HackerTube.dev

27C3: Adventures in analyzing Stuxnet (Bruce Dang from Microsoft)

basti0007 · 95.2K views · 2010-12-29 · 1:14:56

Open on YouTube ↗

If playback is restricted in your region, try opening the original video. Use Mark watched to add it to your marked videos.

Overview

Bruce Dang of Microsoft gives a 27C3 talk on how the Stuxnet vulnerabilities were found and analyzed. He walks through the techniques used to triage them and the details of each zero-day exploit, down to the opcode level.

On Hacker News

HN recommends it as the definitive technical deep dive into Stuxnet's zero-days from someone who analyzed it first-hand.

Recommended by 8 HN people across 7 months · HN mentions 2011–2024

Topics

Security & hacking
Search by tags
stuxnetzero-daymalware analysisreverse engineeringwindows vulnerabilities

What people said

nodesocket · 2021-06 · Strong recommendation

Are these on the same level as Stuxnet? For an amazing technical deep dive into each 0-day Stuxnet vulnerability watch this talk with Bruce Dang from Microsoft[1]. I really enjoy his natural speaking style (it's like talking about Stuxnet over beers with him). [1] [VIDEO]

Read the original HN comment ↗
tbrock · 2013-02 · Strong recommendation

If anyone hasn't seen this video from the Microsoft team analyzing how this went down, I highly suggest watching. I was on the edge of my seat! [VIDEO]

Read the original HN comment ↗
JonnieCache · 2011-05 · Strong recommendation

Also, check out this excellent 27C3 presentation from Bruce Dang, a microsoft malware analyst, where he cracks numerous gags about mossad. [VIDEO] It's well worth watching anyway, lots of good info on the various exploits used by stuxnet, down to the opcode level. He's a pretty funny guy as well.

Read the original HN comment ↗

Sources

Video by basti0007, played through YouTube.

Data and selection notes

HN summaries and labels may contain AI errors. HN dates refer to discussions, not video publication.

HN Library: HackerTube export (2026-10-31) and open-index/hacker-news. Upstream summaries and classifications may contain AI errors.

Views, duration and playback status refresh separately from the published catalog. When an update fails, existing data remains visible.

Selection checks
  • SaaS & AI candidates: Topic keywords do not match
  • Editor-approved picks: Editorial review is required

Rule matches identify candidates. They do not guarantee video quality or financial results.

About the library and its sources