Slashdot Mirror


'Legitimized' Cyberwar Opens Pandora's Box of Dirty Tricks

DillyTonto writes "U.S. officials have acknowledged playing a role in the development and deployment of Stuxnet, Duqu and other cyberweapons against Iran. The acknowledgement makes cyberattacks more legitimate as a tool of not-quite-lethal international diplomacy. It also legitimizes them as more-combative tools for political conflict over social issues, in the same way Tasers gave police less-than-lethal alternatives to shooting suspects and gave those who abuse their power something other than a club to hit a suspect with. Political parties and single-issue political organizations already use 'opposition research' to name-and-shame their opponents with real or exaggerated revelations from a checkered past, jerrymander districts to ensure their candidates a victory and vote-suppression or get-out-the-vote efforts to skew vote tallies. Imagine what they'll do with custom malware, the ability to DDOS an opponent's web site or redirect donations from an opponent's site to their own. Cyberweapons may give nations a way to attack enemies without killing anyone. They'll definitely give domestic political groups a whole new world of dirty tricks to play."

31 of 134 comments (clear)

  1. Well, Duh by jackjumper · · Score: 3, Insightful

    " They'll definitely give domestic political groups a whole new world of dirty tricks to play."

    As if they didn't have them before?

  2. acknowledged? by Anonymous Coward · · Score: 4, Insightful

    Where exactly has this been officially acknowledged? The only thing we have is a story in the NYT with an anonymous source. I would not call that "acknowledged." I would call that rumor.

    1. Re:acknowledged? by AHuxley · · Score: 4, Informative

      The testing 'bits' are starting to fit/glow:
      http://arstechnica.com/tech-policy/2011/01/did-a-us-government-lab-help-israel-develop-stuxnet/
      The details seem to be built on the evidence found in the code, interviews over 18 months with current and former officials.
      The need for testing the results on P-1 centrifuges puts the code creation in the hands of a few world powers.

      --
      Domestic spying is now "Benign Information Gathering"
    2. Re:acknowledged? by NoNonAlphaCharsHere · · Score: 4, Informative

      The Washington Post is also quoting "current and former U.S. officials", speaking on condition of anonymity, as saying so.

    3. Re:acknowledged? by cavreader · · Score: 2

      The guy who released the information was busy writing a book so what a better way to publicize it.

    4. Re:acknowledged? by cavreader · · Score: 2

      The statement about the US creating Stuxnet was made by a guy writing a book using sources that can not be independently verified. Your link only addresses a "what if" scenario. The US government has not admitted to creating the attack. How could they? According to a lot of people the US is stupid and incapable of doing anything this complex.
        The code has been scrutinized since it came out and even the smartest engineers and programmers in the world have not uncovered anything that can be traced back to any particular country. If you have any verifiable evidence please provide it. The entire attempt to blame the US or Israel has been nothing but opinions, suppositions, and propaganda.

      The PLC code was actually the easiest part of the program. The real hard part was the installation, propagation, and hiding it on the infected machine.

  3. Bull... Fish by adosch · · Score: 4, Insightful

    Cyberweapons may give nations a way to attack enemies without killing anyone. They'll definitely give domestic political groups a whole new world of dirty tricks to play."

    Your sense of 'military and collateral' damage is very skewed, there, article submitter. So 2-3% of military troops on the ground won't die, or any other native county civilians along the way, but you're ok with the vulnerability of a digital US infrastructure that has MILLIONS upon MILLIONS of US federal, contractor, civilian and citizen 'at risk.

    This isn't a new pandora's box. What makes it shock value is that it's one thing to admit being behind Stuxnet, it's another to admit you're the United State Goverment and you're behind Stuxnet.

  4. Another nail in the coffin by Dodgy+G33za · · Score: 5, Insightful

    I grew up believing in the US as a beacon for freedom and fairness. Okay, so it was the 60's and 70's and given what was going down in South America it was probably all a lie then.

    Thing is, just recently the US stated that they view a cyber attack as an act of war. Given how targeted Stuxnet was, by this admission they have clearly stated that it is okay for the US to commit an act of war on Iran, a country that has no history of aggression (although plenty of rhetoric, but that is not uncommon for the region).

    How would you US citizens feel if you were on the receiving end of Predator drones, cyber attacks and Shock and Awe?

    Hypocrisy. The very worst of human traits.

