Re: I tend to mistrust these attributions
how can you tell the difference?
Well, China has a major state programme in place to control and monitor its citizens' internet access, so there is a reasonable argument that exfiltration of data on such a scale and over such a long period could not have happened without at least tacit facilitation.
Other countries have major state programme in places merely to monitor citizens' internet access, so there is a reasonable argument that exfiltration of data on such a scale and over such a long period could not have happened without their choosing to look the other way.
There's a difference - but whether it's more than semantic, I'm really not sure...