Here's a brief summary of what we know, what we don't know, and how you can at least try to protect yourself from surveillance.