    1. Re:Another nail in the coffin by AHuxley · · Score: 2

      Iran? The UK owned it, got its oil real, real cheap. The US and UK installed the Shah, then let Iraq invade...
      Kind of hard to build an empire when you are part of one or having your gov overthrown or been invaded :)

      --
      Domestic spying is now "Benign Information Gathering"
    2. Re:Another nail in the coffin by Dodgy+G33za · · Score: 5, Informative

      Iran/Persia was never part of the British Empire.The last time they started a war was in 1826 when they attacked Russia. The two nations had fought a number of wars before that so there was plenty of bad blood between the two. So not quite sure where your "part of one" comes from in relation to empires, but they had plenty of opportunity to be aggressive if they desire to be so.

      This is the country that didn't use chemical weapons in the Gulf War (the real one, the one that killed a million people) despite Iraq doing so with the complicity of the US.

      All I am saying is that when it comes to moral high ground, the US of A has plenty of looking up to do.

    3. Re:Another nail in the coffin by Dodgy+G33za · · Score: 4, Insightful

      Having attended a number of security conferences recently where cyber attacks on infrastructure (which is what Stuxnet was) were discussed in detail, I can't share you 'unconcerned'. You start putting viruses in industrial processing equipment and you could end up with a Fukishima or Bhopal. One attack I have seen demonstrated involved a virus being injected via the wireless connections on control vales in a oil refinery, and then hopping across 16 bit processors and RS232 connections. I didn't follow the whole thing, but the PHD guys that demonstrated it were pretty convincing. Hey presto, hacker just got control of your oil refinery.

      Thing is, the "bad guys" have PHD propeller heads too. In fact, depending on which countries you regard as bad guys, they may well have more than you. A world where this sort of thing (and extra judicial murders via drone strikes come to that) is normal is not a world that I am comfortable with.

    4. Re:Another nail in the coffin by AHuxley · · Score: 2

      Read up on http://en.wikipedia.org/wiki/Anglo-Persian_Oil_Company
      16% of any profits, the British government bought the D'Arcy concession (principal stockholder) ensuring form ~1920s into the 1940s Iran's oil was "UK" oil :)
      In 1951 Iran wanted its oil profits back, the UK/CIA Operation Ajax resulted and then you had the Shah.

      --
      Domestic spying is now "Benign Information Gathering"
    5. Re:Another nail in the coffin by betterunixthanunix · · Score: 5, Insightful

      Okay, so it was the 60's and 70's and given what was going down in South America it was probably all a lie then.

      South America? How about right here in the United States? In the 1960s, the FBI was investigating people who dared to take a stand for their own civil rights, looking for ways to discredit them. It was illegal for two men to dance with each other in some states in the 1960s. In the 1970s, the executive branch of government gained the power to dictate some of the laws it is charged with enforcing. The 1970s saw the rise of paramilitary police across the country -- cops who would easily be mistaken for soldiers if their helmets and body armor was not clearly labeled "POLICE."

      How would you US citizens feel if you were on the receiving end of Predator drones, cyber attacks and Shock and Awe?

      As opposed to having our homes invaded by men with assault rifles, who shoot our dogs and kill, injure, and terrorize innocent people? I think you need to take another look at what is happening in the United States. We already have the largest prison population on Earth, heavily militarized law enforcement organizations that double as intelligence agencies, and a president who signed into law a bill that allows people to be detained indefinitely without trial, and who has ordered the assassination of US citizens.

      So what hypocrisy were you referring to? I think we are doing a fine job of spreading our "democracy."

      --
      Palm trees and 8
    6. Re:Another nail in the coffin by ColdWetDog · · Score: 2

      is not a world that I am comfortable with.

      If you've been comfortable with the world we've been in for, oh, say, the past several thousand years , well all I can say is you're doing it wrong. This sort of thing (minus the computer stuff) has been going on for as long as humans have written things down.

      --
      Faster! Faster! Faster would be better!
    7. Re:Another nail in the coffin by Dodgy+G33za · · Score: 3, Interesting

      From Wikipedia:

      "The provision of chemical precursors from United States companies to Iraq was enabled by a Ronald Reagan administration policy that removed Iraq from the State Department's list of State Sponsors of Terrorism. Leaked portions of Iraq's "Full, Final and Complete" disclosure of the sources for its weapons programs shows that thiodiglycol, a substance needed to manufacture mustard gas, was among the chemical precursors provided to Iraq from US companies such as Alcolac International and Phillips."

      They knew what was going on. They chose to ignore it because of the embarrassment that Iran had caused the US after the overthrow of the Shah.

    8. Re:Another nail in the coffin by swillden · · Score: 4, Insightful

      Don't forget to thank a veteran.

      Note: No I'm not criticizing the US military, or veterans. I'm a veteran. My point is that military forces do not provide "freedom", that must come from internal political and judicial processes, which must in turn arise from the desires and actions of the citizenry at large. Military forces just make it possible for us to do whatever we're going to do free of external coercion. What we choose to do, though, can go either way.

