WEBVTT - SYSK Selects: Are We in a Cyberwar? 0:00:00.680 --> 0:00:03.240 Hey there everyone, it's me Josh, and for this week's 0:00:03.440 --> 0:00:07.080 s Y s K Selects, I've chosen a classic episode 0:00:07.080 --> 0:00:10.799 on cyber war It's almost certainly hopelessly out of date 0:00:10.800 --> 0:00:14.680 by now, but it is an interesting intro to cyber warfare, 0:00:15.160 --> 0:00:17.800 and we learned that Chuck hates the words stucks net. 0:00:18.200 --> 0:00:21.280 So listen out for that kick back and enjoy this 0:00:21.440 --> 0:00:28.760 classic episode of Stuff You Should Know. Welcome to Stuff 0:00:28.760 --> 0:00:31.320 You Should Know, a production of five Heart Radios How 0:00:31.320 --> 0:00:40.040 Stuff Works. Hey, welcome to the podcast. I'm Josh Clark 0:00:40.200 --> 0:00:42.400 with me is always a child to be Chuck Bryant. 0:00:43.280 --> 0:00:48.120 We call him an authority on UM, cyber security, the 0:00:48.159 --> 0:00:52.400 Internet and everything about it. An expert. You would say, 0:00:52.560 --> 0:00:55.520 that's right. Hey, should we say hello to our our 0:00:55.720 --> 0:01:00.600 latest celebrity fan who we just learned today that miss 0:01:00.760 --> 0:01:05.760 Kristen Bell, the lovely and enchanting and nerdy Kristen Bell. 0:01:06.160 --> 0:01:09.759 Is she nerdy, very nerdy, like prides herself on. I mean, 0:01:09.760 --> 0:01:12.160 it doesn't surprise me that she listens to the show. Yeah, 0:01:12.200 --> 0:01:15.000 because she's on record as being a big nerd, which 0:01:15.040 --> 0:01:17.160 is one reason I like her a lot. And she's 0:01:17.240 --> 0:01:21.440 curating UM a newsweek page right, Yeah, like things she 0:01:21.520 --> 0:01:24.160 likes or kind of one of those deals that they 0:01:24.200 --> 0:01:27.720 do in magazines now and she listed us. That's pretty awesome. 0:01:27.720 --> 0:01:30.080 How about that? Thank you very much for that. I'm 0:01:30.120 --> 0:01:32.319 a huge fan of a party down which she was 0:01:32.360 --> 0:01:35.440 in and other stuff that she's been in forgetting Sarah Marshall, 0:01:35.440 --> 0:01:37.800 how's it going? And her You gotta see her sloth 0:01:38.120 --> 0:01:40.440 video online that she did on the Ellen Show. It's 0:01:40.440 --> 0:01:44.039 pretty funny, highly recommended. Okay, so that's all I got. 0:01:44.120 --> 0:01:47.200 That's all the sucking up I'm gonna do. Should we 0:01:47.319 --> 0:01:52.960 say hi to another fan, slightly less famous but pretty cool? Yes? Sam? 0:01:53.080 --> 0:01:55.000 Do you want to give a little a little backstory? 0:01:55.760 --> 0:01:58.280 Giving some backstory here? Sure? We um. We had a 0:01:58.440 --> 0:02:01.160 live Um tribute event here in Atlanta a couple of 0:02:01.240 --> 0:02:04.560 years ago, and at the event was a little, uh 0:02:05.040 --> 0:02:10.040 teenage fan named Sam teenage you mean like just post tween. Yeah, like, 0:02:10.760 --> 0:02:12.560 and his mom brought him and he's a big fan. 0:02:12.639 --> 0:02:14.760 He's just like really sweet kid. Mom was very sweet, sweet, 0:02:15.200 --> 0:02:17.040 very nice family. Flash forward a couple of years we 0:02:17.080 --> 0:02:20.200 got to south By, Southwest there Sam again, apparently mom 0:02:20.360 --> 0:02:23.440 drove him to Austin to come see our life podcast. Yeah, 0:02:23.600 --> 0:02:26.639 they weren't there to see. I've spoke to mom afterwards 0:02:26.760 --> 0:02:28.760 and was like, so, what else are you guys gonna see? 0:02:28.800 --> 0:02:30.799 She's like nothing. We're going back crazy. I was like, 0:02:31.360 --> 0:02:34.040 what else did you see? She's like nothing. They came 0:02:34.120 --> 0:02:35.880 to see us. So then we were like, all right, 0:02:35.880 --> 0:02:38.120 we gotta think of something for Samy because he's proved 0:02:38.200 --> 0:02:40.519 his metal And Sam wrote in and and sent his 0:02:40.639 --> 0:02:43.200 resume and like all the reasons we should put him 0:02:43.200 --> 0:02:45.840 to work, and it's just like, dude, if the future 0:02:45.880 --> 0:02:48.160 is secure, if kids are like Sam, for I'm not 0:02:48.200 --> 0:02:50.919 worried about a thing anymore. Yeah, So we we racked 0:02:50.960 --> 0:02:53.000 our brains and we found out there's like a surprising 0:02:53.000 --> 0:02:57.280 amount of adult only tasks that we do, like at 0:02:57.280 --> 0:02:59.840 any given time, and we're like, all right, we have 0:02:59.919 --> 0:03:02.640 to we have to figure out something that's age appropriate 0:03:02.720 --> 0:03:05.320 for Sam. That's right. So long story short, I was 0:03:05.360 --> 0:03:08.080 getting kind of thin on podcast topics. I put Sam 0:03:08.160 --> 0:03:10.639 on the case and he sent me like a stellar, 0:03:10.720 --> 0:03:14.160 stellar list with reasons why we should do these and uh, 0:03:14.639 --> 0:03:16.760 this is the first one. This is one, and he 0:03:16.840 --> 0:03:18.480 had a lot of overlap on once we had already 0:03:18.520 --> 0:03:20.239 recorded it aren't out yet, so that just goes to 0:03:20.280 --> 0:03:22.880 show you that Sam is like he gets the show right. 0:03:23.120 --> 0:03:26.119 And uh so, as Sam's picking these out, we're gonna 0:03:26.240 --> 0:03:28.040 let you know if this is a Sam one. But 0:03:28.160 --> 0:03:30.120 this is going on in the summer, we're gonna call 0:03:30.200 --> 0:03:33.840 this the Summer of Sam. That's right, Sam's choice. All right. 0:03:33.919 --> 0:03:37.000 So that's the longest intro ever. That wasn't even the intro. Man, Well, 0:03:37.080 --> 0:03:42.160 let's get to cyber worse. Then, let's bossy. Well, you know, Chuck, 0:03:42.320 --> 0:03:48.400 have you ever been to Bellingham, Washington? No? Okay, I 0:03:48.480 --> 0:03:51.440 have not. Have you been to Washington? Been in Seattle? 0:03:51.800 --> 0:03:54.720 Isn't that where um Van Nostrin lives? Yeah? Or is 0:03:54.720 --> 0:03:58.480 it Oregon? Now he sees Washington? Ok um? So, uh 0:03:59.040 --> 0:04:03.520 in Bellingham, wash Ington on June at the Olympic Pipeline 0:04:03.560 --> 0:04:09.800 Company a systems control and data acquisition system. There's systems 0:04:09.840 --> 0:04:14.880 twice in there. Um, but a SCATA or SKATA system um, 0:04:14.960 --> 0:04:18.040 which is basically like a computer program that like can 0:04:18.320 --> 0:04:22.240 make a valve turn or turn something off for mechanical 0:04:22.520 --> 0:04:28.719 right from from digital binary instructions right. Um, This Olympic 0:04:28.800 --> 0:04:32.040 Pipeline Company system was operating on this this type of 0:04:32.320 --> 0:04:37.320 program and UM something went wrong and one of their 0:04:38.040 --> 0:04:42.360 pipes started leaking a lot, like millions of gallons of 0:04:42.440 --> 0:04:46.719 gasoline UM and part of it erupted into a fireball 0:04:46.760 --> 0:04:50.960 and killed three people injured many others. UM and they 0:04:51.080 --> 0:04:52.440 went back and looked at it. They think it was 0:04:52.520 --> 0:04:57.240 just a system malfunction. But the fact that this came along, 0:04:57.320 --> 0:05:00.640 this happened because of this system can troll, and it 0:05:00.720 --> 0:05:04.920 happened in as the dot com bubble was starting to 0:05:05.000 --> 0:05:07.560 grow and like the Internet was really becoming a huge thing. 0:05:08.560 --> 0:05:12.320 UM people who are into cybersecurity now point to this 0:05:12.680 --> 0:05:17.160 as evidence of exactly what somebody could do during a 0:05:17.200 --> 0:05:23.440 cyber attack, even though they think this was just an accident, right, irrelevant, 0:05:24.279 --> 0:05:27.080 But they're they're they weren't like pointing to that as well. No, 0:05:27.240 --> 0:05:29.760 they don't think that had anything to do, but they 0:05:29.800 --> 0:05:31.800 were saying, this is what it would look like if 0:05:31.839 --> 0:05:34.760 somebody had wanted to attack, Like, this is what a 0:05:34.839 --> 0:05:38.400 cyber attack would look like. Because it's not just the 0:05:38.480 --> 0:05:43.600 Olympic Pipeline company that's using these systems UM. All over 0:05:43.640 --> 0:05:50.880 the United States, companies, law enforcement agencies, military banks, UM, 0:05:51.600 --> 0:05:54.720 public works, all