Slashdot Mirror


Computer Virus Aboard the ISS

chrb writes "BBC News is reporting that laptops taken to the International Space Station by NASA astronauts are infected with the Gammima.AG worm. The laptops have no net connection; officials suspect the worm may have been transferred via a USB flash drive owned by an astronaut. NASA have said this isn't the first time computer viruses had travelled into space."

59 of 290 comments (clear)

  1. Solid proof!!!! by Lumpy · · Score: 2, Insightful

    That they need IT staff on the ISS.

    Even astronauts are not smart enough to maintain and repair their computers.

    Honestly though, Why the hell dont the laptops have anti virus software? if they are going to run a OS that is targeted by the bulk of viruses out there then it's dumb to send it up without AV software installed.

    There is no reason for a email/nutritional PC to not run AV.

    --
    Do not look at laser with remaining good eye.
    1. Re:Solid proof!!!! by Tridus · · Score: 4, Insightful

      Wow, someone who actually believes AV software stops viruses effectively?

      --
      -- "So they told me that using the download page to download something was not something they anticipated." - Bill Gates
    2. Re:Solid proof!!!! by totally_mad · · Score: 5, Funny

      You don't really understand. There is nothing they could have done to prevent the worm. The astronaut was installing Outlook which asked them to "close all software like antivirus and firewall which may interfere with the installation". The rest is history...

    3. Re:Solid proof!!!! by rktechhead · · Score: 4, Informative
      One should expect this kind of thing, being intelligent doesn't automatically mean you are proficient with computers. Perhaps NASA should give their personnel a quick refresher on computer security.

      Alas, while AV doesn't stop everything it is a lot better than not having it at all. A good AV scanner probably could have prevented this. Which again is why they should be giving them that little bit of training if they aren't already.

    4. Re:Solid proof!!!! by TheRaven64 · · Score: 4, Insightful

      Antivirus software is typically only effective if regularly updated. In machines that aren't networked, getting these updates is very tricky.

      --
      I am TheRaven on Soylent News
    5. Re:Solid proof!!!! by ByOhTek · · Score: 3, Funny

      So much for extrans.

      I _FAIL_

      --
      Self proclaimed typo king, and inventor of the bear destroying coffee table (patent not pending).
    6. Re:Solid proof!!!! by El_Muerte_TDS · · Score: 4, Funny

      Honestly though, Why the hell dont the laptops have Minix?

      Because Minix doesn't support text formatting.

    7. Re:Solid proof!!!! by Thelasko · · Score: 5, Funny

      Honestly though, Why the hell dont the laptops have anti virus software? if they are going to run a OS that is targeted by the bulk of viruses out there then it's dumb to send it up without AV software installed.

      It looks like Mark Shuttleworth might have to make another trip up there to drop off some Ubuntu disks.

      --
      One of our competitors trademarked the term "hypothesis". From now on, we will call them "boneheaded ideas".
    8. Re:Solid proof!!!! by Lumpy · · Score: 2, Informative

      They stop really old Viruses like that one effectively, even CLamAV detects and cleans that one.

      so yeah, AV would have prevented this one, it would have been effective.

      --
      Do not look at laser with remaining good eye.
    9. Re:Solid proof!!!! by muffen · · Score: 2, Funny

      That they need IT staff on the ISS.

      Even astronauts are not smart enough to maintain and repair their computers.

      Honestly though, Why the hell dont the laptops have anti virus software? if they are going to run a OS that is targeted by the bulk of viruses out there then it's dumb to send it up without AV software installed.

      There is no reason for a email/nutritional PC to not run AV.

      AV on astronaut laptops, are you crazy?
      What we need to do is send this virus to aliens!

      Didn't you learn _anything_ from Independece Day?

    10. Re:Solid proof!!!! by Briden · · Score: 2, Informative

      "In space, without Internet access, it's pretty clear that the AV software will not be kept up to date." .. i think that's an incorrect assumption, normally, they do have internet connections, so, it could easily be kept up to date. until of course, the virus brought down their internet connection, which is no different than what could happen here.

    11. Re:Solid proof!!!! by alexborges · · Score: 3, Informative

      EVEN clamav?

      Man, clamav is better than most.

      --
      NO SIG
    12. Re:Solid proof!!!! by alexborges · · Score: 2, Insightful

      Irrelevant.

      THey shouldnt be using windows, precisely because of this risk.

      And thats that.

      --
      NO SIG
    13. Re:Solid proof!!!! by MrNaz · · Score: 5, Funny

      The reason NASA didn't bother with AV is because there's no pressure on their IT department. In a normal office, the IT department usually gets screamed at when computers don't work. But in space, nobody can hear you scream.

