Despite fearful rhetoric to the contrary, terrorism is not a transcendent threat. A terrorist attack cannot possibly destroy our country's way of life; it's only our reaction to that attack that can do that kind of damage.

Security is a process, not a product.

If you think technology can solve your security problems, then you don't understand the problems and you don't understand the technology.

If you ask amateurs to act as front-line security personnel, you shouldn't be surprised when you get amateur security.

The mantra of any good security engineer is: "Security is a not a product, but a process." It's more than designing strong cryptography into a system; it's designing the entire system such that all security measures, including cryptography, work together.

It is poor civic hygiene to install technologies that could someday facilitate a police state.

But in this country, while you have to be competent to pull off a terrorist attack, you don't have to be competent to cause terror. All you need to do is start plotting an attack and - regardless of whether or not you have a viable plan, weapons or even the faintest clue - the media will aid you in terrorizing the entire population.