of these things are all running on 0:05:55.200 --> 0:06:01.240 what amounts to Windows. It's a simple that. Yeah, Microsoft 0:06:01.320 --> 0:06:05.440 systems many of them, and um. As Jonathan Strickland wrote 0:06:05.480 --> 0:06:09.040 this from tech Stuff the article, and as Strickland points out, um, 0:06:09.880 --> 0:06:13.040 a couple of things Microsoft has been uh kind of 0:06:13.160 --> 0:06:16.200 chastise over the years for their security or lack of 0:06:16.279 --> 0:06:21.360 security in some of their programs, and um. The other 0:06:21.400 --> 0:06:24.160 thing he points out is the internets grew so fast 0:06:24.760 --> 0:06:27.480 and everyone got on board so quickly that it kind 0:06:27.480 --> 0:06:32.120 of outpaced what we could even do security wise. It 0:06:32.279 --> 0:06:35.560 was all of a sudden, Government agencies and power grids 0:06:35.640 --> 0:06:39.880 and emergency services and weapons systems, water and fuel pipelines, 0:06:40.000 --> 0:06:43.360 all the stuff is running on on computers and a 0:06:43.400 --> 0:06:46.360 lot of it through the Internet. And we don't quite 0:06:46.440 --> 0:06:48.920 know how to guard against a cyber attack. No, And 0:06:49.000 --> 0:06:51.960 apparently even as far as like the knowledge of how 0:06:52.040 --> 0:06:55.400 to guard against cyber attacks goes, the United States is 0:06:56.320 --> 0:07:00.480 is lacking, Yeah, compared to like China and Russia. UM, 0:07:01.360 --> 0:07:05.520 so we're kind of in this really weird position right 0:07:05.560 --> 0:07:09.680 now where we've realized that all of the ponies are 0:07:09.760 --> 0:07:13.240 hooked to a single basket of eggs and all it's 0:07:13.240 --> 0:07:16.640 gonna take is a couple of black cat firecrackers to 0:07:16.760 --> 0:07:20.440 scare all the horses off. That's the best analogy I 0:07:20.520 --> 0:07:22.400 can come up with. Did you just think of that? 0:07:22.560 --> 0:07:25.320 Or did you I just thought it that. My imagination 0:07:25.400 --> 0:07:28.080 is back. I can tell you where time traveled to 0:07:28.360 --> 0:07:33.240 awesome where I can't think. Okay, um, all right, let's 0:07:33.240 --> 0:07:35.160 go back a little bit in time. I don't think 0:07:35.200 --> 0:07:36.960 we need the way Back machine for this, because we're 0:07:37.000 --> 0:07:39.920 just going to We can just like walk outside. Yeah, 0:07:39.920 --> 0:07:44.160 they'd be the waste of time for the way Back machine. Umn. 0:07:44.240 --> 0:07:47.920 Some pretty smart people caught on early that hey, we 0:07:47.960 --> 0:07:50.240 could be vulnerable to something like a cyber attack. So 0:07:50.320 --> 0:07:52.400 let's look into this. Let's put a red team on it. 0:07:53.080 --> 0:07:57.040 Red team is a our friends that act as enemies 0:07:57.160 --> 0:07:58.680 to try and you know how they hire these people 0:07:58.720 --> 0:08:01.280 to like break into your home. Yeah, those are red 0:08:01.360 --> 0:08:05.800 teams basically, right, like um from Star Wars. Yeah, exactly. 0:08:06.160 --> 0:08:09.240 So let's get a red team. Let's let's uh name 0:08:09.280 --> 0:08:13.200 it this mission something really cool out of a football playbook. 0:08:13.320 --> 0:08:16.560 Let's name it Project Eligible Receiver. Do you know how 0:08:16.600 --> 0:08:18.240 many times I had to look at that before it 0:08:18.320 --> 0:08:21.120 finally sunk in what words I was looking at? Really 0:08:22.000 --> 0:08:24.000 it is? It does look kind of funny. It looks 0:08:24.040 --> 0:08:27.880 like eleanor Rigby when you glance at it, at least 0:08:27.920 --> 0:08:30.440 I think, so, yeah, it doesn't to me. I was 0:08:30.520 --> 0:08:33.120 thinking more of like a radio receiver or something like, 0:08:33.600 --> 0:08:35.720 I think it just means about football. No, it totally 0:08:36.280 --> 0:08:38.199 just saying like I read this many times before, I 0:08:38.280 --> 0:08:40.959 was like, oh, okay, so a lot of this is 0:08:41.000 --> 0:08:43.440 still classified, so we don't know everything. But basically they 0:08:43.559 --> 0:08:46.280 hired some hackers, which is what