24 ms·

Would it have been easier or harder to implement Stuxnet if the target networks were running some sort of linux? Or if it would've been a mac-only facility? I'

Would it have been easier or harder to implement Stuxnet if the target networks were running some sort of linux? Or if it would've been a mac-only facility? I'm curious.

Tepix 8y ago
Short version: Some things would be easier, others harder.
Piskvorrr 8y ago
Smaller platforms (which Linux and Mac OS are, compared to Windows) draw less interest (both in exploits and scrutiny against exploits), and fragmented platforms (Linux) are harder to code for (SystemV? systemd? something else entirely?). I guess that it would have required more effort - but at this level of involvement, I would say that the result would have been achieved regardless.
- wepple 8y ago
  The stuxnet dev team managed to get their hands on the exact same centrifuges as used in Natanz, so getting replica Linux control systems would’ve been a walk in the park. Also, “less interest” is irrelevant when we are talking about nation states picking a specific target and throwing considerable engineering resource at exploitation.
chatmasta 8y ago
Linux and Mac have bugs just like Windows. The only reason they have a reputation of being safer is because windows dominates marketshare, so any "spray and pray" type virus will naturally target windows over mac/linux. On the other hand, if you or your organization is the victim of a targeted hack, it makes no difference what OS you're running. Any sufficiently motivated and skilled attacker will eventually find a way to exploit it. As long as new software continues to be released, there will always be bugs. There is no security panacea.
- diffeomorphism 8y ago
  > The only reason they have a reputation of being safer is because windows dominates marketshare ... and centralized updates for all software and libraries and make it hard to use old libraries and selinux and ... Of course any software has bugs, but "only reason" is very much false equivocation.
hobofan 8y ago
As the other comments point out, any OS will have bugs. But it is widely believed that Stuxnet was initiated from the US, and Microsoft is a US company, so...

Would it have been easier or harder to implement Stuxnet if the target networks were running some sort of linux? Or if it would've been a mac-only facility? I'm curious.

Tepix 8y ago

Short version: Some things would be easier, others harder.

Piskvorrr 8y ago

Smaller platforms (which Linux and Mac OS are, compared to Windows) draw less interest (both in exploits and scrutiny against exploits), and fragmented platforms (Linux) are harder to code for (SystemV? systemd? something else entirely?). I guess that it would have required more effort - but at this level of involvement, I would say that the result would have been achieved regardless.

wepple 8y ago
The stuxnet dev team managed to get their hands on the exact same centrifuges as used in Natanz, so getting replica Linux control systems would’ve been a walk in the park. Also, “less interest” is irrelevant when we are talking about nation states picking a specific target and throwing considerable engineering resource at exploitation.

chatmasta 8y ago

Linux and Mac have bugs just like Windows. The only reason they have a reputation of being safer is because windows dominates marketshare, so any "spray and pray" type virus will naturally target windows over mac/linux. On the other hand, if you or your organization is the victim of a targeted hack, it makes no difference what OS you're running. Any sufficiently motivated and skilled attacker will eventually find a way to exploit it. As long as new software continues to be released, there will always be bugs. There is no security panacea.

diffeomorphism 8y ago
> The only reason they have a reputation of being safer is because windows dominates marketshare ... and centralized updates for all software and libraries and make it hard to use old libraries and selinux and ... Of course any software has bugs, but "only reason" is very much false equivocation.

hobofan 8y ago

As the other comments point out, any OS will have bugs. But it is widely believed that Stuxnet was initiated from the US, and Microsoft is a US company, so...