AFP - Getty Images
This undated screen grab released by the Kaspersky Lab site shows code from the computer virus known as Flame.
By Bob Sullivan
Why would super-secret spy software be written in a video game language?? As security researchers continue to unpack the digital mystery that is the Flame virus, that's just one question looming over perhaps the world's most intriguing digital whodunit.
With all the talk about Flame being the most powerful, ingenious and stealthy computer virus ever written, some properties of the mysterious malicious software are causing confusion.
For one thing, the program takes up 20 megabytes of space on infected machines. That's not stealthy; large files usually indicate sloppy programming. Also, unlike Stuxnet, Flame didn't come with precision targeting, and hasn't yet been credited with doing anything as impressive as hacking nuclear power plant computers. But perhaps most mysterious of all: Part of Flame?s code was written in the Lua programming language, a simple language used almost exclusively by video game programmers.? Why would a nation-state trying to commit secret espionage toy with video game software?
"This is not a stealth operation," said Marcus Carey, who worked as?a security analyst at the National Security Agency for eight years before joining the security firm Rapid7 in Boston.
News of the Flame virus hit Monday, as multiple computer security firms claimed the program represented a huge escalation in cyberwarfare. Moscow-based Kaspersky Labs, among the first to analyze the virus, called it the most powerful malicious program ever.
?The complexity and functionality of the newly discovered malicious program exceed those of all other cyber menaces known to date,? it said.
Flame reportedly comes loaded with lots of capabilities, such as remotely turning on victims' PC microphones, but it's hardly the first virus to accomplish that.? And unlike Stuxnet, it's yet clear that?Flame used a series of so-called 0-day exploits -- ?vulnerabilities in software that are undiscovered by the security industry and for which there are no antidotes.? While initial reports immediately linked Stuxnet to Flame, primarily because they both seem to target Iran, skepticism is beginning to build that the two are directly linked.
That's partly because the two programs were written in very different ways. Flame?s authors used Lua, something that confuses observers.
"Lua in a spy tool is just ... weird," said one Israeli programmer who uses Lua and requested anonymity. "The little snippet I've seen of the code seems so ... ordinary ... really like the work of your average programmer.? Stuxnet sounded genius.?
Said another: "Lua is considered a kids language.... All I see around that is built with Lua are games. I mean, the syntax is very simple."
Not exactly the stuff of high-tech international espionage. Or is it?
Lua has been around since the 1980s, developed at the Pontifical Catholic University of Rio de Janeiro in Brazil. It was created out of necessity; at the time, trade barriers made importing software development tools too expensive.? Development of Lua as a programming language remains centered in Brazil, where a small group of programmers make infrequent updates to the language.? But it's become a favorite platform for a few thousand devotees around the world, who are attracted to its simplicity, its ability to play well with other software and its tiny footprint, which makes it ideal for use on embedded devices or games, where memory and space are at a premium.
Unlike other programming languages that grow in size out of necessity over ?time, Lua has actually shrunken in recent years, as developers have revised and refined its architecture.
Its name ? Portuguese for ?moon? ? hints at Lua?s use as a subordinate language to attach satellite projects to larger pieces of software.
At the Lua-L discussion list, Flame talk was all the rage on Monday, as its users? small corner of the technology world was suddenly thrust into the limelight.
"In some morbid way this is an endorsement for Lua," wrote a poster identified as Enrico Colombini.? "Though I'm a bit perplexed about the alleged high sophistication of that malware, when I see unobfuscated Lua with self-descriptive names."
But longtime Lua programmer Erik Hougaard, based in Denmark, said such opinions show a fundamental misunderstanding of Lua's simple elegance as a programming tool.
"It's a well-kept secret, but it's everywhere. It's hard to pick up an Xbox game without it," said Hougaard, who now uses Lua to program robots but has also used it to create from-scratch accounting software and other financial tools at EFoqus Danmark A/S.? "It's not sexy, but it's unique. It's so small you can fit it onto a single chip."
That's essential, because Lua includes both program and programming language in one tidy package -- meaning programs written in Lua will run reliably on machines as diverse as PCs and iPhones.?
