Previous in Forum: How to Select a Power MOSFET   Next in Forum: GN 1215
Close
Close
Close
7 comments
Rate Comments: Nested
Power-User
Popular Science - Weaponology - New Member

Join Date: Jan 2006
Location: Fredericksburg, Virginia USA
Posts: 232
Good Answers: 1

Computer Worm Attacks Iranian Nuclear Sites

12/11/2010 11:36 AM

Last week I read an article on a Fox News site that talked about a computer worm that attacked Iranian nuclear research and processing facilities. The details in the story seemed quite fantastic. This program seemed to exhibit behaviors that could only have been of an intelligent nature by the description I read of what it was supposed to have done. Can these things be "driven" or somehow remotely controlled, or has someone actually developed something that can think for itself? Is this thing for real? I would include the link but I still haven't figured out how to cut/paste stuff into this forum.

Yes, I am all thumbs when it comes to computers, so shoot me.

__________________
See Bio for signature line........political correctness and insecure people are such a pain-in-the-ass.
Register to Reply
Interested in this topic? By joining CR4 you can "subscribe" to
this discussion and receive notification when new comments are added.

"Almost" Good Answers:

Check out these comments that don't yet have enough votes to be "official" good answers and, if you agree with them, vote them!
Guru

Join Date: Sep 2007
Location: Defreestville, NY
Posts: 1072
Good Answers: 87
#1

Re: Computer Worm Attacks Iranian Nuclear Sites

12/11/2010 9:17 PM

If you search CR4 for 'Stuxnet' there are many comments and links about the worm.

__________________
Charlie don't surf.
Register to Reply Score 1 for Good Answer
Commentator
Popular Science - Cosmology - New Member

Join Date: Oct 2010
Location: Los Algorrobos, Panama
Posts: 71
Good Answers: 2
#2

Re: Computer Worm Attacks Iranian Nuclear Sites

12/12/2010 7:28 AM

Better than Faux News: http://english.aljazeera.net/programmes/insidestory/2010/09/2010930141612899926.html

__________________
To an optimist the glass is half full, to a pessimist it is half empty, but the engineer knows that the glass is twice as large as it needs to be.
Register to Reply
Power-User

Join Date: Aug 2008
Location: West Virginia
Posts: 185
Good Answers: 12
#3

Re: Computer Worm Attacks Iranian Nuclear Sites

12/12/2010 10:26 AM

Yeah, your first mistake was using Fox news. There are quite a few other articles out there. The info I liked explained how one piece of the software would cause the controllers on the enrichment centrifuges to overspeed the drive motor and cause them to self destruct.

Register to Reply
Power-User
Engineering Fields - Petroleum Engineering - Rig Electrician United States - Member - the Oil Patch Engineering Fields - Power Engineering - Drives & Gen's Engineering Fields - Instrumentation Engineering - Drive Control Popular Science - Cosmology -

Join Date: Jan 2010
Location: Houston off/on-shore @ Oil Patch
Posts: 223
Good Answers: 2
#5
In reply to #3

Re: Computer Worm Attacks Iranian Nuclear Sites

12/12/2010 6:00 PM

not self destruct from the few reports comming out, here's again from Langner:

We have always said that Stuxnet can only be understood based on hard lab work. So it does not surprise us at all that when we sent our fellow researchers from Siemens back to their lab on November 11 in response to their meager "official Siemens communication" on Stuxnet, success was waiting right around the corner. Only eleven days later, they finally did discover the 417 attack code.

Quote from their official Stuxnet portal: When the CPU 417 and a DB 8061 that was already in the project are used, the malware is able to change the block during downloading. If the DB8061 is not already in the project, no action is required.

It is noteworthy that they point out DB 8061, which is the most peculiar data block of the 417 attack, since it is loaded dynamically by the rogue driver DLL, whereas the other data blocks are either statically loaded by the DLL (DB 8062, 8063), or dynamically created by rogue code on the controller (DB 8064..8070). As their first genuine research result that hadn't previously been published by us or by Symantec, Siemens lets us know that DB 8061 is part of the targeted project. Now with Siemens' Stuxnet experts back in business, we assume that they will soon tell us about any products they know about for the 417(FH) that would use DB 8061.

