Schneier Calls US Stuxnet Cyberattack a 'Destabilizing and Dangerous' Action
alphadogg writes "Revelations by The New York Times that President Barack Obama in his role as commander in chief ordered the Stuxnet cyberattack against Iran's uranium-enrichment facility two years ago in cahoots with Israel is generating controversy, with Washington in an uproar over national-security leaks. But the important question is whether this covert action of sabotage against Iran, the first known major cyberattack authorized by a U.S. president, is the right course for the country to take. Are secret cyberattacks helping the U.S. solve geopolitical problems or actually making things worse? Bruce Schneier, whose most recent book is 'Liars and Outliers,' argues the U.S. made a mistake with Stuxnet, and he discusses why it's important for the world to tackle cyber-arms control now."
The more involved the more things can go wrong.
How could contributing to the spread of clever computer-intrusion technologies(both with things like Stuxnet, and with the pernicious habit of doing business with the sort of slimy vulnerability-sellers whose customers want to exploit, not patch, them), possibly be a bad idea for a country whose citizens, businesses, government, and R&D capabilities are overwhelmingly dependent on computerized infrastructure?
That's crazy talk.
I voted for Obama based on two things: I hated how George Bush increased deficits recklessly and I hated how the Republican cavalierly meddled in other country's affairs using military might.
I feel like a fool.
See my journal for slashdot ID's by year. Mine created in 2005. http://slashdot.org/journal/289875/slashdot-ids-by-year
Is there really proof that it was the U.S.? I mean besides that awesome author who has 7 sources which want to stay hidden and that "Of course it was the U.S.!" attitude...
The U.S. made a mistake with Iran with that stupid "Axis of Evil" speech. I'm still not sure why that speech isn't recognized as one of the biggest diplomatic blunders in recent history. First of all, lumping Iran and North Korea in with Iraq (who Bush planned to invade) served no good purpose. It was basically an open threat to Iran and North Korea that we were going to invade them next. And, not surprisingly, both responded by ramping up their nuclear weapons programs to a feverish pace (since nukes are basically the only way to ensure that the U.S. can't invade).
Iran was actually getting pretty moderate before that speech, even sending open condolences and holding vigils after 9-11, with fairly moderate leadership. After the speech we get Ahmadinejad and and full-on nuke program. Smart move, George.
What political party do you join when you don't like Bible-thumpers *or* hippies?
How could contributing to the spread of clever computer-intrusion technologies(both with things like Stuxnet, and with the pernicious habit of doing business with the sort of slimy vulnerability-sellers whose customers want to exploit, not patch, them), possibly be a bad idea for a country whose citizens, businesses, government, and R&D capabilities are overwhelmingly dependent on computerized infrastructure?
I have to disagree with you here. To ensure that your businesses and citizens and government and infrastructure are sound, you should always be investigating modes for attacks and publishing them. My logic is that if the United States Government is able to develop this, then so is China's, Russia's, India's, etc so get it out in the open already. In fact, your claim almost seems to advocate security through obscurity. If you want to ensure that people aren't pilfering data without your knowledge, publish your exploits and what you see as "contributing to the spread of clever computer-intrusion technologies" could just as well be seen as "telling SCADA and other makers to pull their heads out of their asses and fix this." Also, your statements can apply to every single country now, even third world countries are largely dependent on networking hardware to function.
... "destabilizing and dangerous" is a definition of what you can expect the repercussions to be.
The reason this is a "destabilizing and dangerous" action was because it was effective -- not because the US Government secretly given hackers a bunch of ways to hack every computer ever made. Also, the US kind of lost the "moral high ground" now when someone hacks their nuclear facilities with the intent of disabling our capabilities. Use an effective cyber attack against a nation state that does not have similar capabilities
My work here is dung.
all countries are doing this, and have been doing this, for years
i never understood this "single out the USA for what everyone does" nonsense
it seems like a defect in one's ability to keep perspective to me
intellectual property law is philosophically incoherent. it is your moral duty to ignore it or sabotage it
The argument put forward is not really that using these methods are "making things worse" - although that is opening gambit.
