mister_monster on Nostr: I'm more talking about software supply chain attacks, which are more of a risk than ...

I'm more talking about software supply chain attacks, which are more of a risk than hardware supply chain attacks because software is easier to infiltrate and obfuscate dangerous changes, most tools rely on repositories of dependencies and most of us dont know the first thing about most of the dependencies we use or the people that maintain them. Hardware supply chain attacks are a real threat but not as big as software. But then, we have hardware supply chains for general purpose computers that we know for a fact are backdoored, we rely only on being small fish not worth eating. So if we rely on that with one set of hardware, why not the other?