If Governments decide to apply their Technical and Military Intelligence skills to the Internet, not only won't we know, we won't be able to do anything about it.Talking to a friend recently, off the top of my head I outlined 4 levels of Internet attackers/exploits (highest level/most competent at the top):
-  National Military and Commercial Intelligence: surveillance, espionage, counter-espionage, targeted cyber-attack.
-  Commercial Espionage and "Exploit as a business": Exploits and SPAM as a Service, botnets, Credit Card and Identity trading.
-  small-scale, "hobbyist" and semi-professional technical creators. Some sales to level .
-  script-kiddies, Internet "graffiti"/vanity attackers, customers of level .