The real guts of the argument is that cyberattacks "will lead to the militarization of cyberspace, and the transformation of the Internet into something much less free and open" .. for that argument, I have some sympathy
Ultimately, this boils down to don't do your dirty work in the air, on the ground and at sea but not in my playground ...
Bruce Schneier is NOT a diplomat and has fuck all experience in dealing with international affairs. And what sort of Diplomacy are we supposed to use when "Stern Letter Writing", "UN Inspections" and threats fail? Obama showed quite a bit of creativity and tact in performing an elaborate Cyber-Attack that left our best Security Researchers stumped for months and seems to have worked quite well in derailing their bomb making efforts.
Would Schneier prefer we have gone ahead with Israel's agenda and bombed the suspected weapons making facilities and risked killing people -- even civilians? Or is he just the sort of Freedom Loving Pacifist that would have us dawdling around writing more "Sternly Worded Letters" until Iran finally trotted out a bomb and wiped out an entire city full of people?
Smart move, George.
Intentional move, with successful outcome. The POTUS needs an outside enemy so the people will forget to debate internal issues.
Iran was actually getting pretty moderate before that speech, even sending open condolences and holding vigils after 9-11, with fairly moderate leadership. After the speech we get Ahmadinejad and and full-on nuke program. Smart move, George.
You are flat out wrong. The candle light vigils held for 9-11 victims were entirely citizen events and had nothing to do with the government. I have two Iranian citizens as good friends and they are completely different people than Ahmadinejad and, worse, their nutjob supreme leader. Your insinuation that Iran the nation state sent open condolences and held vigils after 9-11 is laughable and erroneous -- some of the leadership did condemn the attacks but that's as far as it went. Hate the nation not the national. Hate the religion not the religious.
Your blame on George is also largely misplaced. They had deals with Russia to improve their nuke program long before him and the leaders have always wanted the ultimate weapon. I know life would be simpler if everything was George W. Bush's fault but, unfortunately for you, we must face reality.
My work here is dung.
There is only one source who says they have "evidence" and keeps pointing the finger at the US and Israel about Stuxnet, Flame, and other Trojans, and that is Kaspersky, which is a Russian AV company. Nobody else out there, be it Panda, Symantec, McAfee, or independent researchers makes these conclusions. It might just be me, but it appears that there might be a political agenda here.
Russia has a lot to gain by making the US appear at fault for these Trojans. There is a battle now for who runs the Net, either the US or the UN. With enough propaganda, it is possible they can wrest control of the Internet from ICANN. Result: You think SOPA/PIPA were bad, now think of some country you never lived in dictating the rules and fees for your website in your own country. Post a snide comment about the rulers in Thailand, in a few hours, your domain and IP have been pulled. Unlike the US which caves into international pressure and is smart enough to not fool around with anti-US sites (Pravda, Al-Jazeera), there is no stopping a UN backed replacement for the ICANN to do whatever it pleases. Unlike the US where the paid for fat-cats will back off when sites like Google shut down, China and Russia don't kowtow to public opinion, and PIPA/SOPA/ACTA and all that other stuff can easily become the de facto world law just because the one ruling body says so.
I wonder if that Nobel Peace Prize burns in his hand yet.
First of all, lumping Iran and North Korea in with Iraq (who Bush planned to invade) served no good purpose.
It makes good theater. Destro, Cobra Commander and Zartan all had different aims and ambitions, but they pretty much just got lumped together as Bad Guys too. The American public dislikes subtlety.
It would be colossally foolish to sign such a treaty.
I can not imagine such a treaty being ratified.
Therefore, baton down the hatches a storm is coming.
The real mistake was getting caught, or was it? The article says "Stuxnet didn't just damage the Natanz nuclear facility; it damaged the U.S.'s credibility as a fair arbiter and force for peace in cyberspace"
Was the US government ever seen as a "fair arbiter and force for peace in cyberspace". Yes, many Americans played that role, but the official government?
Deterrence only works if the other side thinks that you have better weapons and will use them. It's entirely possible that "Getting Caught" was a calculated risk, planned from the beginning. Unofficial channels may have sent the messge, "We were easy on you this time, back off, or next time we take off the gloves." Certainly, after you get caught, that's the way you want to spin it.
