Bonum Certa Men Certa

The Lessons of Stuxnet: Never Use Microsoft Windows

The NSA is playing with nukes

Missiles



Summary: Windows is sufficiently 'NSA-compatible' for remote compromise and physical damage (sabotage) to highly sensitive, high-risk equipment

MANY news reports from around Friday [1-13] made it abundantly clear that Stuxnet, an Israel- and US-made virus that targets Microsoft Windows, was deployed not only in Iran (which uses Windows and Microsoft Linux) but also deployed (albeit unsuccessfully) in North Korea.



It is worth noting that Stuxnet was developed not only in the US but also in Israel and much of Microsoft's software development for 'security' is also done in Israel, so it might not detect Stuxnet (by design).

"Imagine the media reaction if some nation's government tried to install viruses in nuclear facilities in the US..."News from North Korea should remind any nation with military facilities (that's about every nation on Earth) to dodge Microsoft Windows. Turkey, for instance, reportedly moved its army to GNU/Linux and several other nations make similar moves for security reasons. In order to explain North Korea's resistance to the infection some corporation media likes to highlight "near-complete isolation" (see below) rather than reliance on GNU/Linux. The ToryGraph (see below) calls Stuxnet a "computer virus" even through it is uniquely a Microsoft Windows virus. Imagine the media reaction if some nation's government tried to install viruses in nuclear facilities in the US...

This is by no means defence of North Korea; it's just that the story makes is abundantly clear that, Microsoft's special relationship with the NSA aside, Windows is a target. Even Western governments target it. The NSA habitually said that it worried about attacks on its electric grid while hypocritically enough it is attacking nuclear facilities in other countries, never mind the risk of "blowback" or the "fallout" (pun intended) such aggressive actions may consequently bring. Pentagon would label this an "act of [cyber] war".

Related/contextual items from the news:



  1. NSA eggheads tried to bork Nork nukes with Stuxnet. It failed – report
    The NSA tried to wreck North Korea's nuclear weapons lab using the centrifuge-knackering malware Stuxnet, and ultimately failed, multiple intelligence sources claim.


  2. Pyongyang 1, NSA 0: U.S. Tried and Failed to Hack North Korea’s Nuclear Infrastructure
    By almost completely shutting itself off from the rest of the world, the North Korean government has denied its people and society access to the fruits of the digital communications revolution. It has also reportedly helped stymie a U.S. cyberattack on the country’s nuclear infrastructure modeled on the so-called Stuxnet virus the United States and Israel used against Iranian centrifuges.
  3. The NSA reportedly tried -- but failed -- to use a Stuxnet variant against North Korea
    Right around the time that the Stuxnet attack so famously sabotaged Iran’s nuclear program in 2009 and 2010, the U.S. National Security Agency reportedly was trying something similar against North Korea.

    The NSA-led U.S. effort used a version of the Stuxnet virus designed to be activated by Korean-language computer settings, but it ultimately failed to sabotage North Korea’s nuclear weapons program, according to a Friday Reuters report, which attributed the information to people familiar with the campaign.


  4. NSA tried Stuxnet cyber-attack on North Korea five years ago but failed
    The US tried to deploy a version of the Stuxnet computer virus to attack North Korea’s nuclear weapons programme five years ago but ultimately failed, according to people familiar with the covert campaign.
  5. Report: US tried Stuxnet variant on N. Korean nuke program, failed
  6. US tried to bring down North Korean missile programme with computer virus
  7. Report: U.S. failed to sabotage North Korean nuclear program with Stuxnet-twin
  8. Report: US cyberattack on North Korea was ineffective
  9. Why Did a US Cyber Attack on North Korea Fail?
  10. US Tried, Failed To Sabotage North Korea Nuclear Weapons Program With Stuxnet-Style Cyber Attack
  11. US Reportedly Launched Stuxnet Attack Against North Korea
  12. US Failed at Planting Stuxnet-Style Computer Bug in N. Korea Nuke Program
  13. US reportedly tried to destroy North Korea’s nuclear program with a Stuxnet-type virus


Recent Techrights' Posts

Linux is Released Too Often, Tested Insufficiently (Same as Chromium, Firefox, and Systemd)
Driven by schedule, not quality (objective criterion)
When I discovered people trafficking in open source software
Reprinted with permission from Daniel Pocock
Over at Tux Machines...
GNU/Linux news for the past day
 
