Slashdot Mirror


'Legitimized' Cyberwar Opens Pandora's Box of Dirty Tricks

DillyTonto writes "U.S. officials have acknowledged playing a role in the development and deployment of Stuxnet, Duqu and other cyberweapons against Iran. The acknowledgement makes cyberattacks more legitimate as a tool of not-quite-lethal international diplomacy. It also legitimizes them as more-combative tools for political conflict over social issues, in the same way Tasers gave police less-than-lethal alternatives to shooting suspects and gave those who abuse their power something other than a club to hit a suspect with. Political parties and single-issue political organizations already use 'opposition research' to name-and-shame their opponents with real or exaggerated revelations from a checkered past, jerrymander districts to ensure their candidates a victory and vote-suppression or get-out-the-vote efforts to skew vote tallies. Imagine what they'll do with custom malware, the ability to DDOS an opponent's web site or redirect donations from an opponent's site to their own. Cyberweapons may give nations a way to attack enemies without killing anyone. They'll definitely give domestic political groups a whole new world of dirty tricks to play."

18 of 134 comments (clear)

  1. Well, Duh by jackjumper · · Score: 3, Insightful

    " They'll definitely give domestic political groups a whole new world of dirty tricks to play."

    As if they didn't have them before?

  2. acknowledged? by Anonymous Coward · · Score: 4, Insightful

    Where exactly has this been officially acknowledged? The only thing we have is a story in the NYT with an anonymous source. I would not call that "acknowledged." I would call that rumor.

    1. Re:acknowledged? by AHuxley · · Score: 4, Informative

      The testing 'bits' are starting to fit/glow:
      http://arstechnica.com/tech-policy/2011/01/did-a-us-government-lab-help-israel-develop-stuxnet/
      The details seem to be built on the evidence found in the code, interviews over 18 months with current and former officials.
      The need for testing the results on P-1 centrifuges puts the code creation in the hands of a few world powers.

      --
      Domestic spying is now "Benign Information Gathering"
    2. Re:acknowledged? by NoNonAlphaCharsHere · · Score: 4, Informative

      The Washington Post is also quoting "current and former U.S. officials", speaking on condition of anonymity, as saying so.

  3. Bull... Fish by adosch · · Score: 4, Insightful

    Cyberweapons may give nations a way to attack enemies without killing anyone. They'll definitely give domestic political groups a whole new world of dirty tricks to play."

    Your sense of 'military and collateral' damage is very skewed, there, article submitter. So 2-3% of military troops on the ground won't die, or any other native county civilians along the way, but you're ok with the vulnerability of a digital US infrastructure that has MILLIONS upon MILLIONS of US federal, contractor, civilian and citizen 'at risk.

    This isn't a new pandora's box. What makes it shock value is that it's one thing to admit being behind Stuxnet, it's another to admit you're the United State Goverment and you're behind Stuxnet.

  4. Another nail in the coffin by Dodgy+G33za · · Score: 5, Insightful

    I grew up believing in the US as a beacon for freedom and fairness. Okay, so it was the 60's and 70's and given what was going down in South America it was probably all a lie then.

    Thing is, just recently the US stated that they view a cyber attack as an act of war. Given how targeted Stuxnet was, by this admission they have clearly stated that it is okay for the US to commit an act of war on Iran, a country that has no history of aggression (although plenty of rhetoric, but that is not uncommon for the region).

    How would you US citizens feel if you were on the receiving end of Predator drones, cyber attacks and Shock and Awe?

    Hypocrisy. The very worst of human traits.

    1. Re:Another nail in the coffin by Dodgy+G33za · · Score: 5, Informative

      Iran/Persia was never part of the British Empire.The last time they started a war was in 1826 when they attacked Russia. The two nations had fought a number of wars before that so there was plenty of bad blood between the two. So not quite sure where your "part of one" comes from in relation to empires, but they had plenty of opportunity to be aggressive if they desire to be so.

      This is the country that didn't use chemical weapons in the Gulf War (the real one, the one that killed a million people) despite Iraq doing so with the complicity of the US.

      All I am saying is that when it comes to moral high ground, the US of A has plenty of looking up to do.

