HackerTube

THE VIDEO SHELF · stuxnet analysis

27C3: Adventures in analyzing Stuxnet (Bruce Dang from Microsoft)

Bruce Dang of Microsoft gives a 27C3 talk on how the Stuxnet vulnerabilities were found and analyzed. He walks through the techniques used to triage them and the details of each zero-day exploit, down to the opcode level.

Why HN readers recommended it

HN recommends it as the definitive technical deep dive into Stuxnet's zero-days from someone who analyzed it first-hand.

This is a summary from the source dataset, not an endorsement by Hacker News or the video creator.

Video & recommendation details

Creator / channel
basti0007
Topic
stuxnet analysis
Format
talk
Level
advanced
HN recommenders in dataset
8
HN mentions in dataset
10
Recommendation years in dataset
2011–2024

These counts and years describe the included Hacker News records; they are not YouTube views or the video’s publication date.

From the original HN conversations

Excerpts from the recorded comments. Follow each source for the full comment and surrounding discussion.

  • LNK files can point to DLLs that get loaded by Explorer when it draws the icon for the link target. I only know this because I watched an excellent video explaining the 0-day vulnerabilities that stuxnet used by Microsoft leet hax0r Bruce Dang. [VIDEO]

    spudlyo on Hacker News · 2011-02
    In Black ops: how HBGary wrote backdoors for the government
  • Also, check out this excellent 27C3 presentation from Bruce Dang, a microsoft malware analyst, where he cracks numerous gags about mossad. [VIDEO] It's well worth watching anyway, lots of good info on the various exploits used by stuxnet, down to the opcode level. He's a …

    JonnieCache on Hacker News · 2011-05
    In Did the US write Stuxnet? Deputy Defense Secretary won't deny it
  • If anyone hasn't seen this video from the Microsoft team analyzing how this went down, I highly suggest watching. I was on the edge of my seat! [VIDEO]

    tbrock on Hacker News · 2013-02
    In Stuxnet Missing Link Found, Resolves Some Mysteries Around the Cyberweapon

Summaries, classifications and recommendation records are from the HackerTube source dataset. Read about this library and its limitations.