If you think technology can solve your security problems, then you don't understand the problems and you don't understand the technology.

But in this country, while you have to be competent to pull off a terrorist attack, you don't have to be competent to cause terror. All you need to do is start plotting an attack and - regardless of whether or not you have a viable plan, weapons or even the faintest clue - the media will aid you in terrorizing the entire population.

I tell people: if it's in the news, don't worry about it, because by definition, news is something that almost never happens.

It is insufficient to protect ourselves with laws; we need to protect ourselves with mathematics.

A colleague once told me that the world was full of bad security systems designed by people who read Applied Cryptography

Trying to make bits uncopyable is like trying to make water not wet. The sooner people accept this, and build business models that take this into account, the sooner people will start making money again.

Choosing providers is not a choice between surveillance/not; it's just choosing which feudal lord gets to spy on you.