ID can be hijacked, and cards can be faked. All of the 9/11 terrorists had fake IDs, yet they still got on the planes. If the British national ID card can't be faked, it will be the first on the planet.

History has taught us: never underestimate the amount of money, time, and effort someone will expend to thwart a security system. It's always better to assume the worst. Assume your adversaries are better than they are. Assume science and technology will soon be able to do things they cannot yet. Give yourself a margin for error. Give yourself more security than you need today. When the unexpected happens, you'll be glad you did.

Corporate and government surveillance aren't separate; they're an alliance of interests.

The user's going to pick dancing pigs over security every time.

Technical problems can be remediated. A dishonest corporate culture is much harder to fix.

Security is a process, not a product.

Only amateurs attack machines; professionals target people.