Stuxnet

User discussion (125 HackerNews comments; top 25 shown) is dominated by security professionals arguing over what Stuxnet actually proves. A commenter who says they reverse-engineered a nontrivial part of Stuxnet calls mainstream coverage 'breathless crazy hyperbole,' noting that driver signing keys like the stolen Realtek/JMicron keys were shoddily managed across hardware vendors and could be bought on the black market for roughly $50k at the time — undercutting the 'super ninja espionage' narrative. Another suspects the keys were obtained by a phone call between high-level US and Taiwanese officials rather than technical brilliance. A recurring complexity-vs-sophistication debate runs through the thread: experienced programmers insist the true sophistication lay in the development process — iteratively building malware against an air-gapped target whose design was unknown, requiring spy operations just to place malware and exfiltrate data. One commenter stresses that years later, even with the full code, researchers still cannot summarize a complete list of what Stuxnet definitely does; it packed multiple 0-days and took control of multiple layers of complex production environments. Attribution threads treat Stuxnet/Duqu/Flame as one family by the same group (Symantec called Duqu 'near identical'; Kaspersky initially denied Flame's resemblance, then found a shared early zero-day). Much of the discussion is geopolitical rather than technical: whether the NYT's sourcing ('members of the president's national security team in the room') amounts to an administration-sponsored leak confirming US/Israeli authorship; whether Kaspersky's disclosures were geopolitically convenient; MAD analogies; Iranian enrichment to 20% for medical isotopes under IAEA monitoring; and fears that Stuxnet legitimizes state cyberweapons — from election manipulation to networked cars and insider key-server risks at Apple-scale vendors. Net signal: deep technical respect, skepticism toward hype, and persistent moral unease coexist.

No aggregate ratings were found for this product during the last harvest.