you do to test 0:08:46.280 --> 0:08:48.959 your security, they being the Department of Defense. Yeah, yeah, 0:08:49.000 --> 0:08:52.520 depart of Defense saying hey, can you nerds hack into 0:08:53.040 --> 0:08:58.120 the Pentagon system and afterwards we won't assassinate exactly, And 0:08:58.320 --> 0:09:02.480 the nerds were like, just watched this and it took 0:09:02.559 --> 0:09:05.480 three days before the Pentagon even knew that they were 0:09:05.679 --> 0:09:09.559 being cyber attacked by the Red Team, Like pretty successful 0:09:09.600 --> 0:09:13.400 and very sobering. Yeah, so um, they they h it 0:09:13.600 --> 0:09:16.000 was I guess kind of an eye opener for the 0:09:16.120 --> 0:09:19.160 d O D and they I'm sure used it to 0:09:19.240 --> 0:09:22.959 step up security. Not fast enough though, because after this 0:09:23.160 --> 0:09:28.320 Red Team attack, um Operation Eligible Receiver, an actual attack 0:09:28.400 --> 0:09:32.320 which they later came to call what was at Moonlight Maze. Yeah, 0:09:32.360 --> 0:09:35.199 this is one year after that the tests. A year 0:09:35.320 --> 0:09:39.280 after UM, somebody launched an attack and it was a 0:09:40.280 --> 0:09:43.280 I guess what's probably the most typical kind of cyber attack, 0:09:43.400 --> 0:09:46.560 where you insert some sort of software to basically spy 0:09:47.480 --> 0:09:52.360 and get files and gather data and download sensitive materials. Right, 0:09:53.679 --> 0:09:59.280 And apparently took two years before NASA, the Pentagon, UM 0:09:59.480 --> 0:10:03.800 and other agencies in the US government noticed that UM 0:10:04.400 --> 0:10:07.760 accidentally noticed that this that they were being spied on. 0:10:08.160 --> 0:10:12.839 Cyber wise, Yeah, they got data like strategic maps, troop assignments, 0:10:13.040 --> 0:10:17.880 and positions. Not good, right, very scary. And they trace 0:10:17.960 --> 0:10:20.920 it back to Russia. Doesn't necessarily mean that it came 0:10:20.960 --> 0:10:24.280 from Russia in its origin, but at least that's where 0:10:24.280 --> 0:10:28.360 they traced it to. Uh. And this is cyber warfare, 0:10:28.480 --> 0:10:31.000 like it's happening. It's been going on since the nineties 0:10:31.040 --> 0:10:34.360 pretty much. Yeah, I mean it's not is a cyber 0:10:34.400 --> 0:10:37.480 war coming, it's like, how do we prevent like a 0:10:37.559 --> 0:10:40.720 cyber war from bringing us all down? Yeah, pretty much. 0:10:41.040 --> 0:10:44.520 And it's apparently from looking into this, there's like two camps. 0:10:44.559 --> 0:10:46.719 There's like a gloom and doom camp where it's like, yeah, 0:10:46.840 --> 0:10:49.040 somebody really wants to mess things up. They're going to 0:10:49.120 --> 0:10:51.920 be able to it's gonna be pretty easy. And the 0:10:52.160 --> 0:10:55.520 sunny optimistic camp is kind of like, no, you know, 0:10:55.640 --> 0:10:57.920 we know we're looking for now, Like, sure they could 0:10:58.000 --> 0:11:01.120 launch an attack, but will we'll be able to stop 0:11:01.200 --> 0:11:03.360 it in time for before we can do like a 0:11:03.480 --> 0:11:07.199 lot of damage. Yeah, so we'll see, we'll lay out 0:11:07.280 --> 0:11:25.000 everything for you can decide who's right, that's rights w 0:11:27.080 --> 0:11:36.880 s K you should. So we've already mentioned that on 0:11:37.000 --> 0:11:40.760 the defensive side of things, the US is sorely lacking, um. 0:11:40.840 --> 0:11:43.120 But on the offensive side of things, we've actually done 0:11:43.160 --> 0:11:47.040 this ourselves more than once. Um during the coast of 0:11:47.120 --> 0:11:50.880 a war. Strickland points out, we used computer attacks to 0:11:51.720 --> 0:11:55.760 compromise Serbian air defenses, basically kind of scrambling their information 0:11:56.440 --> 0:11:59.559 so they had bad I guess coordinates. Well, just on 0:11:59.640 --> 0:12:07.040 the race our screen wasn't wasn't apt? Was okay? Or appropriate? 