Hacker News new | ask | show | jobs
by Godel_unicode 2611 days ago
So you think that 80% of attacks are better than stuxnet?
2 comments

Correct me if I’m wrong but stuxnet was designed for a purpose and it accomplished that purpose. Eventually being discovered was no doubt an understanding from the authors.

Compare that to unauthorized access to a machine and cleaning the logs behind you... One doesn’t have to be more brilliant than the authors of stuxnet to do something illegal without getting caught.

They never caught the stuxnet attacks. They caught the malware that was spreading far outside of its target. Not quite the same thing.
So you're saying they caught the attackers using one of the most sophisticated pieces of malware ever created. Good, we agree.
No more “So you're saying...” please. It's never true.
They caught the malware not the attackers. Otherwise we would be talking about the authors.
Given that the malware was seriously breaking shit, it wasn't all that hard to catch. I'm sure that at first they were looking for bugs, and thgen it became clear that it was too intentional.
I thought it was pretty well-established that Stuxnet was created/authored by TAO within the NSA.
Thats the belief but was it truly ever confirmed? I dont doubt it it sounds like a meme worthy of belief and I lean towards it but I dont recall ever finding a confirmation. Also saying they were caught implies the law caught them and arrested them.
It appears a US military general was pardoned by Obama for leaking details and US/Israeli involvement in it.

https://foreignpolicy.com/2016/10/17/obamas-general-pleads-g...

As far as I know Stuxnet didn't break any US/Isreal laws. Of course it broke Iranian laws, though.

I think Obama said "no comment" to reporters, but then basically admits it by talking about how he regrets that this information got out into the public.

What would you consider as a confirmation? Without someone coming out and saying "we're the ones who did it", it's very unlikely that it'll be ever be confirmed.

The best you can do is to make some educated guesses (by looking at the timestamps, coding patterns, comments in the code, who might be interested in hacking the target, political connotation to the attacks etc.). That's usually how state-sponsored attacks get attributed.

For example, "Guccifer" used GTM+3 settings and attacked DNC a few hours after Trump publicly "hoped" that Russians will find the emails. That doesn't confirm that it was sponsored by Russia, but it makes it an educated guess.