Microsoft is in a court battle with the Department of Justice. The DOJ is saying, "We want information from your data center in Ireland. It's not about a US citizen, but we want it." Microsoft said, "OK, fine. Go to a judge in Ireland. Ask them for a warrant. We have a mutual legal-assistance treaty. They'll do it. Give that to us, and we'll provide the information to you in accordance with Irish laws."

When we look at the full-on mass surveillance watching everyone in the country, in the United States, it doesn't work. It didn't stop the attacks in Boston. The marathon bombings. Where again, we knew who these individuals were. It didn't stop the Underwear Bomber, whose father walked into an embassy and warned us about this individual before he walked onto an airplane. And it's not going to stop the next attacks either. Because again, they're not public safety programmes. They're spying programmes. They are valuable for spying.

We have to argue forcefully and demand that the government recognise that these programmes do not prevent - mass surveillance does not prevent acts of terrorism.

Custom developed digital weapons, cyber weapons nowadays typically chain together a number of zero-day exploits that are targeted against the specific site, the specific target that they want to hit. But it depends, this level of sophistication, on the budget and the quality of the actor who's instigating the attack. If it's a country that's less poor or less sophisticated, it'll be a less sophisticated attack.

Someone recently talked about mass surveillance and the NSA revelations as being the atomic moment for computer scientists. The atomic bomb was the moral moment for physicists. Mass surveillance is the same moment for computer scientists, when they realize that the things they produce can be used to harm a tremendous number of people.

I don't think political reform is likely to succeed. [Senators Tom] Udall and [Ron] Wyden, on the intelligence committee, have been sounding the alarm, but they are a minority.

You shouldn't send an email from a computer that's associated with you if you don't want it to be tracked back to you. You don't want to hack the power plant from your house if you don't want them to follow the trail back and see your IP address.