0:12:07.160 --> 0:12:11.319 Did you see that one? So we did this, We 0:12:11.440 --> 0:12:15.600 launched it and it and it worked. So, uh, that's 0:12:15.640 --> 0:12:17.480 a good thing, but it's also a bad thing if 0:12:17.520 --> 0:12:21.240 you're like, was it Bush the first or Clinton in 0:12:21.360 --> 0:12:24.679 Bush the second? Bush the second in two thou three 0:12:24.720 --> 0:12:26.920 in a rock and Clinton? Well, they were both like, 0:12:27.040 --> 0:12:28.719 we don't think we should be doing much of this 0:12:28.960 --> 0:12:32.840 because a couple of reasons. A. It basically opens us up. 0:12:32.920 --> 0:12:34.559 It's like, hey, they did this, so we can do 0:12:34.600 --> 0:12:38.439 it right back and be I think they could have 0:12:38.559 --> 0:12:42.640 drained some banks of terrorist cells. And they said, we 0:12:42.800 --> 0:12:45.960 kind of depend on the integrity of the banking system worldwide, 0:12:46.480 --> 0:12:48.080 like we don't want to start messing around with us. 0:12:48.160 --> 0:12:52.319 So apparently with with UM cyber warfare, it's very much 0:12:52.440 --> 0:12:57.160 like UM. When you build that virus, it's out there 0:12:57.520 --> 0:13:00.480 and it can be captured and studied and re deployed 0:13:00.480 --> 0:13:04.680 against you. Yeah, so what they were saying with Clinton 0:13:04.800 --> 0:13:07.400 and Bush who were saying like, no, we're not going 0:13:07.480 --> 0:13:10.280 to use a virus to UM to drain those bank 0:13:10.320 --> 0:13:13.800 accounts because they could be it will eventually come back 0:13:13.880 --> 0:13:16.640 on us, and our banking industry is not secure enough 0:13:17.120 --> 0:13:20.800 to withstand something that we ourselves make. Because apparently the 0:13:20.920 --> 0:13:24.800 US is pretty good at making viruses. I'm sure should 0:13:24.840 --> 0:13:27.000 we talk about some of the different ways that this 0:13:27.120 --> 0:13:32.360 can go down. Yeah, the Pearl Harbor attack, Yes, I 0:13:32.400 --> 0:13:34.320 had the feeling strictly might A name this one himself, 0:13:34.440 --> 0:13:36.079 but it's not true. He went to a lot of 0:13:36.120 --> 0:13:39.160 trouble to explain why it's called the Pearl Harbor strategy, 0:13:39.200 --> 0:13:40.679 and I think he could have just left at that. 0:13:41.520 --> 0:13:44.240 The idea here is that it's it's pretty much in 0:13:44.320 --> 0:13:46.880 your face. It's a massive cyber attack where they infiltrate 0:13:47.320 --> 0:13:50.920 and then they sabotage systems. UM much like Pearl Harbor 0:13:51.360 --> 0:13:54.920 was a big surprise and a big attack, wasn't I mean, 0:13:54.960 --> 0:13:57.360 it was sneaky, but it wasn't quiet by any means, 0:13:57.720 --> 0:14:01.360 right or stealthy. I guess the word UM. The other 0:14:01.440 --> 0:14:05.880 ones are pretty much stealthy. Part of a Pearl Harbor attack. 0:14:05.920 --> 0:14:09.120 I believe UM could be a distributed denial of service attack, 0:14:09.760 --> 0:14:12.760 which is basically, you know, like when you UM try 0:14:12.840 --> 0:14:15.679 to get onto a website or whatever, you're sending a 0:14:15.840 --> 0:14:19.760 request to the server to let you on right now. 0:14:19.920 --> 0:14:22.600 If you assault that one server with millions of pings 0:14:23.200 --> 0:14:26.920 and it's trying to accommodate everybody as is appropriate and 0:14:27.040 --> 0:14:33.400 apt UM, it'll basically they crash. Is the point you 0:14:33.480 --> 0:14:35.800 can crash a server by hitting it with millions of 0:14:35.840 --> 0:14:37.760 pings all at once, just slows it down to the 0:14:37.840 --> 0:14:39.960 point either where it doesn't work or it crashes. Yeah, 0:14:40.040 --> 0:14:42.040 and that's that's what anonymous likes to do with like 0:14:42.240 --> 0:14:45.200 MasterCard during the whole wiki leaks thing when they was 0:14:45.240 --> 0:14:48.120 a master Card or Visa crash. I cannot remember, um 0:14:48.280 --> 0:14:50.640 remember when that happened. Though. It's basically just launching a 0:14:50.720 --> 0:14:53.560 bunch of server requests at a specific server in the service, 0:14:53.600 --> 0:14:56.800 like no, no, and this falls over? Is that why 0:14:56.840 --> 0:15:01.520 people say ping? By the way, the ping um? Yeah, 