Slashdot Mirror
Was Russia Behind Stuxnet?
An anonymous reader writes "Despite the U.S. and Israel being widely assumed to be responsible for Stuxnet, Russia is the more likely culprit, says U.S. Air Force cyber analyst. The nuclear gangsterism of the past 20 years gives it plenty of motive. Quoting: 'So what better way to maintain Russian interests, and innocence, than to plant a worm with digital U.S.-Israeli fingerprints? After all, Russian scientists and engineers are familiar with the cascading centrifuges whose numbers and configuration – and Siemen’s SCADA PLC controller schematics – they have full access to by virtue of designing the plants. ... the observers of the virus could alert the Iranians before full nuclear catastrophe struck. The Belarusian computer security experts who 'discovered' the code seemingly played that role well. They didn't seem too preoccupied with reverse engineering the malicious code to see what it was designed to do.'"
Let's all trust the U.S. propaganda machine. It was the Russians.
Centrifuges can't cause a catastrophe, other than of the "oh shit my centrifuge just came apart and shredded my lab" kind. There is not a nuclear chain reaction to go out of control here.
My amazing wife - Artist, Author, Philosopher - Laurie M
That's the only logical explanation.
Well, the centrifuge itself doesnt. But if it somehow infects a critical PLC, like say the one that controls reactor rods, or ventilation, or whatever.
Point being, something other than centrifuges could get infected, and that something could be bad.
Beyond the obvious fact that we will never know for sure who actually created it, it seems pretty naive to think a US 'cyber analyst' would say or even think anything different. After all Israel is a close US ally so it isn't like they would be interested in "telling the truth". It's like the boy who punches the other boy behind the teacher's back, of course he is not going to rat itself.
So how is this a credible source? Maybe if it came from a team of international security researchers with evidence or something I would deem it a valuable piece of analysis.
I kinda see this "research" as the ones conducted by Microsoft to evaluate IE, or Google to do so with Chrome and, oh surprise, they always come ahead. More like a political thing to say than any actual useful information or analysis being brought to light.
Slashdot. Unreadable news to annoy nerds. - wonkey_monkey
And it's unlikely the government could be bothered with this elaborate conspiracy, the modus operandi seems to be to take Iranian money and just never finish the projects since off the record Russia doesn't really like Iran anymore than anybody else does. Probably what really happened is that USA or Israel tracked down some Russians working on the project and gave them some giant piles of money in order to do plant some virus they'd made. After this went through a lot of Russian scientists got scared because Iran was interrogating everyone to try and find out who was responsible.
Having said that a lot of people think Iran wont nuke Israel because that'd kill arabs too, or that they're not insane or that USA/Russia has nukes too so it's no different. The main difference is someone like Putin is primarily interested in being a crime boss, he has no inherent desire to wipe some places he doesn't like such as Washington DC off the map. Iran on the other hand does when not slaughtering their own people does foreign policy things that don't really make sense like bombing some Jews in Argentina which had no practical benefit for Iran. They're rather juvenile as can be seen by the way they make their cute little American flag with skulls instead of stars last week. I think it's more likely they'd try to detonate a bomb through the Lebanese border to make things look more ambiguous than launch a traceable missile from Tehran. Yes that'd kill a lot of muslims too, but so did their chaining soldiers together and forcing them to march into gas attacks strategies during the war with Iraq.
No.
'We are trying to prove ourselves wrong as quickly as possible, because only in that way can we find progress.' RPF
its entirely possible to run an entire nuclear power plant from the control rod insertion to button that opens the front gate off a single Siemens PLC, e.g. their S7-400 with a big CPU. off the CPU comes Profibus which can go directly to input sensors, pnumatic valves, HMIs. The profibus is quite a safe thing, becasue it is just RS485 underneath. The new thing that siemens is touting is profiNET, which as the name implies is just the profibus protocol over ethernet. with control systems running off ethernet is fine, but siemens also do DIN mount 100mb/s ethernet switches where anyone can plug a laptop in and stop/start/upload more code to the entire network with their prodave application.
all i needed to see was "An anonymous reader writes:" and the-diplomat.com, this is blatant propaganda -100 score It has no newsworthy merit is inaccurate in many ways as has already been pointed out by others (centrifuge's causing meltdown???) i know america is pissed about getting caught red handed with this, and also about the missile shield debacle http://www.reuters.com/article/2011/11/24/us-russia-medvedev-missiledefence-idUSTRE7AN1NE20111124 that's currently ongoing but how is aggravating Russia going to help in either matter?
Their scientists are under a lot of pressure from the government Mullahs to finally get that bomb finished. Faced with insurmountable technical problems, the scientists decided to make it look like their project was sabotaged by their enemies: Israel and the US. So they wrote a virus and infected themselves with it.
So now their scientists have some more time, and the Mullahs are happy, because they can play the thing up with their own people and the international theater.
Ditto on that US drone thingie.
If you don't like that one, I'll half-bake another wacko conspiracy theory the next time this story pops up again.
