Skip to main content
Part of complete coverage from

The cyberwar may be headed to your computer

By Douglas Rushkoff, Special to CNN
June 4, 2012 -- Updated 1405 GMT (2205 HKT)
Much of the Flame virus code is simply camouflage -- 3,000 lines of programming that make it hard to understand.
Much of the Flame virus code is simply camouflage -- 3,000 lines of programming that make it hard to understand.
STORY HIGHLIGHTS
  • Douglas Rushkoff: Flame virus attack on Iran has hallmarks of being concocted by nation-state
  • He cites article saying Obama concerned that such an attack might someday be aimed at U.S.
  • He asks: What's to keep malware from being aimed at civilian populations?
  • Rushkoff: We are headed toward an Internet that's blocked by airport-style security checks

Editor's note: Douglas Rushkoff writes a regular column for CNN.com. He is a media theorist and the author of "Program or Be Programmed: Ten Commands for a Digital Age" and "Life Inc: How Corporatism Conquered the World and How We Can Take It Back."

(CNN) -- The recently discovered Flame virus bears all the hallmarks of a cyberattack concocted by a nation-state. It's big and complex and pointed directly at a geopolitical hot zone, Iran.

What really gives it away as a government project is the extent to which its programmers sought to keep it out of civilian hands. The malware seems no more designed to protect us from a nuclear Iran than it is safeguarded to keep us from using the program itself against one another.

Flame is sophisticated. It's not a tiny piece of code that nests itself in e-mail and then erases your hard drive. It might better be described as a suite of programs -- the Microsoft Office of malware -- that perform different tasks.

One turns on the microphone of a computer to record conversations; another sets up a virtual machine on the computer to be controlled remotely; another uses Bluetooth to connect to nearby cell phones and copy data or monitor phone calls. One compresses all this espionage into smaller files; yet another sends data back to the master computer, accepts commands and installs new updates. This level of complexity and breadth of functionality is unparalleled.

Douglas Rushkoff
Douglas Rushkoff

But, in the theater of cyberwarfare, every successful cyberattack can be considered the most advanced attack of all time. This is an arms race of a new sort, where measures and countermeasures change the entire programming landscape. The methods of previous attacks, once analyzed, are neutralized by new additions and patches to computer operating systems. This sends would-be infiltrators back to the drawing board to come up with new, superior approaches. Technological warfare is a bit like evolution, where new mutations compete for survival.

Only on computers, we don't have to wait for nature to spontaneously fold a chromosome in some new way. We have programmers actively looking for new windows of opportunity, new maneuvers, new countermeasures and new ways of hiding what they're doing.

Cyber-sleuths track Flame malware
New computer virus discovered
New espionage 'malware' discovered

It amounts to the weaponization of cyberspace -- a practice in which the U.S. government has apparently been participating, sometimes reluctantly, according to an article in The New York Times last week. The cybercampaign against Iran apparently began under the Bush administration working with Israel, and continued under Barack Obama, who voiced concern about the precedent America was setting.

The resulting Stuxnet virus, aimed at disabling Iran's nuclear refineries, ended up getting loose on the Internet in the summer of 2010. The revelation of U.S. involvement with the virus worried Obama, according to the Times article, as it could justify future cyberattacks on Americans by enemies of the United States.

Flame may or may not be another product of this same campaign.

When asked about his nation's complicity in the malware, Israeli Vice Prime Minister Moshe Ya'alon cheekily told Army Radio, "Israel is blessed with high technology." But the rest of us are blessed with high technology, too.

What's to keep malware such as Flame from being used against civilian populations or even by civilian populations?

Nations have been using computers for warfare since computers existed. The development of the modern computer was in no small part accelerated by World War II. America's ENIAC computer calculated artillery trajectories, while Britain's Colossus computer decoded the Nazi's encrypted messages. At the time, however, computers were not household appliances. Like cannons and other weapons of war, they were tools of the state and inaccessible to regular folks.

And while the current cyberwar may be a nation vs. nation affair, the kinds of technologies unleashed in this conflict are not beyond the technical capability of more rogue hackers and criminals. The same technologies that let the U.S. and Israel thwart Iran's nuclear program can also enable, say, an Eastern European crime syndicate to participate in your banking activity.

What makes Flame unique -- and almost certainly of government origin -- is that it appears to have been written in a way that not only slows detection and countermeasures, but that also slows the spread of its techniques. The complete suite of programs is over 20 megabytes.

