|
| |
| | Bruce Schneier |
 | | Bruce holds an MS degree in computer science from American University and a BS degree in physics from the University of Rochester. |  | | Bruce is responsible for maintaining Counterpane's technical lead in world-class information security technology and its practical and effective implementation. |  | | Bruce served on the board of directors of the International Association for Cryptologic Research, and is an Advisory Board member for the Electronic Privacy Information Center. |
|
http://www.counterpane.com/schneier.html
(349 words)
|
|
| |
| | DBLP: Bruce Schneier |
 | | Bruce Schneier, John Kelsey: Authenticating Outputs of Computer Software Using a Cryptographic Coprocessor. |  | | Bruce Schneier, Doug Whiting: Fast Software Encryption: Designing Encryption Algorithms for Optimal Software Speed on the Intel Pentium Processor. |  | | Bruce Schneier, Mudge, David Wagner: Cryptanalysis of Microsoft's PPTP Authentication Extensions (MS-CHAPv2). |
|
http://informatik.uni-trier.de/~ley/db/indices/a-tree/s/Schneier:Bruce.html
(844 words)
|
|
| |
| | Homeland Insecurity |
 | | Schneier has long argued that the best way to improve the very bad situation in computer security is to change software licenses. |  | | This is particularly true for digital security, and Schneier spent most of his speech evoking the staggering insecurity of networked computers. |  | | Schneier and other technophiles grasped early how important computer networks would become to daily life. |
|
http://www.theatlantic.com/issues/2002/09/mann.htm
(8375 words)
|
|
| |
| | Salon.com Technology Ain't no network strong enough |
 | | Bruce Schneier, master cryptographer and idol of the computer underground, targets those short-attention-spanners in his latest book, "Secrets and Lies: Digital Security in a Networked World." Aiming straight for the vaunted "general audience," he peppers the 400-plus pages with Yogi Berra quotes, analogies drawn from "Star Wars" and trivia tidbits from Greek mythology. |  | | Master cryptographer Bruce Schneier's "Secrets and Lies" explains why computer security is an oxymoron. |  | | One notable example is buffer overflow bugs, which permit attackers to overwrite memories with their own instructions. |
|
http://archive.salon.com/tech/review/2000/08/31/schneier
(695 words)
|
|
| |
| | Schneier joins coder liability debate - Builder UK |
 | | As far as Schneier is concerned, "computer security isn't a technological problem — it's an economic problem". |  | | "The end result is that insecure software is common," argued Schneier. |  | | Many readers of Builder UK sister site ZDNet UK seem to agree with Schneier, and put the blame for security problems squarely with the vendors selling the software. |
|
http://uk.builder.com/manage/work/0,39026594,39279677,00.htm
(373 words)
|
|
| |
| | CRN Bruce Schneier -- Counterpane |
 | | Colleagues describe Schneier as energetic and adept at simplifying complex concepts. |  | | After receiving his bachelor's degree in physics and his master's in computer science, he went to work for the U.S. Department of Defense. |  | | Over dinner one night, Rowley and Schneier formed the new Counterpane after coming up with the idea of ADT-style computer security. |
|
http://www.crn.com/sections/special/20towatch/20towatch00.asp?ArticleID=21187
(683 words)
|
|
| |
| | Survival Guide: Bruce Schneier encryption expert |
 | | Schneier: Security decisions need to be made as close to the problem as possible. |  | | Schneier: Brittleness refers to the way a system fails. |  | | The problems in IT security are not about technology, they're about using technology. |
|
http://www.washingtontechnology.com/news/17_24/last-byte/20324-1.html
(762 words)
|
|
| |
| | Bruce Schneier - Beyond Fear |
 | | Bruce Schneier: That’s a phrase coming out of systems theory, and it’s fascinating. |  | | Paul Bissex in Massachusetts asked, “What do you think is the role of cryptography and authentication in fighting spam and viruses?” In particular, he asked what do you think about recent developments such as SPF, Yahoo’s Domain Keys and Microsoft’s proposal for a CPU-intensive puzzle-solving algorithm as a possible solution for spam. |  | | Applied Cryptography” explained how the arcane science of secret codes actually works and was described by Wired as, “the book the National Security Agency wanted never to be published.” His book on computer and network security called “ |
|
http://www.itconversations.com/transcripts/119/transcript-print119-1.html
(5241 words)
|
|
| |
| | New book by Bruce Schneier - The Community's Center for Security |