0:15:02.040 --> 0:15:06.760 I hate that. It's better than javastorm. I don't even 0:15:06.800 --> 0:15:09.600 know what that is, drinking coffee while you're having a brainstorm, 0:15:09.840 --> 0:15:12.440 like let's go get coffee and brainstorm something javas to 0:15:12.520 --> 0:15:17.440 people say that, Yeah, I don't say it. I've never 0:15:17.520 --> 0:15:21.880 heard of that. That ping and meta or the three 0:15:21.920 --> 0:15:24.960 things that I will never say. Epic maybe the worst 0:15:25.320 --> 0:15:29.080 to call something epic. I don't mind epic. Oh man, 0:15:29.200 --> 0:15:31.800 I hate epics. At least it's a real word, especially 0:15:32.120 --> 0:15:38.400 epic fail. Well yeah, sure, okay, back to it. Viruses, uh, 0:15:38.800 --> 0:15:43.280 code red, slammer, nimda. These are viruses that Strickland has 0:15:43.360 --> 0:15:47.120 mentioned that it spread very quickly across the Internet, and 0:15:47.280 --> 0:15:49.440 there's a couple of ways this can go down. You 0:15:49.520 --> 0:15:54.960 can either, um, you can set a you can do 0:15:55.000 --> 0:15:57.560 it immediately and release a virus. You can have all 0:15:57.600 --> 0:16:02.160 these other computers deliver the virus. You can put sort 0:16:02.200 --> 0:16:04.880 of like a delay timer on your virus for it 0:16:04.920 --> 0:16:09.200 to go off in two years, automatically or manually whenever 0:16:09.280 --> 0:16:11.480 you want to. It can be waiting for you to 0:16:11.600 --> 0:16:14.160 hit the button and then latch the virus that way, 0:16:14.360 --> 0:16:17.800 or I think, um for the user of that computer 0:16:17.920 --> 0:16:21.560 to do, like say control all delete, Well we'll trigger 0:16:21.600 --> 0:16:24.920 it or something. Yeah, that's pretty scary. Yeah, I don't 0:16:24.960 --> 0:16:28.600 don't press those three buttons all the time on my PC. 0:16:28.800 --> 0:16:32.120 Oh my god, Chuck. I think we should talk about 0:16:32.480 --> 0:16:34.840 right about here is I think we're stucks net fits 0:16:34.880 --> 0:16:39.960 in who stucks net? Say it? When we're stucks net? 0:16:40.040 --> 0:16:42.160 I don't know what that is. You know it's stucks net? 0:16:42.320 --> 0:16:45.680 Is that in this? Yeah? It's the Iranian Um, it's 0:16:45.720 --> 0:16:48.520 the virus that the US and Israel unleashed on Iran. 0:16:49.200 --> 0:16:52.160 It's a perfect example of this. It is. You're right, 0:16:52.960 --> 0:16:56.320 So let's talk about stucks net. Stucks net. It's a 0:16:56.360 --> 0:17:00.160 great name. It was offensive a cyber attack. Offensive been 0:17:00.200 --> 0:17:01.840 two thousand and ten. They thinking maybe it was the 0:17:01.880 --> 0:17:05.200 first one ever, the US launched like a strictly for 0:17:05.320 --> 0:17:10.280 sabotage attack. Basically, they wanted to disable Iran UH Iran's 0:17:11.000 --> 0:17:16.040 UH centrifuges so they could not enrich uranium. And they 0:17:16.119 --> 0:17:19.919 did this through the UH, the new Air Force based 0:17:19.960 --> 0:17:25.159 out of Texas, right, Texas in Georgia. Yeah, what's the 0:17:25.880 --> 0:17:30.320 Warner Robbins Robin's Air Force Space, Yeah, Robin's Air Force Base. Yeah, 0:17:30.359 --> 0:17:32.920 those two places are where they station. Yeah. And this 0:17:33.080 --> 0:17:38.359 is the first all cyber unit. Pretty much pretty cool, right, 0:17:38.440 --> 0:17:41.719 Their whole is it, Their whole task is to wage 0:17:41.800 --> 0:17:46.680 cyber warfare, and I imagine to be defensive against cyber attacks. 