27C3: Adventures in analyzing Stuxnet (Bruce Dang from Microsoft)
Why Hacker News recommends it
HN recommends it as the definitive technical deep dive into Stuxnet's zero-days from someone who analyzed it first-hand.
What it is
Bruce Dang of Microsoft gives a 27C3 talk on how the Stuxnet vulnerabilities were found and analyzed. He walks through the techniques used to triage them and the details of each zero-day exploit, down to the opcode level.
Recommended by 8 HN commenters across 7 different months, 2011 to 2024.
What Hacker News said
Strong rec spudlyo · 2011-02 · on “Black ops: how HBGary wrote backdoors for the government”
LNK files can point to DLLs that get loaded by Explorer when it draws the icon for the link target. I only know this because I watched an excellent video explaining the 0-day vulnerabilities that stuxnet used by Microsoft leet hax0r Bruce Dang. [this video]
Strong rec JonnieCache · 2011-05 · on “Did the US write Stuxnet? Deputy Defense Secretary won't deny it”
Also, check out this excellent 27C3 presentation from Bruce Dang, a microsoft malware analyst, where he cracks numerous gags about mossad. [this video] It's well worth watching anyway, lots of good info on the various exploits used by stuxnet, down to the opcode level. He's a pretty funny guy as well.
Strong rec tbrock · 2013-02 · on “Stuxnet Missing Link Found, Resolves Some Mysteries Around the Cyberweapon”
If anyone hasn't seen this video from the Microsoft team analyzing how this went down, I highly suggest watching. I was on the edge of my seat! [this video]
Strong rec nodesocket · 2021-06 · on “Microsoft Patches Six Zero-Day Security Holes”
Are these on the same level as Stuxnet? For an amazing technical deep dive into each 0-day Stuxnet vulnerability watch this talk with Bruce Dang from Microsoft[1]. I really enjoy his natural speaking style (it's like talking about Stuxnet over beers with him). [1] [this video]
Recommends dmix · 2011-02 · on “Stuxnet is now on GitHub”
For those curious, a Microsoft employee broke down each of the exploits that Stuxnet used at a conference recently: [this video]
Recommends phlux · 2011-06 · on “Stuxnet Virus Weapon Now Being Sold On The Black Market”
Watch these in this order: [LINK] - brief overview great animation [LINK] - ted talk on stux [this video] detailed analysis of stuxnet the last one is long and Bruce appears to be an arrogant prick, but it is clear - cyber war has been here for a while.
Recommends phlux · 2011-06 · on “LulzSec releases trove of AZ law enforcement documents”
PSY-OP MOTHERFUCKER, CAN YOU HACK IT?! This is NOT script kiddies going at it, this is bio-stux.... See the following: Watch these in this order: [LINK] - brief overview great animation [LINK] - ted talk on stux [this video] . detailed analysis of stuxnet the last one is long and Bruce appears to be an arrogant prick, but it is clear - cyber war has been here for a while. --- As I have mentioned, cyber war is here - and the legislation is lacking in its awareness - but becuase we have incompetant douches in charge of tech legislation, we will have physical war used as a metaphor to cyber warfare and thus have draconian influences from physical imprisonment being applied to digital situations. Utt
Recommends samstave · 2016-02 · on “Unilateral Israeli changes to Stuxnet caused its exposure, angering US”
Stuxnet was such an amazing event. The speculation at first, the quasi confirmation a little later based on certain items in the code. The dissection of it and the tech talks by Microsoft and others on its design and build... And then that it had a successor - and now it comes out that Israel and US squabbling over what team did what which allowed it to be exposed. It is such an amazing cornerstone in the cyberpunk reality of where the world is heading. If you haven't watched the tech talks on stuxnet and duqu, please do - super interesting. [this video] [LINK] [LINK]