 | | Schneier is responsible for maintaining the Company's technical lead in world-class information security technology and its practical and effective implementation. |  | | His Twofish algorithm is among a small number of algorithms currently being considered by the National Institute of Standards and Technology (NIST) for the advanced encryption standard (AES) to replace the current data encryption standard (DES). |  | | It provides a unique understanding of the digital age and is a handbook for understanding business problems and challenges. |
|
http://www.linuxsecurity.com/content/view/108319/0
(1186 words)
|
|
| |
| | Del Rey Online The Zenith Angle by Bruce Sterling |
 | | Viruses and spam have progressed from bad to worse, even though the trend was obvious, and useful steps could have been taken to stop that. |  | | Schneier: You have to admit that the Internet does work. |  | | Sterling also wrote The Hacker Crackdown: Law and Disorder on the Electronic Frontier, a nonfiction book about computer hackers and cyber-police. |
|
http://www.randomhouse.com/delrey/catalog/display.pperl?isbn=0-345-46061-8&view=qa
(2033 words)
|
|
| |
| | From product to process: Bruce Schneier's take on security |
 | | " Schneier opens with his oft-quoted dictum, "Security is a process, not a product." (A corollary is "Security is a process, not a state.") After describing known problems with operating systems and encryption algorithms, he asks, "Is anyone paying attention?" Alas, "the answer to this question is: not really... |  | | Users could count on effective antivirus functionality from any ICSA-certified antivirus product, and AVPDs could focus on user documentation and interface, ease of installation, and frequency of updates, rather than wasting time and effort trying to win a numbers game. |  | | In the May edition, "CRYPTOGRAM" included the article, "Computer Security: Will We Ever Learn? |
|
http://www.networkworld.com/newsletters/sec/2000/0911sec1.html
(945 words)
|
|
| |
| | Schneier: Worry about cybercriminals, not terrorists - ZDNet UK News |
 | | Tell us how you excel and you could be taking your place on the stage with the best in technology and business. |  | | It's a bad development but there are definitely conduits between hackers and criminals," Schneier said. |  | | Schneier told ZDNet UK on Tuesday that officials claiming that terrorists pose a serious danger to computer networks are guilty of distracting attention away from the threat we face from criminals. |
|
http://news.zdnet.co.uk/0,39020330,39237480,00.htm
(469 words)
|
|
| |
| | Larry Osterman's WebLog : Oh wow, Bruce Schneier's blogging. |
 | | Lazycoder weblog andraquo; OUCH Schneier- Microsoft still has work to do |  | | # Lazycoder weblog andraquo; OUCH Schneier- Microsoft still has work to do |  | | Bruce's one of those people I truely respect in security, he's been highly critical of Microsoft in the past (for reason), but boy, he can write. |
|
http://blogs.msdn.com/larryosterman/archive/2004/10/07/239547.aspx
(466 words)
|
|
| |
| | On the Record - Government Technology |
 | | He designed the Blowfish encryption algorithm, and has served on the board of directors of the International Association for Cryptologic Research and as an advisory board member for the Electronic Privacy Information Center. |  | | His book Secrets & Lies: Digital Security in a Networked World sold more than 80,000 copies; and Applied Cryptography sold more than 150,000 copies and is translated in five different languages. |  | | An internationally renowned security technologist, Bruce Schneier is a frequent lecturer on cryptography, computer security and privacy. |
|
http://www.govtech.net/magazine/channel_story.php/95671
(1340 words)
|
|
| |
| | Viridian Note 00325: Open Source Speech |
 | | There's a noticeable lack of basic creativity in the free software world, that is alarming and not very flattering. |  | | Bruce Sterling: You have to move my room? |  | | Bruce Sterling: Maybe I should just wind this up. |
|
http://www.viridiandesign.org/notes/301-350/00325_open_source_speech.html
(4616 words)
|
|
| |
| | The Evolution of a Cryptographer - CSO Magazine - September 2003 |
 | | When my primary work was in cryptography, I would design mathematically secure systems that would be defeated by clever attacks against the computers they ran on. |  | | Bruce Schneier: Security is a system, and the more I worked with security the more I realized that a systems perspective is the most appropriate one. |  | | Bruce Schneier has more opinions than CSO has space to print them. |
|
http://www.csoonline.com/read/090103/evolution.html
(2728 words)
|
|
| |
| | vbAccelerator - Bruce Schneier's Cryptogram |