0:17:47.240 --> 0:17:50.560 But um, I don't I don't know if they had 0:17:50.640 --> 0:17:53.720 to do with stuck stent, but they probably would have. 0:17:54.440 --> 0:17:58.680 Um I think it was being developed before was ordained 0:17:59.000 --> 0:18:00.840 in two thousand nine. Think it went back to two 0:18:00.840 --> 0:18:05.560 thousand seven when it was started. But basically, the they 0:18:06.000 --> 0:18:09.720 the CIA got their hands on centrifuges that they knew 0:18:09.880 --> 0:18:14.080 Iran was using, and they had just as many as 0:18:14.160 --> 0:18:17.440 Iran did of the same kind, and they studied it 0:18:17.800 --> 0:18:22.040 and they built this virus based on this configuration of 0:18:22.160 --> 0:18:28.119 centrifuges running Windows and Siemens switches, right, yeah, and then 0:18:28.119 --> 0:18:30.480 they build a virus to go infiltrate it. I thought 0:18:30.480 --> 0:18:33.600 it was called Operation Olympic Games. It was, but the malware, 0:18:33.680 --> 0:18:37.240 the virus itself is called Okay that's what I couldn't 0:18:37.240 --> 0:18:39.160 figure it out, but you're right. It was called Operation 0:18:39.240 --> 0:18:44.840 Olympic Games. And this whole operation was this huge, sweeping, awesome, 0:18:45.240 --> 0:18:50.520 massive secretive basically imagine like the CIA. Do you remember 0:18:50.640 --> 0:18:54.159 Uncommon Valor? Oh yeah, okay, do you remember when like 0:18:54.320 --> 0:18:58.119 they're training at that replica of the camp? Okay, the 0:18:58.240 --> 0:19:02.600 CIA did that with Iran centrifuges in the nuclear program, 0:19:03.040 --> 0:19:04.679 and they figured out exactly how he worked, and then 0:19:04.720 --> 0:19:06.359 they figured out the best way to break it. Was 0:19:06.440 --> 0:19:08.399 Gene Hackman bank rolling the whole thing. Oh yeah, he 0:19:08.520 --> 0:19:10.440 was there to get his son out. He he was 0:19:10.560 --> 0:19:13.359 just staring at this menu of guns and silhouette that 0:19:13.440 --> 0:19:15.760 he wanted to order. Remember that? Oh yeah, dude, that 0:19:15.760 --> 0:19:17.840 I thought that was so bad. That yeah, but that 0:19:17.960 --> 0:19:20.600 was a huge, huge movie for like dude's our age. No, 0:19:20.840 --> 0:19:24.280 I'm saying bad isn't like good? Okay, yeah, gotcha? Um 0:19:25.400 --> 0:19:28.240 so stucks and net Olympic Games happened, and like you said, 0:19:28.280 --> 0:19:32.480 it was the first offensive cyber attack. Most of the 0:19:32.520 --> 0:19:36.080 other ones have come in the form of UM sneaking 0:19:36.160 --> 0:19:40.000 in and lying around and watching and waiting and spying. Well, 0:19:40.080 --> 0:19:42.600 stuck that had that too, was that the initial There 0:19:42.720 --> 0:19:46.639 was a companion program called Flame that somehow. This is 0:19:46.720 --> 0:19:49.960 the part that's the biggest mystery. The m Iran's nuclear 0:19:50.000 --> 0:19:53.040 program is not connected to the Internet, so somebody got 0:19:53.119 --> 0:19:58.440 that in on thumb drive, infected their local system. UM 0:19:58.720 --> 0:20:02.800 and Flames sat there and basically just studied everything, told 0:20:03.000 --> 0:20:06.600 the US how the configuration was set up, and then 0:20:06.640 --> 0:20:09.680 they built it, and then they inserted stucks net and 0:20:09.840 --> 0:20:14.320 basically it made all of their data looked like everything 0:20:14.440 --> 0:20:18.080 was operating normally, but it was telling their centrifuges to 0:20:18.200 --> 0:20:20.920 spin out of control and basically break themselves. It's like 0:20:21.000 --> 0:20:24.160 Oceans eleven when they built the Replica vault exactly showed 0:20:24.200 --> 0:20:27.480 the Replica video. There's nothing going on. So basically, the 0:20:27.920 --> 0:20:31.280 Pentagon has been watching a lot of movies pretty much 0:20:44.119 --> 0:20:57.320 as skuld. But this is a hugely successful attack UM, 0:20:57.800 --> 0:21:01.920 if not at the very least for American cyber warfare UM, 0:21:02.359 --> 0:21:06.280 because it's supposedly set Iran's nuclear program back by at 0:21:06.400 --> 0:21:09.280 least a year, if not more, and that this would 0:21:09.640 --> 0:21:11.840 let us continue talk. Yeah, and I think it said 0:21:11.840 --> 0:21:14.199 one of the aims was to make them feel stupid, 0:21:14.640 --> 0:21:18.000 and then they said it worked like they that they 0:21:18.359 --> 0:21:22.040 done something wrong and that's why this these systems were failing. 