All ideas^H^H^H^H^Hprocesses in this post are Patent Pending. (as well as the process of patenting all postings)
The pacific portion of WWII ended because we annihilated two cities - civilians and all - and threatened to to turn the island of Japan into a wasteland. War sucks, and shouldn't need to exist, but it does. Good? Bad? Think of it this way - do you want to be the country that doesn't have nuclear weapons because they're "against the rules," or do you want to have them because - rules or not - people are much less likely to fuck with you if they know you can destroy them?
Is it just my observation, or are there way too many stupid people in the world?
Like the legality of Sputnik in orbit over 'your' airspace, it opens a new area to weaponise.
Today "power plants", soon the billing/pension/social security systems? Add or remove 20% with direct debit/deposit in some parts of the world?
If a country votes the wrong way in the UN? Make the sitting gov fall with a wave of cyber "thingy"?
Domestic spying is now "Benign Information Gathering"
First of all, lumping Iran and North Korea in with Iraq (who Bush planned to invade) served no good purpose.
Ah, you don't understand how the US works. Much like, "Invasion is the means by which the US teaches its citizens geography", invasions are also the beta testing ground for US munitions manufacturers. Does stealth work? Invade Iraq. Bunker busters? Afghanistan. Does mobile infantry help? Invade VietNam. Does jet tech. help? Korea. Etc.
I'm not really sure how Afghanistan fits in, but "Combat Hospital" is my favourite show (if that means anything). HAND.
"Tongue tied and twisted, just an Earth bound misfit
"War is thus an act of force to compel our enemy to do our will."- Carl Philipp Gottfried von Clausewitz Launching air strikes, drone attacks, stuxnet are all of these not an act of war? If say North Korea launched air strikes on US soil wouldnt we be upset just a little? How about if they only used drones to hit their enemies on our land? How about if they unleashed stuxnet towards our nuclear plants? But it is ok for us to do it?
"Remember, politicians and diapers should be changed often and for the same reason."
How the hell would you enforce a "cyber-arms" ban? It would be easier to ban actual arms. Like a worldwide gun ban.
It was basically an open threat to Iran and North Korea that we were going to invade them next.
Which is sort of incorrect, the speech was given on January 29, 2002 and Iraq was invaded on 19 of March 2003. So let's look at Mohammad Khatami who was in office from 2 August 1997 – 3 August 2005 and I'll leave it to the reader to decide if it was the speech of George W. Bush on in January of 2002 or the ongoing "Operation Iraqi Freedom" that started in 2003 and was still going on when he left office that was the primary motivation for him being replaced by someone that would scare the US. The endless Iraq War is a bigger blunder! Not his stupid speech and Republican rhetoric! Actions speak louder than words.
George W. Bush is a moron, I agree with you here. But I don't want history rewritten to say that the greatest political blunder was his Axis of Evil speech -- look at the freaking invasion of Iraq, for the love of Allah!
Guess what happened to him after W. had his "We're coming for you next, Iran" cowboy moment?
What in the hell are you talking about?! The US wasn't even in Iraq when he made this speech! You are rewriting history, you are fudging timelines, adding dialogue, cheap rhetoric and twisting facts to align with your ideals and your reality just like a politician!
My work here is dung.
Some earlier Presidents wanted the same sort of extralegal measures done but they went to great lengths to deny they ever had anything to do with it. Congratulations folks - you got somebody ordering the same sort of shit that Bush, Reagan (and even Clinton) pretended "just happened" only this time he's not being a coward about it.
You don't just roll back from GITMO etc in a decade no matter who is in charge. Conservative lawyers are about keeping things rolling with the minimum of change and that's who you've got USA. So what you've got now USA is what you would have had if Bush wasn't an AWOL coward on holiday all of the time.
the alternatives, invasion or air bombardment, it seems reasonable.
