3 ms·
Buried in the article: "Whoever created Stuxnet developed four previously unknown zero-day attacks and a peer-to-peer communications system, compromised digital
by allenp 16y ago
Buried in the article: "Whoever created Stuxnet developed four previously unknown zero-day attacks and a peer-to-peer communications system, compromised digital certificates belonging to Realtek Semiconductor and JMicron Technology, and displayed extensive knowledge of industrial systems."
Sounds like Siemens has some work to do, although I wouldn't be too hard on them if the CIA or another state is really launching these attacks.
- bd_at_rivenhill 16y agoIf it really is the CIA, then Siemens might actually be in on it. Bonus for them if they can charge the Iranians to patch the holes that Stuxnet has exposed while continuing to feed the agency with new ones.
- niels_olson 16y agoWho signed Jmicron's and Realtek's certificates? That cert authority may be in on it as well.
- stcredzero 16y agoThat cert authority may be I. On it as well. Typo or confessing?
- niels_olson 16y agocorrect. I was typing on a phone while shivering in a train after riding my bike to the station
- varjag 16y agoSiemens AG is not quite an American company.
- dkarl 16y agoWould that stop them from working for the CIA? Corporations are about as patriotic as the money they're paid with.
- varjag 16y agoIt most definitely would, since Siemens as a company is too expensive and complicated to bribe - even on CIA scale. Also it is public, and is too bureaucratic to get away with that without a trace. Of course nothing prevents recruiting an engineer or two as CIA operatives, but it's not the same as involving the company.
- sp332 16y agoYou should definitely blame Siemens. The default password is hard-coded into the system. If you change the password from the default, the system crashes!