I tell people: if it's in the news, don't worry about it, because by definition, news is something that almost never happens.

People often represent the weakest link in the security chain and are chronically responsible for the failure of security systems.

Technical problems can be remediated. A dishonest corporate culture is much harder to fix.

Beware the Four Horsemen of the Information Apocalypse: terrorists, drug dealers, kidnappers, and child pornographers. Seems like you can scare any public into allowing the government to do anything with those four.

Think of your existing power as the exponent in an equation that determines the value of information. The more power you have, the more additional power you derive from the new data.

If you think technology can solve your security problems, then you don't understand the problems and you don't understand the technology.

A colleague once told me that the world was full of bad security systems designed by people who read Applied Cryptography