The U.S. made a mistake with Iran with that stupid "Axis of Evil" speech. I'm still not sure why that speech isn't recognized as one of the biggest diplomatic blunders in recent history. First of all, lumping Iran and North Korea in with Iraq (who Bush planned to invade) served no good purpose. It was basically an open threat to Iran and North Korea that we were going to invade them next. And, not surprisingly, both responded by ramping up their nuclear weapons programs to a feverish pace (since nukes are basically the only way to ensure that the U.S. can't invade).
Iran was actually getting pretty moderate before that speech, even sending open condolences and holding vigils after 9-11, with fairly moderate leadership. After the speech we get Ahmadinejad and and full-on nuke program. Smart move, George.
Agreed. But instead of being shunned for being the author of one of the most damaging speeches in American foreign policy history he gets a blog, a contributors spot on CNN, and gets to publish seven books.
http://www.thedailybeast.com/davidfrum.html
As far as I know, power plants are not connected to the internet.
According to those who showed up for a related discussion a month or two ago, this cannot be assumed today. Management wants to be able to monitor this stuff from their home peecee.
The virus thingy only attacks powerplants. So there is nothing for it to do if it is on the internet.
Stuxnet "walked" across the airgap on a contractor's usb key.
Correct me if I am wrong, I think this is all just media sensationalism about 'omg the hackerz!".
The last I heard, it set back Iran's uranium enrichment program two years. I imagine it likely fanned the flames of Iran's policy makers, so when the hammer eventually falls, it's *really* going to fall. Good work, cyberwarriors! Gun, meet foot.
"Tongue tied and twisted, just an Earth bound misfit
The wold will inevitably rely on cyberwarefare soon enough, much like how everyone uses computers now. And most people don't understand how a computer works so they just buy "friendly gadgets" that only expose the buttons and are otherwise cute, little boxes. If we apply that logic, aren't we going to end up designing Megaman soon?
This was just a routine Cloak and Dagger Op. During the Cold War the CIA and KGB did "monkey wrench" ops like this all the time. Most of the time they didn't bother telling the Prez... So he couldn't accidentally apologize!
In the grand scheme from the Prez point of view, this was the right way to go. Americans aren't really willing to start another war, and the intel in Iran's Nuclear program is so sensational and political the truth is long lost. The CIA wants to throw a digital wrench in the works that Iran claims don't exist is better than letting Israel invade their airspace with US made planes again. Iran isn't being honest with neighbors like Syria either, so "outrage" over breaking something they claimed they wernt doing is minimal.
The bigger problem is that the military and other orgs are utterly irresponsible With their "toys". They ended up giving foreign hackers something high-end and new to hack our OWN computers with. This leads to looking for "terrorists" under every beach towel because there is all this irresponsible stuff going on even the President and industry leaders aren't warned is coming.... Because these idiots turned stuff loose and tried to cover it up.
Has the US formally declared war on Iran?
Crazy is today's relevant metaphor for the United States military - industrial complex MAD, Mutually Assured Destruction, theory-driven policies for gaming ultimate zero-win war scenarios. Zero-war scenarios have yet to disarm nuclear technologies. Stuxnet, Flame, drones, et. al. advance the state of politics without the incursion and loss of life on the battlefields of nation states who have nothing left to lose but treasury of its future, youth.
But that's not what this particular software does. If someone wants to repurpose Stuxnet or Flame to target pacemakers, they're going to have to do the work to make it so.
OTOH if you make bullets intended to kill only bad guys and someone else decides to repurpose them for killing cute puppies and children, the bullets are just fine as-is, and ready to use.
"Believe me!" -- Donald Trump
While the wisdom of pursuing the attack can be debated, a larger question of disclosing it publicly needs to be addressed. Let's just say that doing it was of questionable benefit and it probably should not have been done.
However, once it was done I would say that as a major component of any covert military operation there was an extreme need to keep it secret. Forever. Disclosing this has more or less committed Iran to a course of action to retaliate. There is no escaping that fact - they have to retaliate, probably on a larger scale. We cost them millions of dollars so they have to cost us billions. Failure to retailate will make them appear to other Islamic powers that they have faced the Great Satan and blinked, which is not a posture they can afford.
