribers • 18 videos on Hallway
- Recommended by 3 people: 2 on Hacker News and 1 in engineering communities.
- Presented by Ralph Langner, security researcher
Intermediate. Assumes working knowledge.
322K views15 years ago3 recommendations
SecurityHistory and cultureWeb and application securityExploits and vulnerabilitiesReverse engineering
Ralph Langner explains how his team reverse-engineered the Stuxnet worm and discovered its target was an Iranian nuclear facility's industrial control systems.
ted.com When first discovered in 2010, the Stuxnet computer worm posed a baffling puzzle. Beyond its unusually high level of sophistication loomed a more troubling mystery: its purpose. Ralph Langner and team helped crack the code that revealed this digital warhead's final target -- and its covert origins. In a fascinating look inside cyber-forensics, he explains how. TEDTalks is a daily video podcast of the best talks and performances from the TED Conference, where the world's leading thinkers and doers give the talk of their lives in 18 minutes. Featured speakers have included Al Gore on climate change, Philippe Starck on design, Jill Bolte Taylor on observing her own stroke, Nicholas Negroponte on One Laptop per Child, Jane Goodall on chimpanzees, Bill Gates on malaria and mosquitoes, Pattie Maes on the "Sixth Sense" wearable tech, and "Lost" producer JJ Abrams on the allure of mystery. TED stands for Technology, Entertainment, Design, and TEDTalks cover these topics as well as science, business, development and the arts. Closed captions and translated subtitles in a variety of languages are now available on TED.com, at ted.com/translate.Why it's here
3 people recommend thisWhat people say. Highly recommended as a fascinating and accessible breakdown of how the Stuxnet cyber weapon was analyzed.
phluxon Hacker News • Recommends
On “Stuxnet Virus Weapon Now Being Sold On The Black Market”
Watch these in this order: link - brief overview great animation link to this video - ted talk on stux link detailed analysis of stuxnet the last one is long and Bruce appears to be an arrogant prick, but it is clear - cyber war has been here for a while.
phluxon Hacker News • Recommends
On “LulzSec releases trove of AZ law enforcement documents”
PSY-OP MOTHERFUCKER, CAN YOU HACK IT?! This is NOT script kiddies going at it, this is bio-stux.... See the following: Watch these in this order: link - brief overview great animation link to this video - ted talk on stux link . detailed analysis of stuxnet the last one is long and Bruce appears to be an arrogant prick, but it is clear - cyber war has been here for a while. --- As I have mentioned, cyber war is here - and the legislation is lacking in its awareness - but becuase we have incompetant douches in charge of tech legislation, we will have physical war used as a metaphor to cyber warfare and thus have draconian influences from physical imprisonment being applied to digital situations. Utt…
vecinuon Hacker News • Recommends
On “Flame: Massive cyber-attack discovered, researchers say”
I assume we are going to see a complicated and interesting dissection a la Stuxnet? The Stuxnet TED talk 0 was really interesting, I ended up giving a talk to my department at work afterwards. 0 - link to this video
Terry_Rollon Hacker News • Mentions
On “Microsoft Windows RCE Vulnerability Gives an Attacker Complete Control”
One other point not mentioned, is copying 4GiB of data across a network does take a bit of time, over the internet even longer. This link link is to a 2.9GB file so you can see how long it will take to download 4GiB over your internet connection. There is also the point on ASLR making life difficult, well if ASLR is switched on, there are a number of other options which may be also switched on in that part of the system, eg Control Flow Guard, DEP (been around for a couple of decades now), forced ASLR, bottoms up ASLR, High Entropy (more useful if you have shed loads of ram installed than minimum amounts), SEHOP ( link ) and Validate Heap integrity which are all on by default now a days…
_kbh_on Hacker News • Mentions
On “Microsoft Windows RCE Vulnerability Gives an Attacker Complete Control”
> Its worth reminding ourselves about Stuxnet, they still havent caught those people, but lots of assumptions exist. link link link to this video I thought it was widely known that stuxnet is very likely if not certainly a join NSA and Israel operation.