AGAIN what have the 'boots on the ground' seen outside of Iran? Someone who reads CR4 has seen 417 attack even if it didn't burn you, tell us

__________________
Why do they make manhole covers round? so they won't fall in [before asking "Who is John Galt?"]
Register to Reply
Power-User
Engineering Fields - Petroleum Engineering - Rig Electrician United States - Member - the Oil Patch Engineering Fields - Power Engineering - Drives & Gen's Engineering Fields - Instrumentation Engineering - Drive Control Popular Science - Cosmology -

Join Date: Jan 2010
Location: Houston off/on-shore @ Oil Patch
Posts: 223
Good Answers: 2
#4

Re: Computer Worm Attacks Iranian Nuclear Sites

12/12/2010 5:51 PM

It's so intelligent that it has killed two of the Iranian experts on removing it with car bombs. See http://www.langner.com/en/2010/11/29/life-as-a-stuxnet-expert-can-be-dangerous/

Hasn't ANYBODY seen this in their Siemens PLC's?? That car bomb wouldn't have been planted if Stuxnet wasn't still active in Iran.

Has anybody seen the Flyway teams? The DHS is surely removing it or we would see mor things blow up.

I have some good news and some bad news on yesterday's Senate's hearing about securing critical infrastructure in the age of Stuxnet. Good news first: The US Senate has grasped the magnitude of the Stuxnet problem. That's very promising, and there is no irony here. If I had reason to assume that our published research results on Stuxnet contributed only ten percent to the awareness that initiated the hearing, I would say it was worth the effort. More good news: Michael Assante was up to snuff. His best line: We're running out of time. Good job, Mike.

The bad news: They let Sean McGurk get away with saying nothing. It's not that I had a problem with Sean, it's solely about the message on Stuxnet he keeps repeating over and over again. He is telling about DHS' EFFORTS in dealing with Stuxnet, but he can't show RESULTS. Zero. Nada. Niente. Nothing. All these tremendous efforts, and no results to share. Why does nobody recognize this? Why do we have to listen to all this talk about his flyaway teams over and over again, without a single bit of hardcore information on Stuxnet that he can come up with?

__________________
Why do they make manhole covers round? so they won't fall in [before asking "Who is John Galt?"]
Register to Reply
Guru

Join Date: May 2010
Posts: 570
Good Answers: 55
#6

Re: Computer Worm Attacks Iranian Nuclear Sites

12/13/2010 11:36 AM

There is already a lot of info on Stuxnet here at CR4, which you can find by searching.

To get an idea of what people are talking about, here is the Wikipedia article on SCADA, the type of system that can be attacked by Stuxnet. Yes, these things can be "driven" or remotely controlled, in the same way that more common viruses can gain access to your financial data, or read and send your keystrokes over the net.

No, this is not something that can "think for itself". Yes, it is for real, although probably not "for real" as described by Fox "news." Fox tends to be not so much real news as entertainment aimed at the lower demographic segments: it is the TV equivalent of the tabloids.

__________________
Si hoc signum legere potes, operis boni in rebus Latinis alacribus et fructuosis potiri potes!
Register to Reply
Participant

Join Date: Dec 2010
Location: USA
Posts: 4
#7

Lead answer

12/16/2010 7:32 AM

Hi, this is a very bad thing for the computer expert of iran they didn't able to catch a worm coming in their sites ,may be they should think like getting programmers from the other country because they can't catch now , they can't catch them neither , never.

[url]http://good-times.webshots.com/photo/2980536300106767733UFefcU[url]

__________________
http://good-times.webshots.com/photo/2980536300106767733UFefcU
Register to Reply
Register to Reply 7 comments

"Almost" Good Answers:

Check out these comments that don't yet have enough votes to be "official" good answers and, if you agree with them, vote them!
Copy to Clipboard

Users who posted comments:

dbash (1); keirastone (1); kwcharlie (2); MoronicBumble (1); Rebuilt (1); stevem (1)

Previous in Forum: How to Select a Power MOSFET   Next in Forum: GN 1215

Advertisement