Great article. When dealing with well funded attackers like this, I'm not sure there's any decent mitigation that isn't extremely tedious.