You can argue that it was theorized already that the US might be responsible. The difference is that before disclosure it was just a theory and it is difficult to justify retaliation based on a theory. Unfortunately, what disclosure has done is made it impossible to ignore any longer. It is the difference between thinking your wife might be being unfaithful and coming home to find her in bed with someone else. It is no longer possible to ignore the situation and it demands action.
Disclosure of this sort of military secret - and it cannot be termed anything but that - is clearly treasonous. I would put it on the same level as telling Germany at the height of the U-Boat campaign that we had cracked their code and knew where the subs were being sent. The result would have been a change in strategy and tactics as well as a tremendous loss of life. This disclosure will certainly lead to a significant loss of life as well.
So because some people blabbed about this we are now going to face an attack, probably within the continental US and probably pretty soon. I believe the timing will correspond to the Iranian position on the US Presidential election. Attacking before November pretty much puts Obama out of office, so if they believe Romney would be a weaker opponent the attack will be before the election. Personally, I would suspect Obama to be the weaker opponent for Iran and therefore the attack will be sometime in early 2013.
In order to cause the required amount of damage to the US, it is going to have to be a nuclear detonation. While Iran has a shortage of bomb-grade materials, other powers do not and will almost certainly share for an enterprise of this nature. A air or missle attack would be hopeless for Iran and there are too many potential avenues of discovery for a smuggled weapon. So the likey route for the attack will be by cargo ship in a encircling harbor. The Chesapeak Bay might be a great place for this with the opportunity to shower Washington DC with radioactive water and debris.
In short, if you live in a harbor area on the East coast you might want to take a trip until, say April of 2013.
The main reason that cyberwar is a threat is because we haven't worried about code complexity, as long as systems worked, we figured it was good enough. There are now projects in play that offer ways to manage this complexity, and reduce the number of trusted lines of code for any given function to tractable numbers. I'd even go so far as to say that it's possible to have a computer that is usable, secure and networked, with active users.
Capability based security offers one part of the approach to making this possible by limiting the side effects of any given piece of code in an effective sandbox.
Microkernel based operating systems are the next part by not trusting driver code, and reducing the attack surface to manageable levels
Allowing the users to make use of the above 2 parts completes the picture, as they can then choose what they want to risk for what rewards.
I've recently learned of the Genode project which looks to be good enough to get this done. They hope to be at the "eat our own dog food" / self hosted stage before the end of 2012. They've been at it a while, and seem to really know what they are doing. I'm working on getting my own copy up and running in a virtualbox so I can see just how it all works in practice.
Let's fix computer security and make cyberwar impossible.
Obama said yes to it anyway for the same reasons as Bush did, so please NYT, stop making this political.
But Obama is the Peace Prize President. Of course his actions should be held to a different standard than Bush.
Sadly, the left seem to think that things which were evil when Bush did them are wonderful when Obama does them.
You see, several times in the past, the USA have whined and whinged about China cyberterror attacks.
Turns out they were officially doing the same thing themselves.
Moral high ground? Nuked.
They've signed SEVERAL treaties. For example NAFTA. They ignore that one to put a protectionist tax on Canadian Softwood Lumber.
And they're abrogating their treaty under the Nuclear Non-Proliferation Pact.
So I guess since you hate Iran for lying their asses off, you hate the USA for doing it too, right? Or is it only *small* countries doing this you have a problem with?
you of course mean devastated but don't forget that a good number of folks will quickly revert to "offline" type transactions.
Any person using FTFY or editing my postings agrees to a US$50.00 charge
This wasn't reported in 'The Onion' it was reported in the 'New York Times', which has been a yellow DNC mouthpiece for decades. They are about as reputable as Fox News.
They ran this story to give Obama a boost in the polls. They needed no facts.
John McAfee 'It was like that time I hired that Bangkok prostitute; to do my taxes, while I fucked my accountant'
Par for the course, /.
Obama orders an attack on Iran. = "It's Bush's fault!"
Sure, you're credible.
-Styopa
Have any of you calling me an idiot ever considered that the real enemy for Obama was Israel and the Congressional War Hawks who have been calling for Military Action against Iran for most the last decade?
By conducting this Cyber-Attack he not only derailed the Iranian Nuclear effort -- but he staved off Israel's promised Military Assault and quieted the voices at the Pentagon and Congress that were all for a Joint Offense with Israel against Iran.
