I could imagine a scenario where a specific target was identified by the version of several potentially vulnerable packages they installed. The NSA monitors whe

I could imagine a scenario where a specific target was identified by the version of several potentially vulnerable packages they installed. The NSA monitors when this target is online (possible even through Tor) then listens to a specific set of upgrade requests for debian during that time. Probably waiting for an upgrade into a version that they have found a vulnerability in.