Two years he says? https://www.schneier.com/blog/archives/2014/12/nsa_hacking_of_.html Assume that anything we learn about what the NSA does today is a preview of what cybercriminals are going to do in six months to two years.