If I had the ear of middle management in America's security service I'd suggest a different approach to evangelizing at a grassroots level. Let's stop pretending startups can ignore the law and make knowledge of the law a distinguishing mark in the pedigree of a startup hacker.