> What does bother me is that we caught other countries several times, sometimes using terribly bad tactics (where the defense was bad for various reasons that

> What does bother me is that we caught other countries several times, sometimes using terribly bad tactics (where the defense was bad for various reasons that are usually also bad) and sometimes using relatively novel stuff that we'd never see before. What are you trying to say, that sometimes they are reading a "how to hack a computer" guide and try admin/admin and sometimes Huawei is supplying 0days to them? As for NSA or similar US agencies: why would they hack US companies? They just send a friendly letter, attach a check for the inconvenience and have the companies build them a surveillance room. Outside the US, TAO is a thing. And when they get caught, you better have definite proof before you say that you believe it's them, because that might have severe consequences for you personally, your company and the international relations of your country.