Slashdot Mirror
Stuxnet Was Designed To Subtly Interfere With Uranium Enrichment
ceswiedler writes "Wired is reporting that the Stuxnet worm was apparently designed to subtly interfere with uranium enrichment by periodically speeding or slowing specific frequency converter drives spinning between 807Hz and 1210Hz. The goal was not to cause a major malfunction (which would be quickly noticed), but rather to degrade the quality of the enriched uranium to the point where much of it wouldn't be useful in atomic weapons. Statistics from 2009 show that the number of enriched centrifuges operational in Iran mysteriously declined from about 4,700 to about 3,900 at around the time the worm was spreading in Iran."
..is that you leave one hell of a forensic trail, and so lose the inevitable propaganda war that follows your activities....
Having said that, I still welcome our variable but rapidly spinning overlords...
There are only two nations with the resources, will, and motive to attack Iran's nuclear ambitions in this way: America and Israel.
It figures that hegemony would lead either state to such an antagonistic stance.
While I agree that they are teh most likely candidates, I think Russia and China would be quite capable of doing this too if they turned their mind to it. Probably the UK, France, Gremany and maybe India. All have both nuclear and computer technology
It's equally likely neither Russia nor China would be very happy to see a nuclear Iran, but not want to be visibly seen discouraging them on the international stage. Stuxnet, lets either of them slow Iran's nuclear program, test a new concept of warfare, and leave the US and Israel holding the bad as "most likely." For them it's a win-win-win. Beyond that, intelligence orgainizations in the West now have a small taste of what someone else can do. It's going to keep the West in knots for a few years, hardening against "the last threat," while they've got the next threat now, and are working on the one beyond that.
The living have better things to do than to continue hating the dead.
I would not rule out Russia or China. Both have no interest in a strong Iran but every interest in an Iran that appears strong, since this ties and diverts US and Israeli attention and resources. It also sets a "benchmark" of aggression; as long as esp. China is less of a threat that Iran it can get away with quite a lot, barely noticed. A perceived Iranian nuclear threat can then also serve as justification for building missile defense systems and implementing other military measures that would previously have set off tensions with the Western nuclear powers.
A simple case of cui bono?.
Ugh.. This assumes that
I am just at a loss.. It really is like each response after the next is competing to think of a more convoluted, absurd way that someone you don't suspect could be involved in it.
I fully expect to scroll down and see some justification for why it's internal industrial sabotage of one Siemens subdivision versus another, or Iran launching it against themselves to get international sympathy.
// MD_Update(&m,buf,j);
You don't seem to be getting the point dude. i don't care if the things were running Win9X the point is there is supposed to be an AIRGAP which the Iranians didn't bother with. It could have just as easily been an old Linux that hadn't been patched in forever (because the levels of paperwork to approve patches on those kinds of machines I'm sure is immense) or an old System 9 Mac, it don't matter because again it is supposed to be AIRGAPPED.
An airgap means that there is NO net access and ANY device that is supposed to be brought from the unsafe side to the safe side needs to be treated as hostile and go through several levels of screening if allowed at all. Now from what I understand these machines have online activation (dumb) and have default passwords that can NOT be changed (really dumb) and then on top of that the Iranians didn't bother to securely lock down this attack vector nor get rid of even basic weaknesses like USB ports (super dumb) so trying to blame this clusterfuck of errors on ANY OS when the security team wasn't doing their job is just a waste of breath.
Hell you could put an unpatched XP RTM as the controller and not have a SINGLE problem if proper airgap procedures are in place. But saying "If they only used X!" with whatever OS, be it real time or off the shelf, ignores the fact this was a highly targeted attack. If they would have used a RTOS I'm sure there would have been attack code written for it because the Iranians simply weren't following good security practices.
ACs don't waste your time replying, your posts are never seen by me.
The key here is knowledge. The knowledge to write Stuxnet is extremely hard to get (the holes in operating systems, the ability to jump from Windows to SCADA systems, knowing what speed the uranium was spinning), but this may not be impossible for someone who has a lot of connections, perhaps someone whose family has nuclear process engineers.
There are a lot of people and organizations who don't like either Iran or Israel, and who would happily eat popcorn as both countries went to war with each other. It could be a guy in someone's basement who gets amusement from it the same way someone gets amusement from cracking root and rm-ing / on a university system.