"Lua is quite common in the mobile application space. If someone has Angry Birds installed on their iPhone, they are using Lua," said Carey, the security analyst. In fact, thousands of iPhone apps are written with Lua, he said.
Hackers have taken notice. While security firms have said they can't think of another computer virus before Flame that used Lua, it is a fundamental part of a favorite hacker tool called "NMAP." NMAP is used to scan the Internet for computers with potentially exploitable vulnerabilities; it?s the first tool used by hackers looking for trouble, and by security professionals looking to plug holes. NMAP permits use of a scripting language that runs under Lua so hackers can adjust the tool as needed.
"People have been using Lua to hack networks for a while, so this shouldn't surprise anyone," Carey said.? "Attackers are just using what works."
Lua first came to hackers' attention about two or three years ago, roughly when some analysts believe Flame was written, Carey said.
As with most information about Flame, Lua's appearance in the virus can be interpreted in two ways:
- Flame's writers may have been ahead of their time, using a unique programming language to create their cybermonster, and further confuse computer security professionals.
- Or, Flame's writers may have been video gamers and relative amateurs who didn't bother to do much to cover their tracks.
Symantec Corp. believes the use of Lua supports the former theory. It?s one of many security firms calling Flame one?of the most powerful and complex virus ever written.
"Lua is scriptable, easy to understand, and easy to update. That said, it?s not used often," said Vikram Thakur, principal security manager at Symantec Security Response. "Anecdotally, we can?t think of another threat that is written in Lua..... The usage of the programming language is what makes the program, independent of the language, interesting."
But is it the work of genius, and a sign that cyberwar has escalated a new and dangerous level? Carey is not so sure.
"Saying this is the work of a nation-state is premature," he said. "This is not a particularly clever piece of malware or uber-elite." And despite the fact that it apparently operated in stealth for at least two years, many experts say it is too big to have been conceived as a spy tool.
"What's with the size?" said the anonymous Israeli Lua programmer. "It's like the trick they do in the movies of making a scene on the train/plane? to create a diversion while committing a crime.?
Colombini was even more direct in his assessment.
"I find it difficult to believe this to be the work of an intelligence service, at least of a decent one,? he said. ?Obfuscating ? the Lua code would have made analysis more difficult and above all slower. In the spying business gaining time has a very high value. ? No self-respecting intelligence service (would have neglected to do that)." ?
So far, most of the roughly 300 confirmed Flame infections have been in Middle Eastern countries that are natural enemies of Israel, including 189 in Iran, according to Kaspersky Lab. ?
?If it weren't for the peculiar geographical distribution, (which is) the only thing that makes one think of politically charged malware, I'd think of a sort of malware construction kit,? designed to simply collect a large series of attack tools in one place, Colombini said.? ?
Given that the subject is covert cyberwar, confusion, half-truths and disinformation are the rule rather than the exception. Already, an unnamed U.S. official has told NBC News that the U.S. government is probably responsible for it; while Israeli officials have hinted that their side developed it.
Something else concerns Carey about the way that the Flame narrative has progressed so far.? Much of what we know about Flame has come directly from Iran's Computer Emergency Response Team Coordination Center.
?"Generally, we don't believe anything Iran says. Here, we seem to be believing everything they say," he said. "But this incident reinforces a storyline for Iran playing the victim."
Symantec, and many other security organizations, have said the sheer size of Flame is making thorough analysis of the virus a slog. Early reports on the malicious program all came with warnings that findings were preliminary.? Symantec expects to issue a follow-up later this week.