IRC Proceedings: Sunday, May 12, 2024
IRC logs for Sunday, May 12, 2024
Over at Tux Machines...
GNU/Linux news for the past day
GNU/Linux Rises to Record High in Macao
iOS and Android are very big there
When Lunatics Attack Your Family (Especially Women)
The attacks on my wife and my mom are rather revealing. These are acts of extreme misogyny.
Debian: Let's Pretend We Never Knew Daniel Pocock
Ad hominem is what happens when the message is hard to dispute
DPL Sam Hartman proves blackmail is alive and well in Debian
Reprinted with permission from disguised.work
What is a safe space?
Reprinted with permission from the Free Software Fellowship
Does Debian deserve an independent news service?
Reprinted with permission from disguised.work
Linux.com So Neglected If Not Abandoned That It Promotes Deals That Expired 4 Weeks Ago
Quite some "stewardship" by the Linux Foundation
The Fall of Meritocracy in Tech
nuff said
Microsoft Has Lost Malta
Android has caught up
In Asia, Baidu Has Become Bigger Than Bing and Yandex is Getting There Too
XBox and Bing are going through existential crises
"Having IBM Next to Your Name is a Scarlet Letter"
IBM staff just motivated not to work
Techrights Browsing Made Easier
a draft for discussion
Links 12/05/2024: XBox Founders Say Microsoft Lost Its Identity
Links for the day
Gemini Links 12/05/2024: Enshitification and Mind Maps
Links for the day
Aside From Red Hat Spam and Partisan Media There's a Lingering Rumour of Layoffs
Some rumour said IBM had second thoughts about a WARN notice and delayed that a bit
The Albanian open source community is very healthy indeed
Windows nosedives from 99.1% to a lot less
Web Sites Hijacked by WIPO on Behalf of Microsoft-Sponsored SPI (and People Looking to Hide Embarrassing Facts)
debian.chat; debiancommunity.org; debian.day; debian.family; debian.finance; debian.giving; debiangnulinux.org; debian.guide; debian.news; debian.plus; debianproject.community; debianproject.org; debian.team; debian.video
Julian Assange on Privacy of People, Even Little Children
Facebook/Google (or GAFAM, an acronym I coined with Assange) knows you better than your mom knows you
[Meme] Miscomprehension of GDPR
Social control in general is a ticking timebomb
In Haiti, the Market Share of Windows Collapsed (From 97% to 27% on Desktops/Laptops)
A couple of months ago Windows was measured at 3.04%
In Most Countries It's Still Possible Not to Have a 'Smartphone' and to Pay for Nearly Everything With Cash
Withdrawing money will be possible as long as enough people use many ATMs (cash machines)
Expect Lots of Material From Daniel Pocock as Election Day Nears
The experiences of Daniel Pocock were an excellent example of reprisal or retribution against either whistleblowers or people who give a voice to whistleblowers
I've Been Promoting Free Software for Over 25 Years
I wrote my first computer program when I was about 14, maybe a little younger (I have visual memory of it)
Reminder: Richard Stallman's Talk is This Week in Paris (and in French)
Defending rms isn't the same as defending everything he has ever said
IRC Proceedings: Saturday, May 11, 2024
IRC logs for Saturday, May 11, 2024
Online Bullying (Trying to Make People Unhappy)
Narcissists and bullies behind mice and keyboards, no honesty or fact-checking required
Talk About Software Freedom
"Linux" and "BSD" may mean a lot to more and more people, but they're still just brands or acronyms
Windows in South Korea: From 98.5% in 2010 to About 30% (Android Rises to Almost 50%)
Samsung ships like a million Linux devices per day
Improving Site Navigation for Easier Discovery and Catch-ups
This site is run by code we wrote ourselves
LibrePlanet 2024 Recordings
Let's hope independent recordings by viewers can help recovery of "lost talks" (recordings)
GNU/Linux Reaches 11% Market Share in the United States Of America - an All-Time High
The United States Of America is where the operating system started (Boston) and where Linus Torvalds works (Portland)
[Meme] Being Believed, Not Censored or Defamed
Daniel Pocock, Zini, and John Sullivan (FSF)
Links 11/05/2024: XBox Crisis, Spotify Exodus Continues
Links for the day
Gemini Links 11/05/2024: Why to Delete GitHub
Links for the day
In Europe, Bing Fell Every Month This Year, Lost a Considerable Share Since "Bing Chat" and All the Chatbot Hype
Microsoft's Bing has had many layoffs lately
Links 11/05/2024: Analysis of the Microsoft Crisis and Backdoor-Looking Bugs
Links for the day
Attacking the Messenger?
Stack Overflow and LLM licencing
Microsoft Fired Loads of Staff in Kenya, Which is Another Large Country Where GNU/Linux Has Grown a Lot
Microsoft pays Kenyans only 2 dollars an hour for an IT/office job
Knowing the True History of Debian, Owing to Irish Debian Developer Daniel Pocock (Currently Running to Become Member of the European Parliament)
Irish-Australian and scapegoat of a highly dysfunctional 'Debian family'
Attacking by Credentials
Modest people do not demand fancy titles
Microsoft Windows Used to Have 99% of the OS Market in Jordan, Now It's Just 13% (Less Than iOS)
Based on the data of statCounter, GNU/Linux in Jordan climbed from 0.62% in May 2014 to nearly 5% right now
More Nations Are Reaching and Exceeding 5% Market Share for GNU/Linux, Microsoft Wants to be Bailed Out Again
Microsoft is once again reaching out to Biden for a bailout - a subject we'll cover in a video some time this weekend
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Friday, May 10, 2024
IRC logs for Friday, May 10, 2024
[Meme] What Do You Call a Woman Who Does BDS on Free Software? Elana Hamasman.
Here are some confused thoughts
[Meme] Mission Aborted
Mission Aborted: cancel RMS
Taking Things Up a Notch
we strive/aim towards 15-25 new pages per day, i.e. around 500 per month or 6,000 per year