The attack against you would be interdiction, where the NSA (or whomever) would MITM shipping and receiving. What shipping and receiving? Somewhere between whe

The attack against you would be interdiction, where the NSA (or whomever) would MITM shipping and receiving. What shipping and receiving? Somewhere between where you will receive the package -- be it your home, PO Box, postal office, etc -- and the originating storage facility (ie: warehouse), there is a long list of hands exchanging your product. One of these hands would be an NSA agent's hands. https://en.wikipedia.org/wiki/Interdiction https://en.wikipedia.org/wiki/Interdiction Who is targeted? In all likelihood, businesses, but I'm sure individuals are targeted as well. The attack requires physical access to the hardware. And just to be clear -- it's not just Lenovo products. The net seems to have been cast much wider and other devices seem to be affected (HP laptops, desktop motherboards).