27C3: Adventures in analyzing Stuxnet (Bruce Dang from Microsoft)

[Dragonaushproduction]

about 15 minutes could have been shaved off if they would have taken the time to edit the video

[mikekotsch]

2 people disliked = Stuxnet programmers!

[sirtokealot999]

im sorry but you should have edited that douchbag out of the first 3 minutes, who the fuck cares about free seats

[PayPuh]

One year later and this is still talk still amazes me with the simple efficiency of Stuxnet.

[louiseiful]

why do I care about the seats. how long must this go on.seats seats seats who has a free seat

[eseks]

why the fuck is the seat talk included in this

[869749856]

I don't care about the fucking seats.

[razial36]

Anyway to transform stuxnet into something that can assist instead of destroy technology?

[Nubiex7]

So I'm guessing Iran will be switching to Linux now?

[IVandelayIndsutriesI]

@Nubiex7 Yeah, they don't have enough money to get Macbooks for everyone.

[blad3runn69]

yup

[dandymcgee]

Awesome talk.. thanks.

[lolzormachine]

"...And Martin, where are you from?"

"Austria."

"Oh, nice!..Anymore free seats left?...None??..."



[JustAnNormalKid]

GO asian!

[Crisboot]

He uses GNU/Linux!!!

[PureBullcrap]

What's this about? :|

[exactlyJ]

@PureBullcrap lool, vedi did it hard

[lastnamefaya]

Search for "Ralph Langner's keynote "The first deployed cyber weapon in history: Stuxnet’s architecture and implications" (its been uploaded to vimeo)

His speech is waaaaaaaaaay more interesting

[CiteYT]

@55mins starcraft is everywhere!

[Eletromanisme]

easy right?

[NedTheDread]

I'm glad it was an engineer! Great talk! Thanks for posting!

[flymolo50]

very interesting talk about free seats. I'll never view them the same.

[NateTheSickCunt]

Free Seats? You want a seat? Okay, what the fuck? You don't want a seat? Free Seats!? Okay, raise your hand if you have a free seat? You wanna stand the whole time? You do?! FREE SEATS!!!

[grinfcked]

hes a pretty cool guy and i enjoyed his talk. some opening happening in microsoft, thats cool. i guess he works there because theres so much malware for windows that he'll never go out of work ;)

[41056]

its not pokemon training LMFAO ROFL, fucking guy thinks hes so cocky but most of the shit he did didnt work out the way he hoped, some other dude found the answer fucking moron.... BUT i got so tired and went to look some porn LMFAO ROFL

[41056]

its not pokemon training LMFAO ROFL, fucking guy thinks hes so cocky but most of the shit he did didnt work out the way he hoped, some other dude found the answer fucking moron

[IDrop76]

god damn nerds... and yet the world is in their hands... LOL, great talk

[AverageNinjoe]

58:00

"Is that 40 hours over one day?"

Really?? Lol...

[inurkiewicz]

As someone for who English isn't the 1st language this is incredibly difficult to understand.

[basti0007]

@inurkiewicz Well, I found the talk pretty easy to understand.

[blad3runn69]

translate it 2 assembly language?

[DomainMarkus]

@inurkiewicz Speak for yourself.

Maybe your English just isn't good enough?

[inurkiewicz]

@DomainMarkus I am speaking for myself in case you didn't notice?

[DomainMarkus]

Socially awkwardness...

[crbassassin]

where can i download this virus?

[tonksh]

@crbassassin lol

[funtube99999]

@crbassassin Don't worry 'bout it. It will find you. =P

[crbassassin]

@funtube99999 but i don't have a PLC

[fragrat]

What are you on about? He's a great speaker. He clearly knows his shit, speaks (except for a few stumbles) clearly and most of all honestly, and his pace is absolutely perfect. Far too many talks insult the audience's intelligence by going at a snail's pace, while this guy keeps it quick and interesting.

[dpcnull]

This guy is the definition of a bad presenter. Rushes through his words, stumbles, and even stops mid-sentence. His choice of words makes him sound like a nervous middle schooler. What a mess.

[77Fortran]

@dpcnull I think he hit his stride about 15 minutes in! I appreciated his informal style, it's an interesting insight into how guys who do that kind of job go about it.

[TalesOfWar]

@dpcnull He's an engineer, not a public speaker, and for what it's worth he did a good enough job. Maybe the other guy who was supposed to be presenting with him was the main speaker?

[sirLYZ]

@dpcnull He is an engineer not an artsie. We know technical aspects of everyday life, the components and fundamentals of what makes things run. Artsies do the elegance and aesthetics. If you can't understand the beauty of the knowledge and creativity he used in solving his problem, then well you must be an Artsie.

[postal2600]

This guy doesn't make Microsoft look good. I mean what serious company considers that a vulnerability, as little, is not important to fix ? In an OS that runs from an internet caffe to a nuclear power plant ....

[htmlmm]

"Yes - I use Linux from time to time"

:)

This is an example of a video that is not controlled by MS marketing. You can experiense the same thing witht Google emplyees. They not all hate Microsoft.

Basically engineers only look at the quality of the product. I like video talks with engieers, NOT marketing folks. I hate marketing. Maybe MS should shut down their marketing dept. to get a better image (well.. maybe fire the catastrophe Steve Balmer).

[MsPwain]

I don't think he is a bad speaker, but damn he is speaking fast! Nigahiga?

