←back to thread

433 points zdw | 7 comments | | HN request time: 0.001s | source | bottom
Show context
reenorap ◴[] No.45658455[source]
There needs to be a law that all nuclear and nuclear-adjacent facilities have no connection to the Internet. The fact it's allowed is unbelievable.
replies(16): >>45658869 #>>45658922 #>>45659008 #>>45659125 #>>45659155 #>>45659165 #>>45659210 #>>45659242 #>>45659399 #>>45659433 #>>45659476 #>>45659542 #>>45659733 #>>45660029 #>>45661258 #>>45666322 #
1. 0_____0 ◴[] No.45659433[source]
Being airgapped didn't help Iran avoid Stuxnet.
replies(5): >>45659531 #>>45659627 #>>45659665 #>>45660573 #>>45660806 #
2. sgjohnson ◴[] No.45659531[source]
That also had a HUMINT element.
replies(1): >>45660669 #
3. bell-cot ◴[] No.45659627[source]
No, but it made the attacker's job 10000X more difficult.
4. the_af ◴[] No.45659665[source]
Defense in depth is still valuable.
5. aspenmayer ◴[] No.45660573[source]
To be fair, it didn’t help the rest of us avoid Stuxnet, either.

https://en.wikipedia.org/wiki/Operation_Olympic_Games#Histor...

> A programming error later caused the worm to spread to computers outside of Natanz. When an engineer "left Natanz and connected [his] computer to the Internet, the American- and Israeli-made bug failed to recognize that its environment had changed." The code replicated on the Internet and was subsequently exposed for public dissemination. IT security firms Symantec and Kaspersky Lab have since examined Stuxnet. It is unclear whether the United States or Israel introduced the programming error.

Also bearing mention is Flame, which is often left out when Stuxnet comes up, but which was allegedly part of the wider operation.

https://en.wikipedia.org/wiki/Operation_Olympic_Games#Signif...

> The Washington Post reported that Flame malware was also part of Olympic Games.

https://www.washingtonpost.com/world/national-security/us-is... | https://web.archive.org/web/20220322045917/https://www.washi... | https://archive.is/6hRl7

> “We are now 100 percent sure that the Stuxnet and Flame groups worked together,” said Roel Schouwenberg, a Boston-based senior researcher with Kaspersky Lab.

> The firm also determined that the Flame malware predates Stuxnet. “It looks like the Flame platform was used as a kickstarter of sorts to get the Stuxnet project going,” Schouwenberg said.

https://en.wikipedia.org/wiki/Flame_(malware)

6. aspenmayer ◴[] No.45660669[source]
It’s possible that the (un)timely demise of the individual involved also had a HUMINT element as well.

https://en.wikipedia.org/wiki/Operation_Olympic_Games#Histor...

> Dutch engineer Erik van Sabben allegedly infiltrated the Natanz nuclear facility on behalf of Dutch intelligence and installed equipment infected with Stuxnet. He died two weeks after the Stuxnet attack at age 36 in an apparent single-vehicle motorcycle accident in Dubai.

https://en.wikipedia.org/wiki/Erik_van_Sabben

7. apstls ◴[] No.45660806[source]
There is likely a small number of people who could collectively list out the events it _did_ help Iran avoid.