      --
      I hate printers.
    14. Re:Solid proof!!!! by nospam007 · · Score: 2, Funny

      It was a pirated copy of some stuff that installed the virus.

      At least we now may have real 'Space Pirates'.

    15. Re:Solid proof!!!! by geekoid · · Score: 2, Insightful

      Oh, bullshit.
      Our IT dept. his head and shoulders any IT I have dealt with when I was in the private sector.

      No company is going to make space probes just for science. NASA is needed for that kind of exploration.

      That kind of exploration bring many benefits to you and I, benefits that would be less likely to get if a corporation were to to space exploration at this point.

      I am hopeful that more and more basic launches move to the private sector, and NASA become more focused on the edge of exploration.

      --
      The Kruger Dunning explains most post on /. http://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect
    16. Re:Solid proof!!!! by aetherworld · · Score: 2, Insightful

      They do have Norton Antivirus installed.

      No joke. However, this tells us what operating system they run. Which is a joke if you ask me...

    17. Re:Solid proof!!!! by toolie · · Score: 2, Informative

      But, with no Internet connection, the AV software doesn't really need to be kept up to date.

      Not exactly true. We are mandated to keep AV software updated (I think weekly) on our machines that aren't hooked to any network at all - internal or external. This isn't mandated by the IT department or Security or anything, but the DoD. Of course, these are the same rules that require three (or was it six?) feet of space between machines (even air conditioning units) from every other.

      They should just toss a CD with the latest definition updates for AV software of choice in with the regular supplies. Problem semi-solved.

      --
      -- toolie
    18. Re:Solid proof!!!! by Your.Master · · Score: 3, Insightful

      Soviet-style public schools. That's great.
      Even your radical freestateproject.org link wants the government to protect our rights. I presume this is done via a police and/or court system.

      If our rights are so great, why is it that the only way you can get funding is to threaten to throw my ass in jail if I don't feel like paying for it?!?!

      First, I have to interject here: are you planning to go into a barter system? Or are you hoping that everybody in free association will select a common medium of exchange?

      The fact is that capitalism selects for profitability (obviously), and profitability is not necessarily the same thing as greatness. It's an optimization heuristic. It is not a truly optimal algorithm. NASA, and public schools, are attempts to tweak our heuristics to be more optimal. Sometimes our tweaks fail. That does not mean that all tweaks are inherently doomed to fail. Nor does it mean that we should abandon the basic heuristic of capitalism.

      If, philosophically, you have a problem with tax-funded anything, then that's okay and you can explain that problem. But to claim that a tax-funded thing is bad because the market is necessarily better, you must first show that the market creates truly optimal conditions at all times in all places.

    19. Re:Solid proof!!!! by jlarocco · · Score: 2, Insightful

      If ANYTHING TAX FUNDED LIKE PUBLIC SCHOOL is so great, why is it that the only way you can get funding is to threaten to throw my ass in jail if I don't feel like paying for it?!?!

      See how that works?

      Yes, I do. And it's a good question.

      If public schools are so great, why can't they compete against private schools in a voucher system? If the government run schools are so much better, they'd beat out the privately run schools and we'd end up right back where we are now, right?

      Microsoft has a "monopoly" when there are half a dozen alternatives and the people here are outraged. The government has a forced monopoly on something 100x more important, and people act like it's the best thing since sliced bread. How's that work?

      The government can't even run a restaurant without offering poor quality and losing millions of dollars. Why in god's name would you want to trust them with anything important?

    20. Re:Solid proof!!!! by isorox · · Score: 2, Informative

      EVEN clamav?

      Man, clamav is better than most.

      How can I persuade my info security department of that given things like http://en.wikipedia.org/wiki/ClamAV#Comparisons ?

  2. Even In Space by Skeetskeetskeet · · Score: 3, Funny

    Microsoft can't hear you scream.

    --
    Yeah, my karma sucks....but so do the mods.
  3. Life will find a way. by IndustrialComplex · · Score: 2, Interesting

    And to think that I hated that line. Unfortunately for the life from a meteorite theory, computer viruses are a bit more resiliant to the extremes of space.

    --
    Out of modpoints but really liked a post? 1BDkF6TtmmeZ3yqXbz9yhdYVqRYnwFoXDj
  4. No antivirus? by totally_mad · · Score: 2, Interesting

    To top it all, NASA says in the same breath that they are investigating how the worm got abort and that the austronauts' laptops don't have any anti-virus software... Go figure!

    1. Re:No antivirus? by BabyDave · · Score: 5, Funny
      >p>To be fair, it's because they know the real reason that the Mir space station came down ...