    2. Re:Another nail in the coffin by Dodgy+G33za · · Score: 4, Insightful

      Having attended a number of security conferences recently where cyber attacks on infrastructure (which is what Stuxnet was) were discussed in detail, I can't share you 'unconcerned'. You start putting viruses in industrial processing equipment and you could end up with a Fukishima or Bhopal. One attack I have seen demonstrated involved a virus being injected via the wireless connections on control vales in a oil refinery, and then hopping across 16 bit processors and RS232 connections. I didn't follow the whole thing, but the PHD guys that demonstrated it were pretty convincing. Hey presto, hacker just got control of your oil refinery.

      Thing is, the "bad guys" have PHD propeller heads too. In fact, depending on which countries you regard as bad guys, they may well have more than you. A world where this sort of thing (and extra judicial murders via drone strikes come to that) is normal is not a world that I am comfortable with.

    3. Re:Another nail in the coffin by betterunixthanunix · · Score: 5, Insightful

      Okay, so it was the 60's and 70's and given what was going down in South America it was probably all a lie then.

      South America? How about right here in the United States? In the 1960s, the FBI was investigating people who dared to take a stand for their own civil rights, looking for ways to discredit them. It was illegal for two men to dance with each other in some states in the 1960s. In the 1970s, the executive branch of government gained the power to dictate some of the laws it is charged with enforcing. The 1970s saw the rise of paramilitary police across the country -- cops who would easily be mistaken for soldiers if their helmets and body armor was not clearly labeled "POLICE."

      How would you US citizens feel if you were on the receiving end of Predator drones, cyber attacks and Shock and Awe?

      As opposed to having our homes invaded by men with assault rifles, who shoot our dogs and kill, injure, and terrorize innocent people? I think you need to take another look at what is happening in the United States. We already have the largest prison population on Earth, heavily militarized law enforcement organizations that double as intelligence agencies, and a president who signed into law a bill that allows people to be detained indefinitely without trial, and who has ordered the assassination of US citizens.

      So what hypocrisy were you referring to? I think we are doing a fine job of spreading our "democracy."

      --
      Palm trees and 8
    4. Re:Another nail in the coffin by Dodgy+G33za · · Score: 3, Interesting

      From Wikipedia:

      "The provision of chemical precursors from United States companies to Iraq was enabled by a Ronald Reagan administration policy that removed Iraq from the State Department's list of State Sponsors of Terrorism. Leaked portions of Iraq's "Full, Final and Complete" disclosure of the sources for its weapons programs shows that thiodiglycol, a substance needed to manufacture mustard gas, was among the chemical precursors provided to Iraq from US companies such as Alcolac International and Phillips."

      They knew what was going on. They chose to ignore it because of the embarrassment that Iran had caused the US after the overthrow of the Shah.

    5. Re:Another nail in the coffin by swillden · · Score: 4, Insightful

      Don't forget to thank a veteran.

      Note: No I'm not criticizing the US military, or veterans. I'm a veteran. My point is that military forces do not provide "freedom", that must come from internal political and judicial processes, which must in turn arise from the desires and actions of the citizenry at large. Military forces just make it possible for us to do whatever we're going to do free of external coercion. What we choose to do, though, can go either way.

      Sorry for the semi-OT post. It just struck a chord, in light of the recent holiday and the flurry of "thank a veteran" messages it always spawns.

      --
      Note to ACs: I usually delete AC replies without reading them. If you want to talk to me, log in.
  5. ob by Hognoxious · · Score: 3, Funny

    Don't slashdot me, bro!

    --
    Confucius say, "Find worm in apple - bad. Find half a worm - worse."
  6. What about Stuxnet's unintended victims? by Mannfred · · Score: 4, Interesting

    If a hacker gets caught causing damage to a company's infrastructure it's hard to imagine him not going to jail and/or having to pay for the damages he/she caused. Given that Stuxnet spread around the world, do the victims get to send their cleanup bills to Uncle Sam?

  7. Re:The start of a new arms race by lightknight · · Score: 4, Insightful

    Hmm. This requires 30 seconds of thought.

    The US loves the idea of using drones inside its own borders.