superbowl 2012 kickoff time what time is the super bowl 2012 nfl mvp lana del rey snl performance nick diaz sheryl sandberg superbowl recipes
13. Make a paste of roasted & powdered pomegranate skin with fresh lime juice and apply over boils, acne, pimple, blackheads and whiteheads. Drinking lots of water can significantly help in flushing acne these harmful toxins from your to body and can contribute to having clear skin. What this means is that if you are using multi- step acne health skin care treatments that require up how to get rid of acne scars overnight to six how to get rid of acne scars overnight applications of benzoyl peroxide per day, it will probably turn out really bad for your skin. Leave on for about ten to 15 minutes rubbing alcohol for acne and rinse it off. If alcohol is mixed with it, this drug can cause a series of horrid symptoms which aims to halt the mixing. Peter Thomas Roth Ultra- lite Oil- free Sunscreen Mist SPF15 is another form. Baby acne is very common and usually starts by about 3 weeks of age. If you want to know about how to cure acne overnight, then, the alcohol following remedies may help you. Dirt does not cause the formation of blackheads and acne, which is actually brought on by hormonal activity that forces the follicular gland to enlarge, and therefore produce greater amounts of rubbing sebum. Just because overnight teenagers are going through hormonal changes, does not mean that this has anything to do with acne. Be gentle with your skin and make the appropriate queries before making your product purchase. Naturally occurring plant based estrogens can be obtained how by consuming good quality soy products like natural organic soy yogurt. Shaving is a very clean routine and requires that you simply do it correctly without doing harm to the skin. For severe and painful acne a consultation with a dermatologist is recommended. Doing so not only worsens the condition but could also result in further infection and even worse, scarring. for pimples, blackheads, and cysts) is merely a symptom of of an imbalance in your body. Now it? s affecting younger children and lasting longer. rid Studies Show Laser Therapy Effective At Clearing Acne Dermatologist evaluates the latest laser and light sources approved get for treating acne. Echinacea, chamomile, lavender, bergamot, dandelion or burdock root can all be used to help the skin improve its overall condition. Use some cotton and soak scars it with lemon juice. In most of these cases, the problem goes beyond merely being blemishes. One of the things that I noticed about these systems is that they feature a cleanser and a toner as part of their product line. Also, it can be treated in the comfortable acne environment of you home with the help of home remedies for acne scars. 
A 3- day healing process for acne is also doable. You will also have to take in essential fatty acids with zinc to make this treatment produces better results. While the embarrassment of having a lot of red dots on ones face or body may subside when the acne clears, the scars that the acne leaves still affects ones self confidence and self esteem. These adjustments to your everyday life will not only offer you with clear your skin but also you will be doing so much fantastic for your entire body. The birth control pills are beneficial for women who have skin prone to pimples. Some people are born to be lucky for not going through this condition, but these people are usually minority. How to pick the best acne treatments It is best not to do so without the consultation of a dermatologist, especially if you suffer from skin allergies or infections or possess cause a sensitive skin. This is so the cleanser can do its work and get deep down into the pores and rid the acne. Push a small portion of cucumber through a blender. The objections are many but scientists are now looking to make use of the benefits of the wonderful properties of herbal ingredients. You can also use special it makeup sensitive skin, do not use oil as a basis. Same as isotretinion; Retin- A is very strong in itself and its use must be carefully monitored. You just have to determine the probable cause of your acne and then you can start with the treatment. Theres a lot of truth in those old wives tales for home remedies that can solve these kinds of skin problems. This is the reason why facial spas and treatments are experiencing a boom in their operations as they try to service the zap needs of these paying can customers. However, if you? ve been guilty of neglecting your skin, the initial result is that your acne may get worse at first. Dwelling treatments for scars do do the job and most folks will see results, nevertheless, the scar treatments are finest utilised with a superior high quality scar cream. Hormonal acne is more commonly seen around the chin area. Insufficient water levels in the body hamper excretion of waste products. Their treatment system covers the main parts of getting rid of acne, unclogging pores, reducing bacteria growth and getting rid of excess oil. According to naturopathic doctors, one of the root causes of acne is accumulation of metabolic toxins and excess hormones in the body due to acne slow activity of the liver and other organs involved in flushing out can coffee cause acne of body wastes. If your skin gets clog free once, then new acne will never grow on your face again. The nose is the place where an excess of oil can easily be produced, and then that oil can build up. We? re a household of proactiv users, as my boyfriend uses zap it acne it daily as well. Patients can coffee cause acne also experienced an added benefit of significant improvement in their acne scars, as the pulsed dye laser offers superior penetration to the deeper layers of the skin where scars form.? Suffering The Heartbreak acne Of Acne Can Be Devastating An inflammatory acne disorder is simply one of those conditions that can coffee have a devastating effect on anyone? s self esteem. 
