When people conceptualize a cyber-attack, they do tend to think about parts of the critical infrastructure like power plants, water supplies, and similar sort of heavy infrastructure, critical infrastructure areas. And they could be hit, as long as they're network connected, as long as they have some kind of systems that interact with them that could be manipulated from internet connection.

We don't like to use the phrase "state security" in the United States because it reminds us of all the bad regimes. But it's a key concept, because when these officials are out on TV, they're not talking about what's good for you. They're not talking about what's good for business. They're not talking about what's good for society. They're talking about the protection and perpetuation of a national state system.

We need the security standards to apply to the internet. We need to be able to trust that when we send our emails through Verizon, that Verizon isn't sharing with the NSA, that Verizon isn't sharing them with the FBI or German intelligence or French intelligence or Russian intelligence or Chinese intelligence.

People would publish their websites; other people would read them. But there was no real back and forth other than through e-mail. Web 2.0 was what they called the collaborative web - Facebook, Twitter, the social media.

By creating a self-policing, self-reporting, sort of self-monitoring culture through law, through statute, and imposing that on the academic world, I think not only are we losing a significant measure of freedom in academic traditions and in our civil society, but we're actually making ourselves less competitive with every other country around the world that does not do that. Because that's where researchers are going to go and that's where academics are going to go. And ultimately, that's where breakthroughs are going to occur.

Even if it were, you run into the same problem with international commerce: if you create a device that is famous for compromised security and it has an American back door, nobody is gonna buy it.

In the United States, there hasn't been much legislative change on the surveillance issue, although there are some tepid proposals.