Supply chain attacks are exploiting our assumptions | Not Hacker News!