Almost all exploits are simple mistakes.

The security world needs to take a more proactive approach. A lot of companies will know an exploit exists and they'll release the software anyways, and the patch later on. Stuff like this needs to stop. There needs to be some kind of agency that verifies code before it's released, maybe a grading system for code.

A lot of people would enter restricted sites just to say they can, and then log out. Today, everything related to hacking seems to be for monetary gain.

Back in my era, hacking was all about messing with other hackers. It was a hacker war.

I have done conferences explaining that cloud is a bad idea. It's putting all your eggs in one basket.

A lot of hackers set up scam sites. They can impersonate a site like PayPal, for instance.

Where there's a will, there's a way. Hackers tend to find a way. Code is also expanding. More lines of code means more probability that there is an exploit that can be [used].