4 ms·
>Parker wrote a tool that analyzed similarities between the Stuxnet code and the code of some other well-known worms and applications and found that the code wa
by Helianthus16 16y ago
>Parker wrote a tool that analyzed similarities between the Stuxnet code and the code of some other well-known worms and applications and found that the code was fairly low quality.
well isn't that hand-wavy.
>For example, the command-and-control mechanism is poorly done and sends its traffic in the clear and the worm ended up propagating on the Internet, which was likely not the intent.
this is part speculative and part, in my subjective mind, stupid. propagating on the Internet seems a highly reasonable method to me. what do you expect it to use, facebook? maybe the constraint is that it has to express itself on the internet and therefore 'in the clear?'
>"This was probably not a western state. There were too many mistakes made. There's a lot that went wrong,"
Is that really so western-centric? this guy is seriously just reaching for criticism in order to grab headlines.
>Lawson concludes that whoever wrote Stuxnet likely was constrained by time and didn't think there was enough of a return to justify the investment of more time in advanced cloaking techniques.
That's at least reasonable, because in all honesty maybe there wasn't enough of a return. Lawson seems a better analyst than this Parker fellow.
- tptacek 16y agoNo, it is the opposite of hand-wavy. It is a guy getting up on stage and performing an actual technical analysis in front of his peers, rather than posting an anonymous message board post insulting someone they presumably don't know.
- khafra 16y agoIf he wrote a tool that broke up the decompiled stuxnet binary into n-grams and did principal component analysis, then used a a boosting classifier to put it in clusters of similarly machine-analysed code deemed by some group of experts to be "high," "medium," or "low" quality, that's an actual technical analysis. Its merits could be debatable, but it's technical. If all we know is that he wrote a tool that found the code to be of fairly low quality, he got up on stage in front of his peers and waved his hands.
- Helianthus16 16y agoMy judgment comes from the scant information in the article. I don't see his actual technical analysis, I see some claim that we can technically (mathematically) define code as good, fair, or poor, which sounds ridiculous. You're cherry-picking my arguments anyway.