In this post, however, I want to look at the substance of the story and spend some time thinking about what it tells us about cyber capabilities and about the state of the law relating to the cyber domain.

I do not agree with people who are arguing that Stuxnet had no collateral damage. This slight represents a probably willful misunderstanding of IT operations and the costs involved.