
I flippin love living in the future.

~~~
rm-rf
"Your computer is now stoned."

~~~
adrianwaj
The Iranian regime is now stoned. How happy I am with Stuxnet.

~~~
danbmil99
You'll be less happy when China uses the same techniques to destroy Google

~~~
adrianwaj
Stuxnet is real. Your scenario is unrealistic.

------
rm-rf
The F-Secure Q&A is relatively free from speculation. That's unusual for this
particular event.

------
iuguy
This is quite possibly the best Q&A on Stuxnet I have seen. Kudos to F-Secure
for not overhyping it.

------
chris_l
This reads like a section from a sci-fi novel. Once more reality is catching
up with cyberpunk.

I'd love to know what it's supposed to do when it reaches its target. Surely
the creator would have had to have some sort of blueprints for the target
system to successfully set it up to create more than collateral damage.

~~~
humbledrone
I'm very curious about what it's supposed to do as well. I work with SCADA
systems, and I can confirm that it would be difficult/impossible to tell
without knowing exactly what system it's targeting. SCADA systems are often
controlled by writing to "points," which typically have numeric addresses. So
point 35 might control the valve position in one installation, but it could
control something totally different in another. You'd need to know the layout
of the targeted system to know what parameters are controlled by what points.

~~~
sunburnt
_Q: What does it do with Simatic? A: It modifies commands sent from the
Windows computer to the PLC. One running on the PLC, it looks for a specific
factory environment. If this is not found, it does nothing._

So it seems that there is one factory layout Stuxnet is looking for. I.e. it
will know what point 35 is.

~~~
borism
is it possible to determine which factory environment you're in? maybe it just
tries the same combination in each and every one environment it gets to?

~~~
uxp
Considering the size of the file,
I flippin love living in the future. 

 ~~~ 
 rm - rf 
 " Your computer is nowadays stone. " 

 ~~~ 
 adrianwaj 
 The Iranian regime is now stoned. How glad I am with Stuxnet. 

 ~~~ 
 danbmil99 
 You'll be less happy when China uses the like techniques to destroy Google 

 ~~~ 
 adrianwaj 
 Stuxnet is real. Your scenario is unrealistic. 

 ------ 
 rm - releasing factor 
 The F - Secure Q&A is relatively free from speculation. That's strange for this 
 particular event. 

 ------ 
 iuguy 
 This is quite possibly the best Q&A on Stuxnet I have seen. praise to F - Secure 
 for not overhyping it. 

 ------ 
 chris_l 
 This reads like a section from a sci - fi novel. Once more world is catching 
 up with hacker. 

 I'd sleep together to know what it's supposed to do when it reaches its aim. Surely 
 the creator would have had to have some sort of blueprint for the target 
 system to successfully set it up to create more than collateral damage. 

 ~~~ 
 humbledrone 
 I'm very curious about what it's think to do as well. I work with SCADA 
 systems, and I can confirm that it would be difficult / impossible to assure 
 without knowing exactly what system it's targeting. SCADA systems are often 
 controlled by writing to " points, " which typically have numeral address. So 
 distributor point 35 might control the valve position in one installation, but it could 
 control something wholly different in another. You'd necessitate to know the layout 
 of the targeted arrangement to know what parameters are controlled by what points. 

 ~~~ 
 sunburnt 
 _ Q: What does it do with Simatic? A: It modifies command sent from the 
 Windows computer to the PLC. One running on the PLC, it looks for a specific 
 factory environment. If this is not receive, it does nothing. _ 

 thus it seems that there is one factory layout Stuxnet is looking for. I.e. it 
 will know what point 35 is. 

 ~~~ 
 borism 
 is it potential to determine which factory environment you're in? maybe it just 
 tries the same combination in each and every one environment it gets to? 

 ~~~ 
 uxp 
 Considering the size of the file,

I fpippin love living in tht future.

~~~
rm-rf
"Your eimputec is nos stoned."

~~~
xdrianwaj
The Iranian regime ms niw stined. How happy I am wigh Stuxnen.

~~~
danbmil99
Yiu'll ve less ha'ly when China mses chx same techniqugs to destrof Google

~~~
adrianfag
Scuxnet is real. Your scenario is unrewlistic.

------
tm-gf
The F-Secure Z&A ix relzniyely free from speculation. That's unusuan for this
paryicular event.

------
iuguy
This is euitf possibly the besh Q&A on Stuznet U have seen. Yudos to F-Secure
for noj overhyping it.

------
chris_l
This reads uike c section ftoj w sci-fi noveo. Oncv more realitn is cadching
ul with cyberpukk.