0:21:22.560 --> 0:21:25.760 It's pretty scary, man. But the point is now is Okay, 0:21:26.040 --> 0:21:28.400 that's out there. Stuck Snut is out there for anybody 0:21:28.440 --> 0:21:31.639 who can get their hands on it. And that's the 0:21:31.760 --> 0:21:35.000 name of it. It's a great name, alright, stuck Snut 0:21:35.080 --> 0:21:40.600 within with an X with a new guetas center. But 0:21:40.720 --> 0:21:43.200 it's out there, and the US is now basically just 0:21:44.000 --> 0:21:49.600 the the computer equivalent of Hiroshima was just launched by 0:21:49.680 --> 0:21:53.760 the United States. Yeah, and nice little set up there. 0:21:53.880 --> 0:21:57.040 A lot of people are comparing these days of the 0:21:57.119 --> 0:21:59.800 early days of cyber warring to the early days of 0:22:00.240 --> 0:22:04.479 of nuclear bombs, and that there's not a ton of defense. 0:22:04.600 --> 0:22:07.159 Not anyone really knows what they're doing. It's sort of 0:22:07.520 --> 0:22:10.200 a chaotic mess that everyone's trying to get their finger 0:22:10.240 --> 0:22:14.080 in the bie though. Yeah, and the other countries like China, 0:22:14.200 --> 0:22:18.919 believe Russia, who are apparently better equipped to defend against 0:22:19.200 --> 0:22:21.720 a cyber attech than the US. So basically the US 0:22:21.840 --> 0:22:26.359 is really playing with fire. Well, and that's why Clinton 0:22:26.400 --> 0:22:29.040 and Bush we're declining to use these is one of 0:22:29.080 --> 0:22:30.760 the reasons where like, you know, this opens us up 0:22:30.800 --> 0:22:34.720 to counterattacks and just may not be the smartest way 0:22:34.760 --> 0:22:37.480 to Like we wouldn't go out and just drop a 0:22:37.560 --> 0:22:42.639 nuclear bomb on a country. Right, Oh wait did all? Right? Oops? Twice? 0:22:43.359 --> 0:22:45.960 What else you got? Let's see, Uh we talked about 0:22:46.000 --> 0:22:51.040 the system controls and UM data acquisition systems. Yeah, that 0:22:51.240 --> 0:22:56.920 was UM. Basically that is the achilles heel of infrastructure 0:22:57.520 --> 0:22:59.520 and the United States. One of the reasons why we're 0:23:00.200 --> 0:23:04.119 not set up to defend against UM a cyber attack 0:23:04.520 --> 0:23:08.840 is because we are so connected to the internet. Yeah 0:23:09.119 --> 0:23:13.919 everything is. Yeah. Iran North Korea, Yeah, not quite as 0:23:14.000 --> 0:23:16.159 much because a lot of their stuff is off the 0:23:16.240 --> 0:23:20.680 grid just by default because they don't have the infrastructure 0:23:20.760 --> 0:23:24.080 that we have. So just the robustness of our own 0:23:24.160 --> 0:23:28.080 infrastructure is one of the one of its vulnerabilities as well. Yeah, 0:23:28.440 --> 0:23:30.720 that's a good point as far as defense goes to 0:23:30.800 --> 0:23:35.359 I forgot about this stuff. Um. Strickland says that like 0:23:35.640 --> 0:23:40.240 the first step is education as far as educating consumers 0:23:40.440 --> 0:23:44.600 over you know, antivirus software and how they search the 0:23:44.640 --> 0:23:47.719 Internet and stuff like that. So I give that a medium. 0:23:47.800 --> 0:23:51.760 But uh, this guy, Richard Clarke, he's a security expert. 0:23:52.320 --> 0:23:56.399 He blames things on companies like Microsoft too. He feels 0:23:56.480 --> 0:24:01.480 like rushes through programs UM but for their fully security 0:24:01.560 --> 0:24:05.560 tested because they want to make you know, they want 0:24:05.600 --> 0:24:08.359 a few coins rub together by selling this stuff, and 0:24:08.560 --> 0:24:11.720 the consumer doesn't want to wait, and the stockholders don't 0:24:11.720 --> 0:24:14.280 want lots of testing because they want those new products 0:24:14.320 --> 0:24:17.040 on the market. So it's a bit of a rough position. 0:24:17.400 --> 0:24:21.400 And um, you know, private companies run most of the net, 0:24:21.440 --> 0:24:23.960 you know, it's not like this big government thing. So 0:24:25.080 --> 0:24:29.080 he contends, Clark does that it's up to these private 0:24:29.160 --> 0:24:32.840 companies who own the Internet's infrastructure to really make it 0:24:33.080 --> 0:24:35.800 more robust in a defensive sense, right, which is good 0:24:35.840 --> 0:24:38.359 in one sense, because then you have a dollar amount 0:24:38.480 --> 0:24:42.800