Those who are experts in the fields of surveillance, privacy, and technology say that there need to be two tracks: a policy track and a technology track. The technology track is encryption. It works and if you want privacy, then you should use it.

In terms of sources coming forward, I really reject this idea of talking about one, two, three sources. There are many sources that have informed the reporting we've done and I think that Americans owe them a debt of gratitude for taking the risk they do.

I was in correspondence with an anonymous source for about five months and in the process of developing a dialogue you build ideas, of course, about who that person might be. My idea was that he was in his late forties, early fifties. I figured he must be Internet generation because he was super tech-savvy, but I thought that, given the level of access and information he was able to discuss, he had to be older.

I don't speak Arabic - I know a little to get by, but that's all.

One of the most frightening things, I think, is the capacity for retroactive searching, so you can go back in time and trace who someone is in contact with and where they've been.

We've already seen shifts happening in some of the big companies - Google, Apple - that now understand how vulnerable their customer data is, and that if it's vulnerable, then their business is, too, and so you see a beefing up of encryption technologies. At the same time, no programs have been dismantled at the governmental level, despite international pressure.

There are people who are always going to try to engage in activity that is illegal and they're going to try to subvert surveillance. But everybody should not give up their liberties and rights to privacy because some people are going to [do that]. We shouldn't stop or limit our basic liberties because some people are going to engage in criminal activities.