 | | Bruce Schneier is the author of the excellent Applied Cryptography, which is still the best resource for information on cryptographic algorithms and security. |  | | He also publishes Cryptogram, a monthly newsletter which I can't recommend highly enough. |  | | Each month you get Schneier's refreshingly acerbic and common-sense view on security stories that make the news. |
|
http://vbaccelerator.com/home/Resources/Links/Other/Cryptogram/article.asp
(114 words)
|
|
| |
| | Schneier: Microsoft still has work to do |
 | | Bruce Schneier is founder and chief technology officer of Mountain View, Calif.-based MSSP Counterpane Internet Security Inc. and author of Applied Cryptography, Secrets and Lies and Beyond Fear. |  | | Schneier: Microsoft is certainly taking it more seriously than three years ago, when they ignored it completely. |  | | But they're still not taking security seriously enough for me. They've made some superficial changes in the way they approach security, but they still treat it more like a PR problem than a technical problem. |
|
http://searchsecurity.techtarget.com/originalContent/0,289142,sid14_gci1011474,00.html
(640 words)
|
|
| |
| | Sklyarov case shows business outweighs First Amendment The Register |
 | | He compares this to Sklyarov's plight which he said illustrates that publishing critical research on digital rights management technology used to protect electronic books is viewed as "more serious than publishing nuclear weapon design information". |  | | Schneier, chief technology officer of Counterpane Internet Security, and inventor of the Blowfish algorithm, will argue in the next issue of his Crypro-Gram email newsletter that the Sklyarov case shows the DMCA is being used to restrict basic freedoms of speech. |  | | Sklyarov was engaged in legitimate security research, Schneier said, but for highlighting the poor security of eBook readers, and working for a firm that develops software that "circumvents these ineffectual security systems" he ended up in jail. |
|
http://theregister.co.uk/2001/08/10/sklyarov_case_shows_business_outweighs
(623 words)
|
|
| |
| | Technorati Tag: Bruce Schneier |
 | | The story to pay attention to here is the collusion between big media companies who try to control what we do on our computers and computer-security... |  | | Bruce Schneier starts his Strib article off with the wrong premise, then gets worse as the story moves along. |  | | To contribute to this page, just post to your blog and include this code. |
|
http://technorati.com/tag/Bruce+Schneier
(481 words)
|
|
| |
| | Bruce Schneier - winter 2005 |
 | | The more we do that, the safer we will all be. |  | | Early in Beyond Fear, Schneier writes, "We need to move beyond fear and start making sensible security trade-offs," so, naturally, one of my first questions was how to convince people to think of security in terms of trade-offs. |  | | Schneier also publishes a free monthly newsletter, Crypto-Gram (http:// www.schneier.com/crypto-gram.html), which counts over 100,000 readers. |
|
http://turnrow.ulm.edu/bruceschneierinterview.htm
(7558 words)
|
|
| |
| | Bruce Schneier talks cyber law The Register |
 | | Trusted Computing standards won't apply to Vista - Schneier |  | | But Schneier conceded that getting international agreements in place would be very difficult and that we remain at risk from the country with the weakest laws – in the same way we remain at risk from the least well-protected computer on the network.® |  | | He said there was no reason why legislators do such a bad job of drafting technology laws. |
|
http://www.theregister.co.uk/2005/10/19/schneier_talks_law
(351 words)
|
|
| |
| | Amazon.co.uk: Secrets and Lies: Digital Security in a Networked World: Books |
 | | In short, if you use the internet regularly, or some kind of computer network at work, this really is a must read. |  | | Customers who bought books by Bruce Schneier also bought books by these authors: |  | | His latest book, Secrets and Lies, paints a very gloomy overview of the true state of network security. |
|
http://www.amazon.co.uk/exec/obidos/ASIN/0471253111
(1080 words)
|
|
| |
| | SANS NewsBites - Vol: 7, Issue: 36 |
 | | Because of the potential for abuse of the technology, TCG has developed a best practices document titled Design, Implementation and Usage Principles for TPM-Based Platforms. |  | | Schneier suggests that Microsoft's tactics are aimed at making sure the document will not apply to Windows Vista, the company's forthcoming operating system. |  | | Schneier questions Microsoft's motives in delaying the release of the document and blocking its applicability to software-only applications. |
|
http://www.sans.org/newsletters/newsbites/newsbites.php?vol=7&issue=36&rss=Y
(3248 words)
|
|
| |
| | Data Mining for Security |
