Stuxnet

ESKIMO

JJ_Egan wrote: »

Which nation would like to fix an Iranian reactor ???

America... America... Team America hmmm. 'Woneley, i'm so woneley (Kim Jon Il puppet quote!) Classic!

DatabaseError

in itself it's not much of a threat, as it potentially only affects a handful of systems globally, which should NOT be in any connected to a MS windows based machine (though there are lapses)

However, the fact that it involved 3(?) 0 day exploits, and is suspected to originate from a nation state does cause potential for concern, we know china has been known to grab web traffic, and that the usa has a 'internet kill switch', global interests do have a lot of control over 'our' internet.
The worry isn't that stuxnet exists, but what could come next? So many systems that we rely upon are connected to the internet..or to a machine that is, there is serious potential for mayhem.

..then again, I'm not losing any sleep over it.

ESKIMO

DatabaseError wrote: »

..then again, I'm not losing any sleep over it.

I share exactly the same point. 'Surely' - wise words... 'if' Stuxnet did pose a substantial threat all the media channels would be reporting on it non stop that the world is going to end etc.

The information coming to light is that it is currently in the hands of criminal gangs. - Their intent, malicious or othrwise is not clear.

It has been suggested that those who 'poses' Stuxnet don't actually know what to do with it or how to 'use it' other than to trade and barter with it as a currency.

Although, the growing concern is that if it could get into the hands of AQ then s**t really hits the fan with information coming to light about it having the capability to launch nukes - i somehow doubt.

It doesn't sound an 'American' thing to 'admit' to 'defeat' - as such.

I can't really imagine them or anyone else for that fact saying, "yup, we are definately up s**ts-creek. Hold onto your hats folks, as this smells like nothing you have ever experienced before!"

Information is still only coming to fruition. I will wait to see what new 'news' progresses from this.

JasX

Not the best survey leaving no room in between one 'the complete end of the world' choice and four 'don't know/no effect' options.

I'm predictiing for the average home user it'll be another virus 'bump' in the road. Big hitters in the past like SQL slammer caused a noticable nuisance at the time but didn't bring about the end of the world.

Currently yoou have little to wory about if you're not running a Siemens S7 automation system at home but the near future might see these criminal gangs snipping off the 'payload' that trashes siemens systems and replacing it with one that 'steals your bank login/installs malware/fake security programs' etc... I *believe* microsoft have now closed all the 0-day holes stuxnet uses (anyone?) so as long as you have up to date antivirus installed and your windows automatically updates security patches you will be covered just fine.

However there will always be the large contingent of computer simpletons who still don't take the above basic steps and will be hit in large numbers by whatever viruses come along... in which case stuxnet variants will be one of a number of problems they have.

kwikbreaks

DatabaseError

Mentioned today in el Reg


Stuxnet code leak to cause CYBER-APOCALYPSE NOW!

jayme1

DatabaseError wrote: »

Mentioned today in el Reg


Stuxnet code leak to cause CYBER-APOCALYPSE NOW!

I'm just so thankful that the UK uses it's own custom built software, and keep, say, its windows machines fully up-to-date using the latest IE for instance, and doesn't have foreign countries building both the hardware and the software where they could hide any number of backdoors in it.

Oh Wait :eek:

hubert_cumberdale

jayme1 wrote: »

its windows machines fully up-to-date using the latest IE for instance,

lol, that brilliant

uptomyeyeballs

The Stuxnet Worm targets specific industrial PLC hardware on a specific operating system (WinCC) with specific manufacturer's industrial kit attached (it has to be made by one of two manufacturers).

It is absolutely no threat to the home user whatsoever. Unless you run WinCC based SCADA systems, Siemens PLCs, Vacon/Feraro Paya Frequency Convertors and live in Iran.

DatabaseError

uptomyeyeballs wrote: »

It is absolutely no threat to the home user whatsoever. Unless you run WinCC based SCADA systems, Siemens PLCs, Vacon/Feraro Paya Frequency Convertors and live in Iran.

erm..I was worried for a second there...then I remember I have McAfee antivirus so I'm ok :beer: