You can show a guy sort of peeking over the wall, you can see a guy tunneling underneath, you can see a guy going through the front door. All of those, in cyber terms, are vulnerabilities, because it's not that you have to look for one hole of a specific type. It's the whole paradigm.

Defending ourselves from internet-based attacks, internet-originated attacks, is much, much more important than our ability to launch attacks against similar targets in foreign countries.

People sometimes say I broke an oath of secrecy - one of the early charges leveled against me. But it's a fundamental misunderstanding, because there is no oath of secrecy for people who work in the intelligence community. You are asked to sign a civil agreement, called a Standard Form 312, which basically says if you disclose classified information, they can sue you; they can do this, that and the other. And you risk going to jail.

Truth is coming, and it cannot be stopped.

Extremists are not going to disappear.

[Bill] Binney will argue with you all day about ThinThread, but his idea was that it would collect everything about everybody but be immediately encrypted so no one could read it. Only a court could give intelligence officials the key to decrypt it. The idea was to find a kind of a compromise between [privacy rights and] the assertion that if you don't collect things as they happen, you won't have them later - because what the NSA really wants is the capability of retrospective investigation.

There is a policy response that needs to occur. There is also a technical response that needs to occur. It is the development community that can really craft the solutions and make sure we are safe.