Maybe I could make the "27 Club" responsible . . . ? Robert Johnson, Brian Jones, Jimi Hendrix, Janis Joplin, Jim Morrison, Kurt Cobain and Amy Winehouse are not really dead, but are writing viruses on Marlon Brando's island near Tahiti . . .
Schroedinger's Brexit: The UK is both in and out of the EU at the same time!
I don't know. This seemed like a pretty specifically targeted piece of hardware.
Dumbing it down a whole bunch here, but say that the virus modifies the CENTRIFUGE_MAX_SPEED variable from X to X+100 or something. It's affecting a specific piece of software. It's not as if the ventilation or reactor rod system run on the same software, and even if they did it would be doubtful that they would be affected by the same command.
Random Thoughts From A Diseased Mind (Not For Dummies)
Except that's not how you do it. If your PLC is controlling vital equipment you A) use a password . B) Have the PLC set so that online (means when the PLC is running) program changes are not allowed and C) run redundant PLCs so if there is ever a switch of code in one of them (by a worm etc.) that PLC is locked out and measures taken. However when controlling a Centrifuge one probably wouldn't use redundant PLCs. When it comes to profibus vs. Profinet I would say that the fieldbus has very little to do with security. Most modern PLCs have an ethernet connection for talking to higher level systems anyways no matter which bus you use at the field level. Also anyone WHO can write a virus for a PLC is capable of buying one of the many different devices for connecting to a Profibus or MPI port of a Siemens PLC. /Industrial-programmer (not in nuclear area)
It's just assumed that Stuxnet is SOOOO advanced that only a nation-state could devise this zero-day infiltration into the centrifuge system of Iran.
Why assume that nation-states are behind it, and not corporations? A lot of companies would be hard hit if Iran became a threat to stability. Even major defense contractors, who profit from building weapons, would see little upside in a conflict with Iran.
The news and the internet buzz all say that it has to be a government backed thing, but what if it is simpler than that? It is far simpler to imagine that a private concern is behind it. They can pay for the talent. They have as much at stake as any government.
It is. For a start, the centrifuges aren't full of uranium. They are full of uranium hexafluoride, a gas. No possibility of it going critical. The worst case scenario would be that containment is ruptured and the gas escapes - it's nasty stuff, about a ten on the flesh-melt-o-meter, and will quite happily burn though walls and boil the skin off of anyone who gets in it's way. If that happens it'll kill a few workers and completly destroy the centrifuge, but that's all. No boom.
Really? "nuclear gangsterism"? This is a pretty specific phrase, out of a specific book. It doesn't exist anywhere else on the internet but in summaries about that book, and in this slashdot article. Anyone care to comment on how this phrase ended up in the slashdot summary?
moox. for a new generation.
http://crudeoilpeak.info/iran-crude-oil-decline-to-2016
They'll be able to continue exporting for a few years, 5-10. Then their internal consumption hits production and starts declining. This is when the shtf and people start dying.
So... What choices do they have? Given the history of the external manipulation of their country they appear quite rational.
Deleted
Sorry if I am wrong here, but are you not just producing wild theories here? Surely you don't know what Stuxnet intended to do, so how could you rule that it could not have caused a nuclear catastrophe?
There was an analysis by German researchers that he bases his information on.
http://www.wired.com/threatlevel/2011/07/how-digital-detectives-deciphered-stuxnet/all/1
http://www.ted.com/talks/ralph_langner_cracking_stuxnet_a_21st_century_cyberweapon.html
NB: The message above might reflect my opinion right now, but not necessarily tomorrow or next year.
the FOIA sites at fbi.gov and cia.gov are full of bizarre, unbeilevable stuff.
is it likely that the US military deliberately administered LSD to people to see if it would be a good mind control drug, and that one of them leaped out of a window and died? no, but it happened.
is it likely that the Nazi government was thoroughly penetrated with Soviet agents? no, but it was.
is it likely that Israel and it's neighbors would go to war in 1967? No, but they did.
is it likely that Israel would repeatedly shoot and napalm a ship flying a huge US flag? no, but it happened.
is it likely that the head of the US OSS would come up with a plan to invite NKVD officers to the US for 'joint exercises' with US law enforcement? No, but it happened.
is it likely that the Department of Justice would charge someone with Espionage for telling a journalist that North Korea would probably test a nuclear weapon? No, but it happened.
its short for 'catastrophe bonds'. hedge funds buy and sell them so they can get rich when there is a hurricane, tornado, or 9/11 style event. people will absolutely profit from this war.
secondly, the stock markets do not crash during wars. they crash when investors realize theyve been being scammed and duped by fraud for years on end by 'financial professionals'. (1929, 1987, 2008).
thirdly, the bond markets go apeshit during war. governments love LOVE LOVE to borrow money during war. that means bonds. bonds out the ass.
fourthly, we now have these things called 'credit default swaps', which are essentially gambling on the bond market. they will go super triple-dog ape shit when there is a war with iran, and the investment banks that hold them like JP Morgan, Goldman, Morgan Stanley, Deutsche Bank, Paribas, etc etc etc, will make tons of money.
