When it comes to cyber warfare, we have more to lose than any other nation on earth. The technical sector is the backbone of the American economy, and if we start engaging in these kind of behaviors, in these kind of attacks, we're setting a standard, we're creating a new international norm of behavior that says this is what nations do. This is what developed nations do.

The United States need to put internet processes, policies, and procedures in place with real laws that forbid going beyond the borders of what's reasonable to ensure that the only time that we and other countries around the world exercise these authorities are when it is absolutely necessary.

I told the government I'd volunteer for prison, as long as it served the right purpose.

Everyone everywhere now understands how bad things have gotten — and they’re talking about it. They have the power to decide for themselves whether they are willing to sacrifice their privacy to the surveillance state.

There have been times throughout American history where what is right is not the same as what is legal. Sometimes to do the right thing you have to break the law.

We need the security standards to apply to the internet. We need to be able to trust that when we send our emails through Verizon, that Verizon isn't sharing with the NSA, that Verizon isn't sharing them with the FBI or German intelligence or French intelligence or Russian intelligence or Chinese intelligence.

The bare bones tools for a cyber-attack are to identify a vulnerability in the system you want to gain access to or you want to subvert or you want to deny, destroy, or degrade, and then to exploit it, which means to send codes, deliver code to that system somehow and get that code to that vulnerability, to that crack in their wall, jam it in there, and then have it execute.