Bruce Schneier

Bruce Schneier
Bruce Schneieris an American cryptographer, computer security and privacy specialist, and writer. He is the author of several books on general security topics, computer security and cryptography...
NationalityAmerican
ProfessionScientist
Date of Birth15 January 1963
CountryUnited States of America
consider current hard impossible mathematics using willing
Using current mathematics and technology, it is impossible to even consider factoring a 1024-bit number. I'm not willing to make any hard predictions about tomorrow.
airport bomb care expect football game kinds matter problem restaurant scenarios super terrorists whether
We all think of the movie scenarios - the kinds of things that we would expect to see in a movie plot. Terrorists sneaking a bomb into the Super Bowl, for example. The problem is, terrorists don't care. They don't care whether it's a football game or an airport or a restaurant or a movie theater. It doesn't matter to them.
database field system
We don?t have a field in the database system that will say you're an evildoer.
entity position solve
You have to make the entity in the position to solve the problem, responsible for the problem. Otherwise, it doesn't get solved.
choice companies gets happen insecure insurance longer looks losing operating pay percent premium rid sales shoddy start systems version windows
What will happen when the CFO looks at his premium and realizes that it will go down 50 percent if he gets rid of all his insecure Windows operating systems and replaces them with a secure version of Linux? The choice of which operating system to use will no longer be 100 percent technical, ... Microsoft, and other companies with shoddy security, will start losing sales because companies don't want to pay the insurance premiums.
technology thinking problem
If you think technology can solve your security problems, then you don't understand the problems and you don't understand the technology.
children eye individuality
For if we are observed in all matters, we are constantly under threat of correction, judgment, criticism, even plagiarism of our own uniqueness. We become children, fettered under watchful eyes, constantly fearful that-either now or in the uncertain future-patterns we leave behind will be brought back to implicate us, by whatever authority has now become focused upon our once-private and innocent acts. We lose our individuality, because everything we do is observable and recordable.
people security hacks
Amateurs hack systems, professionals hack people.
strong design together
The mantra of any good security engineer is: 'Security is a not a product, but a process.' It's more than designing strong cryptography into a system; it's designing the entire system such that all security measures, including cryptography, work together.
sharks years pigs
More people are killed every year by pigs than by sharks, which shows you how good we are at evaluating risk.
mistake thinking products
Don't make the mistake of thinking you're Facebook's customer, you're not – you're the product,
country media people
Terrorism isn't a crime against people or property. It's a crime against our minds, using the death of innocents and destruction of property to make us fearful. Terrorists use the media to magnify their actions and further spread fear. And when we react out of fear, when we change our policy to make our country less open, the terrorists succeed -- even if their attacks fail. But when we refuse to be terrorized, when we're indomitable in the face of terror, the terrorists fail -- even if their attacks succeed.
security-systems people links
People often represent the weakest link in the security chain and are chronically responsible for the failure of security systems.
technology security-systems taught-us
History has taught us: never underestimate the amount of money, time, and effort someone will expend to thwart a security system. It's always better to assume the worst. Assume your adversaries are better than they are. Assume science and technology will soon be able to do things they cannot yet. Give yourself a margin for error. Give yourself more security than you need today. When the unexpected happens, you'll be glad you did.