    The US loves the idea of equipping drones with very fast, explosive missiles.

    The US will, in time, find a way to patrol the interior with drones equipped with very fast, explosive missiles.

    The US will come under a terrorist attack from its own weapon systems.

    Reasoning -> I am fairly certain that a swarm of drones can have its firmware corrupted to follow orders from a non-legitimate source. I am also fairly certain that Hellfire missiles or some other ordinance likely to be equipped on said drones has enough destructive capacity to take out civilian aircraft, train bridges, or even make it inside the defensive perimeter of the White House.

    One need only think what a dozen drones, equipped with air-to-air, could achieve if someone compromised them, and flew them to a nearby major airport, with programming to lock onto various targets. Assuming 2 missiles per drone, and 100% accuracy of unique targets, that comes out to 12 747s (which are not equipped with EM counter-measures) dropping out of the sky.

    Assuming air-to-land ordinance, any bridge (train or otherwise) would make a fair target. Take out enough structural supports, and the deaths could be in the hundreds. This is, of course, assuming classical thinking. If we move off of that, than any skyscraper, chemical plant, etc. could become a target. This is, of course, assuming we are going for the most visibly destructive targets.

    Assuming air-to-sea ordinance, any large tanker or cruise ship becomes a target.

    As I recommended before, immediate termination of the drone programs would be in the best interest of the sane.

    --
    I am John Hurt.
  8. Don't forget by PopeRatzo · · Score: 5, Interesting

    This is an arena where a few motivated civilians can play, too.

    At the moment, I'll put Anonymous or a group of Eastern European boys I met a few years ago against the best that a political party's "opposition team" can put together.

    Playing War in a distributed worldwide network is not the same as throwing a bunch of hardware onto a battlefield.

    So far, the best armies on the Internet are not the ones affiliated with a government or establishment political party. Hell, despite the Octopus doing its best, Pirate Bay and wikileaks are still up and running. If they go down, I'll be more worried.

    --
    You are welcome on my lawn.
  9. Re:The start of a new arms race by lightknight · · Score: 5, Funny

    "I would absolutely love to hear your qualifications for this statement." -> Seriously, this, on /.? It's a flying computer built by a bunch of military contractors.

    Bring one to the next major computer trade show, and leave it inside over night. If it isn't outright stolen, it'll be sporting a Tux sticker on its side as a handful of attendants will stay up all night to get Linux running on the damn thing. "Dude, I've got the kernel up and running, but I can't decide: KDE or Gnome?"

    --
    I am John Hurt.
  10. Don't kid yourselves by Shoten · · Score: 4, Interesting

    "Cyberweapons may give nations a way to attack enemies without killing anyone."

    I doubt very much that there was no loss of life involved in Stuxnet's effects. A P2 gas centrifuge that spins so fast that there are only a few metal alloys in the world that are tough enough to hold together. When one of those tubes lets go because it wobbles at one of the unstable speed zones it enters, or because it over-runs (as Stuxnet made happen), it's like a grenade going off. As I recall the estimate was that at least 40% of the centrifuges at Natanz failed in this fashion...and I find it difficult to imagine that nobody was ever standing near any of them when it happened.

    --

    For your security, this post has been encrypted with ROT-13, twice.
  11. Re:Can't keep a secret? WFT? by Anonymous Coward · · Score: 4, Insightful

    Maybe I'm still too young and naive, but this idea seems more of a way for bad actions to be perpetrated by people claiming to be the good guys (which again 'good guys' is subjective). I understand secrecy during an operation, but the objective good guys should be able to own up to their deeds. If the intelligence organizations can't stand behind their deeds, then they deserve the disgust they have earned.

    "Tricks and treachery are the practice of fools, that don't have brains enough to be honest."
              - Benjamin Franklin

    As an American (I'm looking at you too Russia), I can't help but feel more and more responsible for tragedies in the present day. Most of the places lashing out (Iran, Iraq, Libya, Syria, Mexico, and South America) were armed and encouraged to fight by the US. Now the US is trying to put down it's 'dogs' of war.

    It would be simple matter, except these 'dogs' are nations like us. What gives us the right?