I’m not a fan of our (the US) involvement in this conflict. That said it seems like a properly executed precision strike. The school is 200m from the Tomahawk impact. Is the intent of the article to showcase American precision or to imply the school was hit? I’m confused.
I’m not saying nobody has the resources to hack a company. I’m saying few companies have the resources to detect such a sophisticated hack. Therefore my infra is probably safer with, say, Amazon vs my local colo.
You are correct that individuals seeking personal infosec against state actors must be eternally vigilant.
I take a different view of this. Some 30 companies got this hardware, two are named as having the resources to find the offending hardware. By this logic you’re still safer using a company such as Amazon.
My gut feel about this for many years has been outsourcing chip manufacturing to another country is a serious security risk. This was a hardware device, hard to detect as it was, how much code is in the chips we already expect on a motherboard?
It seems flat out foolish for one country to own the world’s computer manufacturing.