We watch our own people more closely than anyone else in the world.

When governments go too far to punish people for actions that are dissent rather than a real threat to the nation, they risk delegitimizing not just their systems of justice, but the legitimacy of the government itself. Because when they bring political charges against people for acts that were clearly at least intended to work in the public interest, they deny them the opportunity to mount a public-interest defense.

All I wanted was for the public to be able to have a say in how they are governed. That is a milestone we left a long time ago.

We can plant bugs in machines. Once you go on the network, I can identify your machine. You will never be safe whatever protections you put in place.

Encryption works. Properly implemented strong crypto systems are one of the few things that you can rely on. Unfortunately, endpoint security is so terrifically weak that NSA can frequently find ways around it.

You shouldn't send an email from a computer that's associated with you if you don't want it to be tracked back to you. You don't want to hack the power plant from your house if you don't want them to follow the trail back and see your IP address.

What we need to do is we need to create new international standards of behavior - not just national laws, because this is a global problem. We can't just fix it in the United States, because there are other countries that don't follow U.S. laws. We have to create international standards that say that cyber attacks should only ever occur when it is absolutely necessary.