Sometimes the "victory" isn't against the commonly perceived enemy -- but the enemy within. Personally, I applaud Obama for this effort. No blood was shed, no bullets fired or missiles launched and Israel's planned offensive did NOT happen and as such the US did not have to get involved in yet another war in the Mideast.
Sorry I had to spell it out for you -- but of course, the mob here who hopped on me to call me an idiot wer just utter idiots too stupid to see what I was talking about.
Maybe someday some of you will come to understand that just sitting there talking about it and writing letters only GOES SO FAR. At some point, action must be taken. And the action that Obama took was a far better action than Israel and some members of Congress wanted to conduct. Because if Obama hadn't done this, others would have made actions that would have forced the US to use traditional military action.
RTFA. Schneier questioned the the use of Stuxnet, not because he didn't see it as the humane alternative to bombing, but because of the blow back effect it had on the rest of the world's computer infrastructure. His real point was that, yes, we need to engage in diplomacy about cyber-warfare.
Cyber-warfare is not new, look at what the CIA did to the USSR's gas pipeline way back in the day. It's just now becoming a commonly understood concept.
Probably because it blurs the line a bit more. It's easy to see that bombing someone would be bad instead of negotiating. If someone prefers negotiation over all else, they would probably prefer open bombing to cloak & dagger stuff. They can atleast march against bombing.
http://soylentnews.org/~tibman
And just how many nuclear capable countries have the current bunch of war mongers invaded for a quick buck?
The US doesn't need to make weapons grade any more and it probably doesn't.
http://soylentnews.org/~tibman
Oh, you think I'm an Obama fan? Don't get me started, pal. Not everyone in this country is either a Democrat or Republican, just idiots like you.
What political party do you join when you don't like Bible-thumpers *or* hippies?
Now that the cat is out of the bag that we're using offensive cyber weapons against other sovereign nations to whom we are not currently in a state of war with, it opens us up to attack.
Let's say tomorrow the US announced that it was going to modernize it's nuclear weapons systems and had to build infrastructure to facilitate this, what leg would we have to stand on Iran developed offensive cyber weapons to prevent this?
Yes Francis, the world has gone crazy.
I am dubious of his conclusion though I am willing to hear his summation on this point.
Good point. And here is a way to move past this false choice:
http://www.pdfernhout.net/recognizing-irony-is-a-key-to-transcending-militarism.html
"Likewise, even United States three-letter agencies like the NSA and the CIA, as well as their foreign counterparts, are becoming ironic institutions in many ways. Despite probably having more computing power per square foot than any other place in the world, they seem not to have thought much about the implications of all that computer power and organized information to transform the world into a place of abundance for all. Cheap computing makes possible just about cheap everything else, as does the ability to make better designs through shared computing. I discuss that at length here: http://www.pdfernhout.net/post-scarcity-princeton.html
There is a fundamental mismatch between 21st century reality and 20th century security thinking. Those "security" agencies are using those tools of abundance, cooperation, and sharing mainly from a mindset of scarcity, competition, and secrecy. Given the power of 21st century technology as an amplifier (including as weapons of mass destruction), a scarcity-based approach to using such technology ultimately is just making us all insecure. Such powerful technologies of abundance, designed, organized, and used from a mindset of scarcity could well ironically doom us all whether through military robots, nukes, plagues, propaganda, or whatever else... Or alternatively, as Bucky Fuller and others have suggested, we could use such technologies to build a world that is abundant and secure for all."
A 21st century issue: the irony of technologies of abundance in the hands of those still thinking in terms of scarcity.
"International politics changed massively when we invented weapons of mass destruction. Suddenly wars between countries that both wield weapons of mass destruction became a realistic impossibility. MAD as a concept did something that nothing did in our entire history - mandate peace."