[h3wlett]

Fuck, this speaker sucks! Can't say a single sentence correctly! FUCK

[payunghijau]

@h3wlett perhaps because he's chinese. chinese people are so poor in pronunciation. unlike other asian people.

[willwork4superpowazz]

@criminalistic22 Mac is safer than linux, there are many zero days up for 25,000 in the black market... talking bout linux there.

[litoeazndogE]

@willwork4superpowazz there are also many mac zero days available in open source, underground networks, and up for sale as well :)

[willwork4superpowazz]

@litoeazndogE I know there has to be. But taking as I personally found some for sale ( using TOR) I came across many just like that, and it's pretty safe to assume Linux has a lot more than mac. But if you're talking who is absolutely secure, then no one is, neither Macintosh, Microsoft or Linux.

[Derpmeat08]

i like the part about finding empty seats

[georgert]

Talk actually starts at 07:40. Speaker needs to avoid the word "blah." everything may be obvious to him, but of course as a pod he is not actually used to conversing with real human beings.

[georgert]

Talk actually starts at 07:40.

[zalzalahbuttsaab]

i had to stop the video because this guy rambles. an excellent talk spoilt by the speaker.

[TheRealKuif]

He looks SO much like Bill Gates !!

[oskArtist]

Sorry, I'm pretty new to security talks; what does "out of band" mean? I did a quick Google search, and it says it's an alternative means of communication. Does it mean that the fix gets pushed through another venue?

[Kevin6432]

7:39 for anyone that wants to get to the actual talk..

[jacksawild]

I'm glad everyone who wanted to sit got a seat.

[EtyleN]

@jacksawild haha

[cmfreak]

man.. I'm an average guy and I came across this vid by random but if this guy was a different speaker than I don't think I would have stayed and watched the whole thing!

[sjkdec18]

does anyone understand what the logo means above "Saal1"?

[kaizengarage]

@sjkdec18 it means 27C3. now you can kick yourself :)

[intermender]

what happens if iraq pc's all go linux?

[htmlmm]

@intermender Then the hackers will find an exploit in Linux kernal instead of Windows kernal.

On this level one OS is not more secure than the other.

I think for a personal private user, Linux might be more safe, but else not.

[intermender]

@htmlmm Yes, i think you are right lol even though i am not really a tech guy. I guess I was just making the customary facecious jab at windows :D. But sure the people who did this really knew what there were doing since it was so tech and targeted. I guess on one hand it got people thinking about flaws in software so from that point of view its very interesting and impressive.

[htmlmm]

@intermender Don't get me srong, I like Linux. And is has some good hings on security. The thing is, they do not really work as intended.

Take SoftwareCenter in Ubuntu. It is extremely user friendly, and the idea, that if you download only from a known souce, then you are secure, It's brilliant. But... I almost never see what I want there. All of the versions are outdated and deprecated. So what does the user do... well, go to some random web page and get the installation file. Highly insecure.

[jtheyellow]

I'm not surprised his name is "Dang," as much as this dude curses.

[sireduardo420]

@jtheyellow You should give him a little slack. He is obviously a little scarred about the info that he is sharring (sensitive details of an inter-governmental cyber atack). I'm sure that the cursing is a result of the nervousness that he dealt with on stage. Watch him massage his fingers when he isn't reaching for his laptop. It looks like he is trying to pull his right pinky finger off his hand.

[jacksawild]

@jtheyellow The world would be a much better place if we didn't have to put up with the constant sound of tutting from people who disapprove of others' actions. We just don't need it.

[weezeOB]

the guy who said "i never thought i would enjoy a microsoft talk this much" @0:55 is the 313373 st guy ever :D

[weezeOB]

the guy who said "i never thought i would enjoy a microsoft talk this much" @0:55 is the 313373 st guy ever :D

[thesmileyone69]

whats up with the guy at 1:02:19 (in the audience) he wont stop going on!

[tohumusness]

GAH! I had to wait 6 whole mins to listen to the talk! Stop it with the free seats already!

[211Jetsfan]

it's a very sophisticated piece of malware. 4 zero-day vulnerabilties used in 1 piece of malware!-this is very rare.

[BelligerentWombat]

He's a great speaker because he has information that I want and do not have. ;)

Also I think he was relatively clear and methodical in the explanation.

[mbarkhau]

talk starts at 6:40

[1Deejay7]

@mbarkhau thx!

[GoldenEye4ever]

@mbarkhau thanks :)

It would have sucked to wait that long.

[Ellmitten]

@nslookup he may not be a great speaker, but he was very good at making a very complex subject understandable by not so technical minds. More to the point it takes more than a good speech/talker to do the kind of work he does. Personally I really enjoyed it and found it very informative.

[basti0007]

@Ellmitten ACK! I enjoyed the talk pretty much, too!

[nslookup]

@Ellmitten with all due respect. the subject is not that complex. maybe i expected more from Microsoft!?

(technically speaking)

[LookhaLikeAMan]

@nslookup : May be he was not allowed to divulge more details.

[4fifty8]

@Ellmitten ya it was great and all but if you're not a good talker I don't think you should be presenting something like this. there's gotta be someone who understands it and can speak properly and coherently. it was bloody hard to hear what he was saying and follow along with his thought process.

[yamaasmaye]

@Ellmitten I dont agree with you, to me it dident make an ounce of sense what he as talking about, half of it was bla bla bla.

He is all over the place, he needs to calm down

[nslookup]

this guy is hope-less. good example of a very bad speech/talker