I was surprised to find the Central Intelligence Agency in my weblogs. This means they both leave JavaScript on and use the company IP for casual browsing. I'd

I was surprised to find the Central Intelligence Agency in my weblogs. This means they both leave JavaScript on and use the company IP for casual browsing. I'd expect that they make attack vectors as small as possible and have access to IP ranges that can not be so easily traced back to them, but maybe the rules are more relaxed for casual browsing/research. Don't these agencies, militaries, and companies (BAH, Lockheed, Boeing, Dell) get micro-targetted exactly like this? I'd imagine foreign intelligence agencies use websites and ad networks to drop zero-days on persons of interest.