4 ms·
“It turns out there is always an idiot around who doesn’t think much about the thumb drive in their hand.” Good quote. And there seems to always be a Windows P
by yaix 14y ago
“It turns out there is always an idiot around who doesn’t think much about the thumb drive in their hand.”
Good quote. And there seems to always be a Windows PC around that auto-runs anything you stick into it.
- deleted 14y ago[deleted]
- adimitrov 14y agoThe actual exploit stuxnet used to get onto Windows PCs didn't require the computer to have autorun turned on. The exploit runs on all newer versions of Windows (XP-7) and it triggers by browsing the device's contents with Explorer. (Specifically, it exploits a method Explorer uses to show icons on .lnk (Windows' sym-links) files.) http://www.geek.com/articles/news/new-stuxnet-usb-exploit-threatens-windows-users-20100719/ http://www.geek.com/articles/news/new-stuxnet-usb-exploit-th...
- morsch 14y agoYou're corroborating the grand-parent's point that Windows PCs autorun everything you stick into them. Granted, in this case it's not by design, but still...
- adimitrov 14y agoThat's kinda the point: blaming autorun will make people who are "smart" enough to switch off autorun feel secure. But they aren't. There are vulnerabilities far more insidious than autorun.
- excuse-me 14y agoGood job there are no Windows machines used for any critical infrastructure in our country then.
- fdr 14y agoThe most interesting information in here to me by far: > In an interesting twist, it was discovered that the Stuxnet > malware group makes use of device drivers which were digitally > signed to make them appear as though they originated from > hardware vendor Realtek Semiconductor Corp. The digital > certificate has since been revoked but it is worrying that > malware writers seemingly had access to a private key issued to > a trusted supplier of device drivers.
- dminor 14y agoYeah, but you have to consider they'd also say this even if a double-agent was used.
- drzaiusapelord 14y agoNope, the stuxnet crew had a couple of zero days in their pocket. No need to do anything but stick it in. Limited user account? Doesn't matter, it performed a privledge escalation. All IT is just gum and bailing wire. I don't even think its possible to truly secure a non-trivial OS. I'm just surprised at how infrequent stuff like this gets found out.