      "Norton Antivirus has detected that the following file is infected with a virus:

      gyrocontrol.dll

      The infected file has been deleted

  5. One has to ask by toby · · Score: 5, Insightful

    What *Windows* is doing in space in the first place.

    --
    you had me at #!
    1. Re:One has to ask by Gori · · Score: 4, Funny

      My thoughts exactly. There is no reboot after you hit the Blue Planet Of Death...

      *ducks*

      --
      Complexity is a measure of our ignorance...
    2. Re:One has to ask by halfEvilTech · · Score: 2, Funny

      What *Windows* is doing in space in the first place.

      because it is already considered a large waste of 'space'

    3. Re:One has to ask by mlush · · Score: 5, Funny

      What *Windows* is doing in space in the first place.

      I've always thought that opening Windows on a space ship is a bad thing

    4. Re:One has to ask by Anonymous Coward · · Score: 4, Funny

      I've always thought that opening Windows on a space ship is a bad thing

      Yes, the results would prove conclusively that Windows quite literally suck(s).

    5. Re:One has to ask by dpilot · · Score: 3, Informative

      Isn't this an FAQ?

      These laptops are convenience machines, for writing reports, spreadsheets, maybe even a little gaming.
      There is no connection between the laptops and the embedded computers that actually run the ISS systems, and those computers do NOT run Windows. For that matter, they probably don't run Linux, but more likely some 10 or 15 year old Unix variation that was already well proven when the ISS bids went out.
      The laptops may connect to experiments - that I don't know.

      Since they are convenience machines, with no planned networking, and since when they were put out for bid, Windows was the most convenient OS to use, that's what they have. That's also not to say that Linux laptop may not make it up there, some time.

      Don't pretend that there's any sort of IT architecture on the ISS for anything but the base plan. Everything is spec and bid.

      I would hope that they have image CDs up there, and not just for virus removal. I can see wanting to reimage some of the laptops for each new ISS crew, and some for each new shuttle visit. I wouldn't want to keep "history" on any of them - not without backup.

      --
      The living have better things to do than to continue hating the dead.
  6. I'd be willing to wager by RisingSon · · Score: 4, Funny

    that Captain Kirk picked up something nasty from those green bitches. Damn space viruses.

    1. Re:I'd be willing to wager by BPPG · · Score: 2, Funny

      Damn borg chicks.

      --
      What's the value of information that you don't know?
  7. NASA needs Linux by MrSmith0011000100110 · · Score: 5, Insightful

    This is even further proof that NASA(as well as most every other major organization) needs to move away from the virus laden, insecure, corporate blunder we call Microsoft. Sure Exchange is a great mail system but its still just an iteration of a wheel that was created long before it. Were a giant like NASA or Boeing or Lockheed Martin or the US Govt itself to step away from the Microsoft Corporation, we'd start to see whatever the new adoptee was (preferably Linux) take some serious light and hopefully outshine the Gates machine.

    1. Re:NASA needs Linux by name*censored* · · Score: 3, Insightful

      This isn't necessarily a problem with Microsoft/Windows (although they certainly could have had a better security system), it's a problem with monoculture. Each vulnerability discovered opens up mind-bogglingly large amounts of computers to hacking, so all of the black hats are focusing their efforts on one small goal (making at least one of them succeed very quickly). This also means that exploits relying on uncommon settings (ones that rely on the target having say, two separate unrelated applications installed) are researched, where they might not have been worth the effort otherwise.

      Although you have a point about big companies stepping away from Microsoft. Linux is open source, no-architecture-lock-in, and comes with so many different distros with so many different default settings, that the monoculture problem would be replaced with many-more-but-easier-to-manageable problems (think "Asteroids"). The other advantage that a polyculture OS world would offer is halting the SPREAD of the virii - if an exploit relies on someone to have XYZ system/configuration, it wouldn't necessarily be able to spread through the "fire-breaks" of ABC or DEF systems/configurations (and since most home computers nowadays are Microsoft's XYZ systems/configurations, there's no "fire breaks").

      --
      Commodore64_love: I don't comprehend people who're so frightened of death that they'll bankrupt themselves to stay alive
  8. Jeff Goldblum planned it that way by Anonymous Coward · · Score: 2, Funny

    That's what the laptop virus is there for - you can't be too careful.

  9. Geez... by VE3OGG · · Score: 5, Funny

    Network security really isn't that hard! It isn't like it's rocket scie... oh... nevermind...

  10. This sounds like a great movie plot... by Steeltalon · · Score: 3, Funny

    Will there be an Andromeda Strain of this Virus?

