NSA's software supply chain security recommendations need some refinement | Hacker News Reader