It's certainly easier to implement bad security and make it illegal for anyone to notice than it is to implement good security.

We no longer know whom to trust. This is the greatest damage the NSA has done to the Internet, and will be the hardest to fix.

A colleague once told me that the world was full of bad security systems designed by people who read Applied Cryptography

Only amateurs attack machines; professionals target people.

The more we expect technology to protect us from people in the same way it protects us from nature, the more we will sacrifice the very values of our society in futile attempts to achieve this security.

We can't keep weapons out of prisons; we can't possibly expect to keep them out of airports.

Anyone, from the most clueless amateur to the best cryptographer, can create an algorithm that he himself can't break.