NSA's software supply chain security recommendations need some refinement | Dark Hacker News