If you think technology can solve your security problems, then you don't understand the problems and you don't understand the technology.

I tell people: if it's in the news, don't worry about it, because by definition, news is something that almost never happens.

A colleague once told me that the world was full of bad security systems designed by people who read Applied Cryptography

There are two kinds of cryptography in this world: cryptography that will stop your kid sister from reading your files, and cryptography that will stop major governments from reading your files.

And honestly, if anyone thinks they can get an accurate picture of anyplace on the planet by reading news reports, they're sadly mistaken.

Despite fearful rhetoric to the contrary, terrorism is not a transcendent threat. A terrorist attack cannot possibly destroy our country's way of life; it's only our reaction to that attack that can do that kind of damage.

We no longer know whom to trust. This is the greatest damage the NSA has done to the Internet, and will be the hardest to fix.