And while at first glance this seems to be a downside -- an elephant hiding in plain sight -- it has actually served to keep it unnoticed for at least two years. More importantly, it was made huge on purpose. Much of its code is simply camouflage -- 3,000 lines of programming that make it hard to understand and even harder for an enemy team of coders or even hackers in the civilian population to copy and use themselves.

It's as if its programmers were attempting to be responsible or at least exclusionary, and to prevent the weaponization of the greater Internet. Now that's classic government behavior. It's also probably futile.

Such efforts will likely only slow this inevitable slide toward an Internet that feels as blocked by security checks as an international airport. For in truth, we are all blessed with high technology.

Follow us on Twitter @CNNOpinion

Join us on Facebook/CNNOpinion

The opinions expressed in this commentary are solely those of Douglas Rushkoff.

ADVERTISEMENT
Part of complete coverage on
May 20, 2013 -- Updated 1536 GMT (2336 HKT)
Julian Zelizer says that Obama, like many before him, chose to work within the system to get things done rather than lead transformative change.
May 20, 2013 -- Updated 1522 GMT (2322 HKT)
Meg Urry says loss of the failing, planet-finding Kepler satellite would be huge for NASA--but one way or another, it's a matter of time before we find signs of life on other worlds
May 20, 2013 -- Updated 1132 GMT (1932 HKT)
Elizabeth Dunn and Michael Norton write that people pass up opportunities to spend their money to avoid disagreeable tasks
May 18, 2013 -- Updated 2022 GMT (0422 HKT)
Paul Butler says when President Obama delivers the commencement address at Morehouse, he has explaining to do.
May 19, 2013 -- Updated 1345 GMT (2145 HKT)
Bob Greene on how 18th century Americans tried to make sense of the day with no sun
May 18, 2013 -- Updated 0057 GMT (0857 HKT)
With guest Rep. Keith Ellison, John Avlon, Margaret Hoover and Dean Obeidallah discuss the president's scandal trifecta, hope for immigration and what Jolie's revelation means for women.
May 17, 2013 -- Updated 1709 GMT (0109 HKT)
The press has turned on President Obama with a vengeance, writes Howard Kurtz
May 18, 2013 -- Updated 1801 GMT (0201 HKT)
Donna Brazile says our democracy is endangered, not by the Russians, North Korea, Iran or even terrorists. To quote Pogo: "We have met the enemy and he is us."
May 18, 2013 -- Updated 1759 GMT (0159 HKT)
Photographer Arne Svenson defends his show "Neighbors," portraits of the occupants of a building near him taken through their windows.
May 20, 2013 -- Updated 1337 GMT (2137 HKT)
Theater critic Kevin Williamson was kicked out of a play when he took the phone away from an audience member and threw it. He says it was worth it.
May 18, 2013 -- Updated 1425 GMT (2225 HKT)
U.S. actor Angelina Jolie (L) holds daughter Zahara as husband and actor Brad Pitt (C) carries son Maddox during a stroll on the seafront promenade at the historic Gateway of India outside their hotel in Mumbai on November 12, 2006.
Gil Welch says women must not panic over Angelina Jolie's mastectomies: 99% of women don't carry the BRCA1 gene.
May 18, 2013 -- Updated 0852 GMT (1652 HKT)
JR's "Inside Out" project brings public spaces alive with giant representations of people
May 17, 2013 -- Updated 1922 GMT (0322 HKT)
Roger Colinvaux says the IRS scandal is fundamentally about disclosure of donors, not tax-exempt status.
May 17, 2013 -- Updated 1149 GMT (1949 HKT)
Alex Castellanos says Chris Matthews is wrong; the Washington controversies result from a government that is too big to control
May 20, 2013 -- Updated 1332 GMT (2132 HKT)
Mike Downey says Los Angeles has well-funded but clueless sports teams.
May 17, 2013 -- Updated 1552 GMT (2352 HKT)
Grace Liu says It's time for some tiger cubs to approvingly roar for our strict and demanding parents
May 17, 2013 -- Updated 1157 GMT (1957 HKT)
Sens. Al Franken and Roger Wicker say we need a strong SEC to make sure credit ratings fraud doesn't bring down the economy again.
May 16, 2013 -- Updated 1425 GMT (2225 HKT)
LZ Granderson says instead of reducing the blood alcohol content threshold, how about enforcing existing laws better?
May 16, 2013 -- Updated 1514 GMT (2314 HKT)
Maia Goodell says the military should use civil legal remedies on sexual assault cases.
ADVERTISEMENT