      Sorry for the semi-OT post. It just struck a chord, in light of the recent holiday and the flurry of "thank a veteran" messages it always spawns.

      --
      Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
  5. ob by Hognoxious · · Score: 3, Funny

    Don't slashdot me, bro!

    --
    Confucius say, "Find worm in apple - bad. Find half a worm - worse."
  6. What about Stuxnet's unintended victims? by Mannfred · · Score: 4, Interesting

    If a hacker gets caught causing damage to a company's infrastructure it's hard to imagine him not going to jail and/or having to pay for the damages he/she caused. Given that Stuxnet spread around the world, do the victims get to send their cleanup bills to Uncle Sam?

  7. Re:The start of a new arms race by lightknight · · Score: 4, Insightful

    Hmm. This requires 30 seconds of thought.

    The US loves the idea of using drones inside its own borders.

    The US loves the idea of equipping drones with very fast, explosive missiles.

    The US will, in time, find a way to patrol the interior with drones equipped with very fast, explosive missiles.

    The US will come under a terrorist attack from its own weapon systems.

    Reasoning -> I am fairly certain that a swarm of drones can have its firmware corrupted to follow orders from a non-legitimate source. I am also fairly certain that Hellfire missiles or some other ordinance likely to be equipped on said drones has enough destructive capacity to take out civilian aircraft, train bridges, or even make it inside the defensive perimeter of the White House.

    One need only think what a dozen drones, equipped with air-to-air, could achieve if someone compromised them, and flew them to a nearby major airport, with programming to lock onto various targets. Assuming 2 missiles per drone, and 100% accuracy of unique targets, that comes out to 12 747s (which are not equipped with EM counter-measures) dropping out of the sky.

    Assuming air-to-land ordinance, any bridge (train or otherwise) would make a fair target. Take out enough structural supports, and the deaths could be in the hundreds. This is, of course, assuming classical thinking. If we move off of that, than any skyscraper, chemical plant, etc. could become a target. This is, of course, assuming we are going for the most visibly destructive targets.

    Assuming air-to-sea ordinance, any large tanker or cruise ship becomes a target.

    As I recommended before, immediate termination of the drone programs would be in the best interest of the sane.

    --
    I am John Hurt.
  8. Pandora by shoehornjob · · Score: 2

    Lets all hope that when the shit hits the fan we can close that box of tricks. Too much power in the wrong hands is a very dangerous thing and where does it stop. Also, who has oversight of our dirty little cyber (I hate that word) war. The last thing we need is unchecked use of this technology.

    --
    "We are just a war away from Amerikastan. When god vs god the undoing of man." Dave Mustaine
  9. Don't forget by PopeRatzo · · Score: 5, Interesting

    This is an arena where a few motivated civilians can play, too.

    At the moment, I'll put Anonymous or a group of Eastern European boys I met a few years ago against the best that a political party's "opposition team" can put together.

    Playing War in a distributed worldwide network is not the same as throwing a bunch of hardware onto a battlefield.

    So far, the best armies on the Internet are not the ones affiliated with a government or establishment political party. Hell, despite the Octopus doing its best, Pirate Bay and wikileaks are still up and running. If they go down, I'll be more worried.

    --
    You are welcome on my lawn.
    1. Re:Don't forget by PopeRatzo · · Score: 2

      Don't fool yourself, computer networks can be tamed much easier than than say, the ocean.

      Enough committed individuals can become quite oceanic.

      --
      You are welcome on my lawn.
  10. Wha? by Rydia · · Score: 2

    This is the most incoherent summary I've seen on slashdot yet. Maybe because it's so far in tinfoil hat territory, but still, wow.

  11. Okay Warfare is going to get cheaper! Kindler? by aisnota · · Score: 2

    First of all, industrial warfare as we know it is going to start fading quickly.

    You just do not need to spend lavishly if your opponent depends on computer technology to order, work-flow and conduct a military action anymore. War is going to get cheap!

    So forget about so many tanks, aircraft and soldiers. All you need to do is confuse the enemy, keep their soldiers from getting paid, food, water and old style ammunition - bullets or new style ammunition - packet flow.

    Overspending on Internet technology is what maybe in tens of millions of dollars compared to tens of billions in military industrial complex goods?

    Leon Panetta should with his former CIA chief background be aware that the Pentagon budget is in some serious deep price decline mode like Walmart's falling ones.

    Really, do you think any military or asymmetrical war from those idiotic militants in foreign lands get far if their packet flow is adulterated or commands now sent to their gear reverse the intent of the action?

    But as to the statement that no one gets killed?