A related essay I wrote: "Problems of the MAD doctrine, their consequences, and positive alternatives" ...."
http://groups.google.com/group/virgle/msg/e34f9013282af9d7
"The policy of "Mutually Assured Destruction" (MAD) with strategic nuclear weapons policy is based on decision makers being rational and not wanting their own country destroyed (were they to use their nuclear weapons and receive reprisals or even just spreading radiation). This essay explores a few reasons why this MAD policy will ultimately fail due to irrationality or other reasons for bad decisions by humans or the bureaucracies they inhabit. This reasoning is also applicable to understanding why any similar policies about bioweapons or drones or nanotech and so on could also fail. Then the consequences of this are explored, and some alternatives suggested (including sharing information leading to healthier local communities and ultimately creating space habitats)
A 21st century issue: the irony of technologies of abundance in the hands of those still thinking in terms of scarcity.
Not at all. It's just an observation. The original post was
I was just clarifying that this was not a new choice, but rather a long-held and often-used policy. It's always been shadowy part of the big stick that Teddy Roosevelt talked about. It is a not-surprising outcome of a desire to achieve geo-political goals within the framework of a democratic republic that is naturally reluctant to support outright warfare.
Or to put it another way:
The USA is a bully! Run! - AC
You're noticing now? - me
The US gets away with a lot of stuff because most countries just don't have the resources to call them on it and risk it escalating to a hot war. Back during the Cold War, they mainly kept those activities to states that appeared to be shifting left politically because it could be justified to 1st world allies using the "Domino theory" and the Soviets clearly played the same game. With the collapse of the Soviet Union, "islamofascism" and "terrorism" are the new bogeymen and justification. However due to the USA's large economic and military power, capitulation or asymmetric warfare are the only two possible results whenever it engages in conflict with any other country, with only a few possible exceptions (Russia & China), so it's a self-fulfilling/self-entertaining prophecy. Balancing out that economic power was the original drive for the creation of the European Common Market and its successors.
It's going to be really interesting to see how the dynamic changes as China continues to modernize and assert its power over the next two decades. If China's recent use of cybernetic attacks is anything to judge by, they're probably going to start playing the same game. The USA's reputation as the Cold War knight in shining armour defending freedom and justice took a big hit internationally in the last decade, so it's going to be a lot harder to play the same game against China that they did against the Soviets, especially if the USA finds it hard to disengage from, and stays distracted by, the "War on Terror".
Which isn't to say that islamofascism and terrorism aren't a risk. Islamofascists and terrorists are winning the same type of converts that the Soviets did; they exploit the victims of the inequalities of opportunity and misery that many in the USA and other first world nations either turn a blind eye to or deliberately exploit. However you fight dangerous ideas by showing why they are flawed and by fixing the real underlying problems, not by trying to silence those who voice those ideas. You would think the country of the 1st Amendment would understand that.
Laissez lire, et laissez danser; ces deux amusements ne feront jamais de mal au monde. - Voltaire
For once I don't agree with Bruce Schneier... I don't think the US *created* Stuxnet, but maybe they customized it and used it against Iran.
On the principle of making cyberwarfare I think it's a valid way to fight that doesn't cost too many lives and in this case was guaranteed not to have any collateral damage in the form of civilians hurt.
Let there be no question about it: Iran must be prevented at all costs from acquiring nuclear weapons. If that fails we must revive the cold war strategy of a first strike in order to eradicate their capability to wage war. Fortunately the lunatics in charge are easily provoked so the obvious strategy must be to make them attack with nuclear weapons (which of course should be intercepted before they do harm), and then strike back with a similar and now justifiable nuclear attack that efficiently both destroys the megalomanical regime and their capability to create more nuclear weapons. Hopefully what rises from the ash is a new and more reasonable regime, like we saw it in Japan after they got hit by the Hiroshima and Nagasaki bombs.
"For every complex problem, there is a solution that is simple, neat, and wrong." -- H.L. Mencken (1880-1956) --
Its no surprise that the US and Isreal would be involved with damaging Iranian production. Its all they talk about. However, I would be pissed if I was Germany, because the virus attacked Siemens products. It really makes this company look weak on security like Microsoft.
Remember, it's not about cheap oil for people, but profitable oil for the oil companies.
It's definitely cheaper than say hmm.... invading Iran, kudos mr president, saving some gd ole benjamins in a time of financial downturn.