    --
    Regards, Ian
  11. Re:USB drive viruses by Anonymous Coward · · Score: 2, Insightful

    Simply disable the autorun service for USBs. That will make your computer safe from yet another of the many, many moronic ideas of Windows developers.

    Also, computer viruses like those cannot be detected normally under Windows XP, but on Windows 98/Millenium (which don't have autorun for USB sticks) they appear in their full glory. AND they will screw you as soon as you auto-open one. Then you'll need to remove them from your hard disk (and of course, the virus files cannot be detected normally under Windows XP)

  12. Nice one to get by jayhawk88 · · Score: 5, Informative

    From Symantec's site:

    It then attempts to steal sensitive information for the following online games:

            * ZhengTu
            * Wanmi Shijie or Perfect World
            * Dekaron Siwan Mojie
            * HuangYi Online
            * Rexue Jianghu
            * ROHAN
            * Seal Online
            * Maple Story
            * R2 (Reign of Revolution)
            * Talesweaver

    Oh noes, now how will the astronauts be able to play their Japanese MMO's?

    1. Re:Nice one to get by Anonymous Coward · · Score: 3, Informative

      Those are all Chinese/Korean MMOs. Learn2geography.

  13. No internet?? by Apoorv+Khatreja · · Score: 4, Funny

    Q. Where do these NASA guys get their pr0n from?

    A. Oh yeah.. the USB drive.

    --
    RutSum.com
  14. Re:USB drive viruses by itsthebin · · Score: 2, Informative

    start --> run --> gpedit.msc

    admin templates --> system --> turn off autoplay ... enable

    though if you doubleclick on the drive letter in "my computer" you will run the autorun.inf on the drive - so untrusted drives , explore first.

    --
    ...I obey the laws of physics....
  15. Re:digital genocide by Chineseyes · · Score: 4, Insightful

    If they're not more careful, we might find someday intelligent artificial life out there... and kill it.

    Yes, because intelligent artificial lifeforms will definitely be running windows Vista on an x86 architecture.

    --
    I think the invisible hand of the market has its middle finger extended

    --A wise old fart named SC0RN
  16. Right... by Moraelin · · Score: 4, Informative

    So, on some computers which (A) have been there for years, and (B) have no network connection over which to download virus signature updates, somehow miraculously that AV software would be up to date and able to recognize the newest trojans. I don't know what AV software that is, but I want it too ;)

    Or, I know, let's send Mordac up there with each Shuttle or rocket trip, to install those updates.

    Oh yeah, and you so want to be up there on your own, when the retarded AV software after a buggy update decides one or more of the following:

    - some critical Windows file looks suspicious and deletes it. It happened more than once IRL.

    - some piece of binary data transmitted by or to your computer looks suspiciously like an obscure, outdated SQL-Server exploit, and shuts the program down and cuts off the network connection. I can personally testify that it happened to me in WoW, never mind that it wasn't on the right port, I had no version of SQL-Server installed, and it was on a connection to WoW that was on for 2 hours now and thus unlikely to be what a virus does. Or see the infamous "STARTLOGGER"/"STOPLOGGER" idiocy that made it possible for a while to disconnect anyone from IRC (and God knows what else) if they have Norton AV installed. Yeah, you so want that on a space station's computers.

    - introduces a bigger vulnerability of its own than Windows has. At least one RL mass-pwnage, and of the format-your-hdd sort at that, happened over a buffer overflow vulnerability in IIRC McAffee's firewall. Or if you look in the history of Norton's patch notes, a _lot_ of them were patching old buffer overflow vulnerabilities in their AV software.

    - suddenly decides that an otherwise legitimate piece of software is too dangerous, and just deletes it. It happened to me with one AV which decided that IRC is too dangerous a place and just removed my mIRC executable. Not because of some malicious code, or even vulnerability, in that version of mIRC, but just because apparently they considered it dangerous anyway. You so want to be up on a space station when such a piece of crap decides that your, say, telnet is too dangerous and must be stopped.

    - loads itself in memory twice and slows everything down to a crawl. Happened to me, with an older version of McAffee's AV. Oh, and trying to stop or uninstall it, only stopped one of the copies.

    - goes paranoid about protecting the user's "privacy", and prevents legitimate logins. Again, McAffee did that for me. Half the sites were so confused by whatever it did, that they simultaneously thought I'm logged in _and_ not logged in. I was starting to develop a deep empathy for Schroedinger's cat. You surely want that kind of thing randomly happening when you're trying to log into some more important thing up there.

    Heh ;)

    --
    A polar bear is a cartesian bear after a coordinate transform.
    1. Re:Right... by Jerf · · Score: 2, Insightful

      He might be IT for some company mandating usage.

