When it comes to the cybersecurity threats presented by our largest traditional adversaries, there are broad differences in their goals. For example, DPRK (North Korea) have heavy sanctions and frequently prefer profit/ransom attacks. The PRC (China) generally seems to prefer long-term access, rather than immediate sabotage, exfiltrating information or profiteering. Which matches up with what Burgess is discussing, I’m just surprised to see this framed in the article as a new strategy.

I definitely agree with the article that the upcoming safety/censoring measures are a dangerous overextension, and have mixed feeling about them being framed as state security measures.

However I disagree with the author over their general concern of state security blurring into private business, especially in a country where much of critical national infrastructure is privatived. When it comes to digital security, rather than social and political aspects like censorship and safety, that interference is generally beneficial, I don’t believe in companies’ freedom to leave a big hole in their fence.