and since JP Morgan is feeding intelligence to the US government (if you dont believe me, do a search for 'jp morgan' in the wikileaks files) they have even more of an inside edge.
and i wont even get into 'mortality swaps' and 'longevity swaps'.
why do people write shit for slashdot? because they are intensely interested in a subject.
why are they intensely interested? because the subject moves them emotionally.
you have an inherent conflict of interest. you need to be emotionally detached to be a good reporter, but you wouldnt be writing in the first place (for free no less) unless you had some emotional spark that inspired you to do it.
normally, editors will balance the emotions of the reporter, but slashdot editors often leave stuff in that a newspaper editor might remove. on the other hand, newspaper editors are increasingly beholden to their corporate masters these days. so whatever.
when i wrote a story saying an innocent man was innocent, people said i was being too emotional. well, i disagreed, but i cant disagree that it is right to question authors about this type of thing. its the nature of writing.
If the US wanted to, they could have nuked the entire Muslim world after 9/11, given the popular mood in the country.
Not without facing enforced disarmament and decades of sanctions from the rest of the developed world. This is a very bad American stereotype you are bandying around here. 'We can do what we want because we got the bomb and people should be grateful we don't just nuke them into the stone age..' There is a whole world out there and America becoming a rogue nuclear state would not go down well with the rest of it.
... but Russian immigrants living in and working for Israel. The name "Stuxnet" can be transliterated to "will rot" in Russian. Which was exactly what the Iranian equipment did.
It all kind of depends on how rationally the mullahs operate.
I'm pretty sure that the concept has been communicated to the Iranians, either semi-directly through back channels or through other third parties that any use of a nuclear weapon against the US or its "close allies" will result in overwhelming nuclear retaliation, the kind that might cause one to question the future of Persian culture centered around Iranian geography.
It's long been rumored that the Israelis have indirectly communicated that any NBC attack will result in nuclear retaliation against all Arab capitals and major Islamic religious sites, allowing for a certain group restraint among Arab countries not wishing to see their capital vaporized should a neighbor's anti-Israeli action get too heated.
And don't think for a second that the Soviets or the Chinese would say a word -- poking a stick at the US via Iran is valuable to the Soviets and the Chinese, but it's not worth trading nuclear strikes with the US.
One would think that Iranian leaders would take this into account when doing the calculus on nuclear weapons. Are they even worth having, outside of defensive use within their own immediate political theater? Would the cost of development be better spent on something else -- a home-grown cruise missile, long-range missile, some other expenditure?
That being said, the mullahs may not be rational -- they may be given to magical thinking and have some kind of literal belief in religion that might cause them to not care. We've certainly seen enough rank-and-file religious nuts blow themselves up.
It doesn't make the slightest sense. A strong Iran is in Russia's interest. If Russia wanted to keep Iran from building a bomb they could just stop supplying nuclear fuel and know-how. Or they could sabotage those plants in much more direct ways because they have access.
And if the Israeli military is not involved they're certainly playing their role well. They seem to be quite proud of Stuxnet -- rightfully so, except that they should have concealed it longer. That "the US defence and intelligence communities" might have been "caught with their pants down" is not an argument. Not everything Israel does is vetted by the US. Frankly, if I were an Israeli official I would prefer not to involve US agencies, because they have little to contribute and are a security risk.
"Trust us! We'll give you 25% MORE smoke and mirrors that the other brand of perception management!"
"Flyin' in just a sweet place,
Never been known to fail..."
Ahmadinejad doesn't just not get along with Israel, but calls out for the destruction of Israel pretty much any time there's an open microphone nearby
You're aware this was a (I assume deliberate) mistranslation of what was actually said? Google "Iranian mistranslation". It is however convenient for those who want war to repeat the propaganda.
He does so even though Israel has never done anything bad to Iran
You have evidence there have been no covert attacks? Your sources are clearly better than most. There are strange explosions happening in Iran at strategic sites. You think they are accidents? Who is the most likely culprit? Who is the most likely culprit for stuxnet?
You also forget that Iran spends millions of oil dollars every year funding terrorist organizations whose sole purpose is to harm and kill American and Israeli civilians.
Perhaps they see themselves as freedom fighters.
You are looking for simple black and white, good and evil; like the movies, and the people who's agenda that serves will be more than happy to serve it up to you on a platter. You should just go back to staring slack jawed at the TV and let your superiors get on with whatever it is they want to do. The very last thing you should ever do is question what you are told.
Deleted
What I said was completely correct, it can not go critical nor can it level a city block. The specific term for a block levelling reaction is I believe is "high yield prompt criticality excursion", which sounds terrible and didn't need to be said. Criticality is something achieved in nuclear reactors and nuclear bombs, it is not achieved in centrifuges, even when they fail, thus there is no energy release beyond the normal energy released by nuclear decay. Furthermore, that plant you live near does not blow up precisely because it is designed not to, with moderators and coolants. Should its fuel rods be stacked together outside by some guy who wants to make a fort, the situation would be quite different (though 5% enriched really doesn't have much ability to actually blow up).
When Argumentum ad Hominem falls short, try Argumentum ad Matrem