[ben_w]

I suspect that if it was possible to do anything significant to Russian infrastructure via hacking, it would have already happened by now.

2 million USD gets you a smartphone zero-day*, according to rumours, something like a single ATACMS missile.

* geometric mean of 200k and 20M: https://techcrunch.com/2023/09/27/russian-zero-day-seller-of...

[jamesmotherway]

I'm assuming by "significant" you mean an attack on critical infrastructure.

That's a strategic capability that very likely requires multiple attack chains, not a single exploit. For Western countries, cost is probably the least significant factor in deciding to use it.

One would want to be certain that option is available, but only when absolutely necessary. Using it on a random Tuesday would take that particular option off the table forever. Best case scenario, Russia discovers the means by which the attack was carried out. Worst case, they retaliate with nuclear weapons.

Globally, I believe there are only a few countries capable of executing such a plan.

[0xDEAFBEAD]

>I suspect that if it was possible to do anything significant to Russian infrastructure via hacking, it would have already happened by now.

Alternatively, maybe it is possible, but the US doesn't want to escalate? You saw how reluctant Biden was to authorize missile strikes inside Russia.

[t-3]

Hacking would just be tit-for-tat at most, and unlikely to be accepted as a good reason for major escalations. Most likely Russian infrastructure is just too old to be vulnerable in the same ways as Western infrastructure.

[ben_w]

At the price I've quoted, it isn't Biden's decision, it's something Zelensky could order directly from Ukranian taxes as a rounding error.

At least, if it was possible.

[0xDEAFBEAD]

My understanding is that Russian cyberattacks on Ukraine have been rather ineffectual due to Ukrainian cyber defenses.