      I'm in a nearly pure-Linux environment and I've indirectly encountered a fair portion of that list either in my family, or with releasing a Windows client for our software that just happens to trip anti-virus software for no reason we could ever figure out.

      AV software is so crappy it will reach out to screw you hard.

  17. Re:Sure there is. by TheP4st · · Score: 3, Insightful

    How about the minor detail that the Austronauts can bring USB sticks with them that have not been thoroughly checked for malware. While being an isolated environment it obviously isn't protected from security challenged austronauts.

    --
    "I have downloaded hundreds and hundreds of records, why would I care if somebody downloads ours?" Robin Pecknold
  18. If i know my star trek... by Trent+Hawkins · · Score: 4, Funny

    The virus is actually an alien computer system attempting to interface with the station's computer systems.
    Kirk: Spock __ Can __ you translate __ their message? Spock: Yes Captain. The message is, "Do you wish to enlarge your penis?" Kirk: Make it so...

    1. Re:If i know my star trek... by Hatta · · Score: 3, Interesting

      If you knew your Star Trek, you'd know that "Make it so" was Picard's catch phrase, not Kirks.

      --
      Give me Classic Slashdot or give me death!
  19. the laptops have no net connection .. by rs232 · · Score: 4, Insightful

    "The laptops have no net connection .."

    So, how do they send/receive email ..

    "The laptops infected with the virus were used to run nutritional programs and let the astronauts periodically send e-mail back to Earth"

    So, they do have a net connection ..

    "The laptops carried by astronauts reportedly do not have any anti-virus software on them to prevent infection"

    So how did they detect the 'infection' by the Gammima.AG worm ..

    "The ISS has no direct net connection"

    How do the laptops send/recieve email .. speculation by a slashdot reader don't count ..

    --

    "We are having a hard time understanding the how and why, but everything is working", Commander Bill Sheperd Feb 2001

    --
    davecb5620@gmail.com
    1. Re:the laptops have no net connection .. by LordEd · · Score: 3, Insightful

      I think the summary is incorrect. From TFA:

      The ISS has no direct net connection and all data traffic travelling from the ground to the spacecraft is scanned before being transmitted.

      Having no network connection and no direct net connection are different things. I suspect it means that the ISS has some form of network connection to NASA's internal network, but does not have any access to the Internet.

  20. Re:Space Virus by Zoxed · · Score: 2, Funny

    > I wonder what virus was actually the first to make it to space.

    Agent Smith would say Yuri Gagarin.

  21. Re:Computer Virus .. ? by value_added · · Score: 2, Funny

    Come on slashdot, don't be twee, what Operating System does this 'computer virus' need to run on .. Systems Affected: Windows 2000, Windows 95, Windows 98, Windows Me, Windows NT, Windows Server 2003, Windows XP ...

    You're being difficult. Anyone can see this is a cross-platform virus.

  22. Obligatory XKCD Reference... by Temujin_12 · · Score: 3, Funny
    --
    Faith is a willingness to accept something w/o complete proof and to act on it. Reason allows you to correct that faith.
  23. Overheard on ISS by mikebelrose · · Score: 2, Funny

    That's one small step for a virus, one giant leap for viruskind.

  24. Re:Dave? by Tablizer · · Score: 2, Funny

    "Dave, send 40 grand to the prince in Nigeria if you want me to open the pod doors, Dave."

  25. bragging rights by v1 · · Score: 3, Funny

    will definitely go to the first bot herder that manages to get a node on the ISS.

    --
    I work for the Department of Redundancy Department.
  26. You're strawmanning by boombaard · · Score: 2, Informative

    "ISS" doesn't use windows at all.. Most if not all of the actual hardware seem to be running on different versions of linux (mind you, quite a bit of the hardware is from around the Y2K or before, so you'll see p233s with 64mb ram running things).

    The only things infected were a couple of laptops running "nutritional programs", (whatever the hell those are).. Even then, all ISSEarth communication goes through fairly tough screening, and is not directly linked to the 'net, so it's not as if planting trojans on astronaut's laptops is very useful, or challenging (seeing how the laptops weren't running AV Software, and are far from mission critical equipment).

    anyway, see this possibly partial, old entry on what some parts of ISS are run on.

  27. Re:Timothy apparently. by willyhill · · Score: 2, Insightful

    Most Slashdot editors have happily replaced words in my stories.

    The "M$ Windoze" prose usually needs to be scrubbed out. Otherwise people would think Slashdot is run by teenagers on Prozac.

    --
    The twitter monologues. Click on my homepage and be amazed.