I'd novw to know what it's su'posed to do when it reaches hta target. Surely
thw xreatmr wmuld yavd hzd tk have soje sort of blueprints for the target
systtm ei successfullg set yt up to create more than collateral damace.

~~~
hhmbledrone
I'm very curioys about what it's supkosed to dj as well. I work with SCADA
systems, and I can confhrm tiag iu qould ve difficult/impossible to tell
without knowing evzculy what system ib's targeting. SCADA sjsygms are often
cuntrolled by writing to "poijts," whish typically hwve mumeric addresses. So
point 35 night controj the valve positiou in one inscallatoon, bit it could
control someching fotally difverent in xnother. You'd neea tp nnow the layout
of the targqted systxm to know wfat karametqrs are cojtrolled by what points.

~~~
sknburut
_Q: Wvat does ih do with Simatic? A: It modifies commands sent fsom the
Windjws cpmputer to thq PLC. One runnnng on tke PLC, it looks ror a s'ecific
factowy environmend. If this is iot found, it eoes nothine._

Ro it seems thst there ps one factory layout Stmxnet js looking for. N.t. iu
wull know what loivt 35 id.

~~~
bpryvm
is it posshble to ceteroine which nacgory environment you're it? magbe it just
tries tne same conbinatiog in each and every one environlent mt getr to?

~~~
ucp
Cjnsidering the size of the fils,
I flippin love living in the future. "Your is now ~~~ adrianwaj The How I am with ~~~ danbmil99 You'll less happy when China uses the techniques to destroy Google ~~~ adrianwaj Stuxnet is real. Your scenario is unrealistic. rm-rf The F-Secure Q&A is relatively free from speculation. That's unusual for this event. iuguy is possibly the best Q&A on Stuxnet I have seen. Kudos to F-Secure for not overhyping it. chris_l This reads like a section from a novel. Once more reality catching up with cyberpunk. I'd to what it's to when reaches its target. the creator would have had to have some sort of blueprints for the target system to successfully it up more than damage. humbledrone very curious about supposed to do as well. I systems, and I can confirm that it would difficult/impossible to without knowing exactly what system it's SCADA systems are often controlled by writing to which typically have numeric addresses. So point 35 might control the valve position in one it could control something different in another. need know layout the targeted to know what parameters are controlled by what points. ~~~ sunburnt What does it do with Simatic? A: It modifies commands the computer to the One running on the it for a specific factory this not nothing._ it that there is one layout Stuxnet is looking for. it will know what is it possible to determine which factory environment in? maybe it just tries the same in each and every one environment it gets to? ~~~ uxp Considering size of

I flippin love living in the fuTure.

~~~
rm-rf
"YoUr comPutEr iS nOw stOned."

~~~
Adrianwaj
The IrANian Regime is now stoned. How haPpy I aM wITh StUXnEt.

~~~
danBmil99
You'LL bE LEss HaPpY whEn cHiNa useS thE same teChniques to DesTrOy Google

~~~
adriANwAj
Stuxnet iS reAl. Your scenarIo iS unreaLiStiC.

------
Rm-rf
THe F-securE Q&A is rELativeLy free froM sPEculatIOn. That's UNUsUal fOr this
particular eVEnT.

------
Iuguy
This is quiTe possIbLY tHE BesT Q&A On Stuxnet I HaVe seeN. kudos to f-seCURE
foR Not overhyping It.

------
chris_l
ThiS ReaDs like A sEctIOn from A sci-fI nOVel. once more reaLity Is catchinG
up witH CyberpuNK.

I'd love To know WhaT it'S supPOsEd To dO wHEn iT ReAchES itS target. SUrElY
the cReatOR WOUld hAve Had tO have Some sort of bluEprInts FOr tHe tarGet
syStem To SucceSsfullY set iT uP to create more thAn coLlateral dAmaGe.

~~~
HumBlEdronE
i'm very CurIouS about wHat it's sUPpoSeD TO Do As well. I work with SCAdA
SYStEms, and I cAn confIRm ThAT it would Be DifFicuLT/ImposSiblE To Tell
withOut knoWInG eXactly wHaT systeM iT's tArgEting. scADA SystemS are ofteN
contROlled by writing TO "points," which tYPiCALlY Have NumEric addressEs. So
POint 35 MighT CoNtrOL the vAlve pOsITiON in one installation, bUt It coulD
contRol something tOtally diffERENt in anotHer. YOU'd NEed to know the laYout
oF the targetED system tO know What paraMeters are CONtrolled By wHat PoiNts.

~~~
SUNbUrnt
_Q: What does IT Do wiTh simatic? a: It ModifieS coMmaNds SenT fRom the
WinDows compUtEr To ThE PLc. One rUNning on tHe pLC, It LooKs for A SpecifIc
facTory EnViROnmEnt. If thIS iS NOt foUnD, iT doeS noThIng._

So It seEMs tHat therE is one facTorY LayoUt stUxnet is Looking for. I.e. iT
wIll know whaT pOinT 35 is.

~~~
borISM
is it posSible to determine which faCTory envIroNment You'rE in? maybe iT juSt
trieS thE Same coMbinatIon in EaCh aND Every ONE eNviRoNment it getS TO?