    Bull is the word there, because war is still dirty lousy business in the body politics. Commands for centrifuges as in what it is with STUXNET can just as easily be reformulated for medical gear used for generals of an army or to cut off so much logicistical capacity of a combatant group to inflict death. It is just a matter of scale or opportunity.

    Face it, if the bogey man of the day is being secretly treated for kidney ailments do you think the President of the United States is going to say hands off that medical equipment?

    --
    http://www.aisnota.com/slashdot/ Welcome to Logic and the Future
  12. Re:The start of a new arms race by lightknight · · Score: 5, Funny

    "I would absolutely love to hear your qualifications for this statement." -> Seriously, this, on /.? It's a flying computer built by a bunch of military contractors.

    Bring one to the next major computer trade show, and leave it inside over night. If it isn't outright stolen, it'll be sporting a Tux sticker on its side as a handful of attendants will stay up all night to get Linux running on the damn thing. "Dude, I've got the kernel up and running, but I can't decide: KDE or Gnome?"

    --
    I am John Hurt.
  13. Re:The start of a new arms race by sociocapitalist · · Score: 2

    Ah come on it's not like the spare parts being used for American weapons systems are often Chinese made counterfeits...oh...wait...

    --
    blindly antisocialist = antisocial
  14. It's a lesson in cyberwar by mattr · · Score: 2

    I am a bit worried if Stuxnet is state of the art and the U.S. military has now taught the world including its enemies what it thinks is quality coding for cyber weapons. Seems Obama was swayed by the relative lack of expense but it certainly is not low profile or containable. I don't know much about Stux at all but one would imagine that centrifuges are not the only industrial infrastructure that could be targeted by such a weapon. Now you know what every black hat is working on these days, when they are not stealing bitcoins. Unfortunately the posts about drones being the next cyberwar vector are probably true, whether in 1 year or 20 it seems inevitable. The question next is active defense by buildings, airports, aircraft, highway interchanges, bridges, power plants, etc. If the U.S. saw a window in time when such a cyber attack would be little understood and so not be defended against, then how long is the current window in time regarding rogue drone attacks? I don't see much difference between home use R/C and industrial drones either.

  15. Don't kid yourselves by Shoten · · Score: 4, Interesting

    "Cyberweapons may give nations a way to attack enemies without killing anyone."

    I doubt very much that there was no loss of life involved in Stuxnet's effects. A P2 gas centrifuge that spins so fast that there are only a few metal alloys in the world that are tough enough to hold together. When one of those tubes lets go because it wobbles at one of the unstable speed zones it enters, or because it over-runs (as Stuxnet made happen), it's like a grenade going off. As I recall the estimate was that at least 40% of the centrifuges at Natanz failed in this fashion...and I find it difficult to imagine that nobody was ever standing near any of them when it happened.

    --

    For your security, this post has been encrypted with ROT-13, twice.
  16. Re:The start of a new arms race by marcosdumay · · Score: 2

    Take a look at the old /. articles, you'll see lots of news about US police (and imigration) forces wanting to use those things.

    A terrorist attack using civilian armed drones looks inevitable.

  17. Re:Can't keep a secret? WFT? by Anonymous Coward · · Score: 4, Insightful

    Maybe I'm still too young and naive, but this idea seems more of a way for bad actions to be perpetrated by people claiming to be the good guys (which again 'good guys' is subjective). I understand secrecy during an operation, but the objective good guys should be able to own up to their deeds. If the intelligence organizations can't stand behind their deeds, then they deserve the disgust they have earned.

    "Tricks and treachery are the practice of fools, that don't have brains enough to be honest."
              - Benjamin Franklin

    As an American (I'm looking at you too Russia), I can't help but feel more and more responsible for tragedies in the present day. Most of the places lashing out (Iran, Iraq, Libya, Syria, Mexico, and South America) were armed and encouraged to fight by the US. Now the US is trying to put down it's 'dogs' of war.

    It would be simple matter, except these 'dogs' are nations like us. What gives us the right?

  18. Re:Bull... Fish-Naivity. by Johann+Lau · · Score: 2

    They know what happens, it's just that they also know what would happen if governments weren't run by greedy tools.

    "Solidarity is the tenderness of the peoples."

    Because if real people have better things to do with their own little lives, how much more so on larger scales. And people pay for this stuff -- so they have a right to be "shocked". And it's not like they're not being deceived in small and big ways 24/7, too. Way to be ironic, being shocked that the public is shocked and all that. How do you DO think that public affairs, shady criminal organizations and citizens, the souvereign king, are connected? Is it just hurr-di-durr, or also a bit of lalala? The trash always acts so shocked when it's taken out. My my.