Hacker Newsnew | past | comments | ask | show | jobs | submit | r12477's commentslogin

Stuxnet has been well broken down and described. It had nothing to do with iPods with surreptitious recording capabilities.


Since you are an expert, can you explain the zero day that would be needed to get Stuxnet onto the SCADA/first computer?

Obviously the final product might not have used this iPod. It was a huge operation on many levels with failed projects. This iPod also obviously might not have been for recording, since that's a level one misdirect, oh it's secret spy recording device, person who's watched to much James Bond.

But how did they do the 'usb' zero day since you know it isn't a iPod?


I have incorporated the following macro abuse to prepend the number of arguments to a variadic functions into my projects: https://gist.github.com/61131/7a22ac46062ee292c2c8bd6d883d28.... It does introduce some overhead, but it suits my needs for the projects that I am working on.

That being said, I would like it if the default types for variadic functions were promoted from int/float to int64_t/double in order to be more reflective of the wider ranges supported by these types.


For binary constant notation, I have incorporated the following macro into my projects: https://gist.github.com/61131/009961b781f387ed1474ffaf19e375...


If this is the case, how feasible is it to adopt a new domain name? I understand that this may not be desirable, but given what appears to have been a maligned history, it may be the most prudent course of action to ensure that your new product does not suffer from guilt-by-association.


That'd be a last resort if we can't get it somehow whitelisted. But since the product isn't live, it is technically still possible.


Huh? Then how do you know other security products haven't blocked it? I'd say change it if it has bad records. And I'd do some research to see what that Domain used for before.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: