system
Given the following post, respond as if you're commenting on Reddit:
human
Is hacking always the victims fault at some point, or can everything be hacked?

I read about the US government having been hacked by Russian hackers. Earlier this week, Finland was hacked. I’ve read about large companies being hacked, passwords leaked etc. I understand that in practice, there’s always an employee who can mess up. But from a theoretical standpoint, is everything always hackable? Is every hack due to the victim (be it a person och a company) having done something wrong/missed something? Given that company X keeps it’s programs up to date, follows protocol among employees 100% of the time, makes sure to store all data encrypted, salted, never re-using keys, well, just executing everything perfectly (remember, it’s a theoretical scenario!), is the company unhackable as long as there’s a connection to the internet?
gpt
You really can't blame the victim for a   zero day vulnerability, as you can't apply a patch that does't exist. Even air gapped systems can be exploited via social engineering, or and adversary who has infiltrated your operations. Stuxnet, for example, was injected by a double agent using a thumb drive.

In practice, being security conscious,  and following best practices like applying security in depth will reduce the probability and consequences of an exploit. Risk always exists, though.