True, but I think it makes more sense to look at these tactics in the most general way possible. Firms could be doing them, as could much smaller governments.

True, but I think it makes more sense to look at these tactics in the most general way possible. Firms could be doing them, as could much smaller governments. Most press about itesec is focused on individual vulnerabilities and the tactics used in specific exploits. What we're seeing is tremendous "long game" strategic sophistication. Stuxnet was one example of using many attack vectors to eventually achieve a goal and these revelations suggest that was just the beginning. Sure, intercepting the mail could be difficult, but all it takes is a few compromised UPS drivers and warrants are no longer needed.