You are also asked to take an oath, and that's the oath of service. The oath of service is not to secrecy, but to the Constitution - to protect it against all enemies, foreign and domestic. That's the oath that I kept, that James Clapper and former NSA director Keith Alexander did not. You raise your hand and you take the oath in your class when you are on board. All government officials are made to do it who work for the intelligence agencies - at least, that's where I took the oath.

When the United States cannibalize dollars from the defensive business of the NSA, securing our communications, protecting our systems, patching zero-day vulnerabilities, and instead we're giving those dollars to be used for creating new vulnerabilities in our systems so that they can surveil us and other people abroad who use the same systems.

We can't simply scare people into giving up their rights, on the basis, oh, this protects us from terrorism.

A zero-day exploit is a method of hacking a system. It's sort of a vulnerability that has an exploit written for it, sort of a key and a lock that go together to a given software package. It could be an internet web server. It could be Microsoft Office. It could be Adobe Reader or it could be Facebook.

I talk to people in the ACLU office in New York all the time. I'm able to participate in the debate and to campaign for reform. I'm just the first to come forward in the manner that I did and succeed.

The reality is if we sit back and allow a few officials behind closed doors to launch offensive attacks without any oversight against foreign nations, against people we don't like, against political groups, radicals, and extremists whose ideas we may not agree with, and could be repulsive or even violent - if we let that happen without public buy-in, we won't have any seat at the table of government to decide whether or not it's appropriate for these officials to drag us into some kind of war activity that we don't want, but we weren't aware of at the time.

People have to be free to investigate computer security. People have to be free to look for the vulnerabilities and create proof of concept code to show that they are true vulnerabilities in order for us to secure our systems.