Comment on Stuxnet and more Windows 0-days
Over the last few days, some news organizations have been saying that Stuxnet source code is available on the black market, and that clearly therefor there is an impending Internet Armageddon. This is patently silly, on a number of levels, but silly none-the-less. First thing is that I flat-out donât believe Stuxnet source is available for sale on the black market or anywhere. Remember how often I say that if something sounds too good to be true, itâs not true? Well, the opposite applies too. If something sounds too bad to be true, itâs not true either. We really donât know who built Stuxnet, or who the intended target was, be we may rest assured that whoever put that much work into it, isnât selling it, at any price. Itâs actually more probable that some no-honor-among-thieves bad guy is scamming fellow bad guys. âSure, this is Stuxnet source code. Prove otherwise.â ...