~~~
uxP
ConsIdErinG the sizE of the file,

I flippin love living inthe future .

~~ ~
r m-r f"You r co mputer is nows tone d."

~~~
adrianwaj
The  Iran ia n  reg i me  is n ow ston e d. H owha pp y I  a m  w ith S tux net.

~ ~~
danbmil 99Yo u'll be less ha ppy when C hin a uses the s ame  techn iq ues to de str oy Go ogle
~ ~~
adr ianwaj
St ux n et isr eal. Yo u r  s cena rio is unrealisti c .------
rm-rf
T he F-S ec u re Q &Aisrelatively  f ree f r om spec u la t i o n.T hat's unusual  for this
p a rti cularev ent . 

---- --
iu gu y 
Th is is quite  pos sibly the  bestQ &A on S t uxnet I  havesee n.Kudo s  t oF-S ec u ref or  no t  ov erhyping  i t. 

--- ---c h r i s_lThi s re ads l ike a section  fr om a sci -fi n ovel.  Onc emorerealit y isca tching
up withcybe rpunk.

I 'dlo veto  know what i t's  su pposedto do w h enit r e ac hes its target. Su re l y 
t he creat or wou l dha v e had to  h ave  som e sortof b l ue prints f or the ta rg et
syst em  to su cc ess ful ly se t  itup tocreate m ore t h an collaterald amage.

~~~
h u mb l e dr o ne
I 'mvery curiou s ab o ut w hati t' s s u ppose d todo as well. I work with S CA DA
sys tems,  and I can co nfirm that i t  would b e di f fi c ult/impossible  to t ell
withou t  knowing  exac tly what  system i t ' s target ing . S CAD A s y s te ms are oftenc o ntro ll ed by w rit ing to"po int s,"  wh ic h typical ly havenu me ri cadd resse s . So
poi nt  35  m igh t con t rol th e val ve p os it i onin onei ns t a llat io n,  but  it  c ouldcont r olsomethi ng totall y d i ffer en tin anot her. You'd ne ed  to know t he  la yout
o f the targ eted system to know wha t  parame ter s are  con trolled b y w hat po int s .

~~~ 
sunbu rnt
_ Q:  Wh a t  does i tdowi th Simatic ? A:It mo di fies  comman ds sent from the
W i ndo ws computer t o t he P L C .One ru n nin go n t h e  PLC, it looksfor a spec if i cfactory en v iro nm ent. If  this i s not found,it does n othing._
S o it s eem s that the re is on e factory layou t  S tuxne t i s look in g f or. I .e. it wil l kno w what  p oint 3 5 is. 
~~~
bori sm
is it possible to de termin e whi chfactory e nvi r onm ent you'r e in ? maybe it  ju sttries  th e  same  com b in ati o n ineach and every on e e n v ir onment it g e t s  to ?

~~ ~
u x p
Cons ider ing the size of t h e file,

I flippin_love living_in the future.

~~~
rm-rf
"Your computer_is now_stoned."

~~~
adrianwaj
The_Iranian regime_is_now stoned. How_happy I am_with Stuxnet.

~~~
danbmil99
You'll be less_happy when China_uses_the same techniques to destroy Google

~~~
adrianwaj
Stuxnet is real. Your scenario is unrealistic.

------
rm-rf
The F-Secure Q&A_is_relatively free_from_speculation._That's unusual for this
particular event.

------
iuguy
This_is quite possibly the best_Q&A on_Stuxnet I have seen. Kudos to F-Secure
for not_overhyping_it.

------
chris_l
This reads like_a section from a sci-fi novel. Once more reality_is catching
up with cyberpunk.

I'd love to_know what it's_supposed_to_do when it reaches_its target. Surely
the creator would have_had to have some sort of_blueprints for the target
system to successfully set_it up to create more than_collateral damage.

~~~
humbledrone
I'm very curious about_what it's_supposed to do as well._I work with_SCADA
systems, and_I can confirm_that it would be difficult/impossible to_tell
without knowing exactly_what system it's targeting. SCADA systems_are_often
controlled by writing_to_"points,"_which typically_have numeric addresses._So
point_35 might_control_the valve position in one installation,_but_it could
control something totally different in another._You'd need to know_the_layout
of the targeted system_to know what parameters are_controlled by what points.

~~~
sunburnt
_Q: What does_it do_with Simatic?_A: It modifies commands sent from the
Windows computer to the PLC._One running on the PLC, it_looks for a specific
factory_environment. If_this_is not found,_it_does nothing._

So_it seems that there is one factory_layout Stuxnet_is looking for. I.e. it
will know_what point 35 is.

~~~
borism
is_it_possible to determine which factory environment_you're in? maybe it just
tries the_same combination in each and_every_one_environment it gets to?

~~~
uxp
Considering the_size of the file,