 | | For the more technically inclined, though, consider this |  | | The issue of data mining for identifying people for further scrutiny by security agencies often presents an intersection between law and technology--but the more basic question may be, "does it even work?" |  | | Bruce Schneier, a tech security expert, has a perspective on this question in a recent |
|
http://homepage.mac.com/adaman2720/iblog/B1438670732/C362608790/E1095776476
(55 words)
|
|
| |
| | Boing Boing: MP3 interview with security expert Bruce Schneier |
 | | Doug Kaye: Now a recurring concept in your book is probably typified by this example: “A terrorist who wants to create havoc will not be deterred by airline security; he will simply switch to another attack and bomb a shopping mall.” |  | | Amazing interview (available as a text transcript or audio file) with security guru Bruce Schneier, who really should be hired to run Homeland Security. |  | | Boing Boing: MP3 interview with security expert Bruce Schneier |
|
http://www.boingboing.net/2004/05/03/mp3_interview_with_s.html
(215 words)
|
|
| |
| | David Schatsky - Bruce Schneier on Security |
 | | The topic was a paper he recently published in the Communications of the ACM (a publication of the Association for Computing Machinery, a venerable organization of software engineering professionals) about the limitations of two-factor authentication, such as the token-based scheme recently rolled out by online broker e-trade to some of its clients. |  | | New countermeasures can be effective for a while. |  | | Biometric identification, to pick just one example, envisioned by some as a way of identifying suspected terrorists by reference to stored images of their faces. |
|
http://weblogs.jupiterresearch.com/analysts/schatsky/archives/007342.html
(636 words)
|
|
| |
| | Network Security Blog: Bruce Schneier |
 | | Guess that's what happens when your write numerous books, you learn to write gooder. |  | | Focus on protecting networks and information by Martin McKeay. |  | | Bruce Scheier does a better job of putting many of my own security concerns in writing than I could ever do myself. |
|
http://www.mckeay.net/secure/2005/12/bruce_schneier.html
(161 words)
|
|
| |
| | BW Online September 2, 2003 "We've Made Bad Security Tradeoffs" |
 | | Bruce Schneier is a rare creature in the computer-security world. |  | | Schneier's latest book, Beyond Fear (Copernicus Books, 2003), is a highly readable compendium of his thoughts on the various aspects of real-world security. |  | | Although he made his name as an alpha geek in cryptography and later, as chief technology officer of Net-security outfit Counterpane, Schneier can also speak to laypeople about the general security matters that increasingly touch all of our lives. |
|
http://www.businessweek.com/technology/content/sep2003/tc2003092_0578.htm
(907 words)
|
|
| |
| | An Editorial on Terrorism from Bruce Schneier |
 | | What Bruce proposes only plays into a strength of the terrorist's game. |  | | After reading Bruce's article it occurs to me that he is making the same mistake which the CIA made before 9/11 -- that there can be a steady-state condition with terrorism. |  | | America can no longer afford to believe it is in a position of relative safety, it is, in fact, in a state of declared war and must act accordingly. |
|
http://www.oreillynet.com/pub/wlg/4340
(2005 words)
|
|
| |
| | ciphergoth.org: Problems with Bruce Schneier's "Solitaire" |
 | | I'm interested in designing a secure hand cipher; my first attempt, Mirdek turns out to be very insecure, but I return to the problem from time to time. |  | | Readers of Neal Stephenson's "Cryptonomicon" will be familiar with the cipher "Solitaire" (called "Pontifex" in the book), which was designed by cryptologist Bruce Schneier specifically for the purposes of the book. |  | | It is intended to be the first truly secure hand cipher, and requires only a pack of cards for encryption and decryption. |
|
http://www.ciphergoth.org/crypto/solitaire
(512 words)
|
|
| |
| | Netcraft: Interview with Bruce Schneier, Counterpane Internet Security |
 | | Interviewed by Glyn Moody, he discusses the lack of accountability of software companies, security through diversity, and why he would rather re-write Windows than TCP/IP. |  | | Bruce Schneier, founder and CTO of Counterpane Internet Security, is one of the world's foremost security experts and author of the influential books |  | | Netcraft: Interview with Bruce Schneier, Counterpane Internet Security |
|
http://news.netcraft.com/archives/2004/08/13/interview_with_bruce_schneier_counterpane_internet_security.html
(1084 words)
|
|
| |
| | The Witty worm: A new chapter in malware - Computerworld |
 | | Bruce Schneier is chief technology officer of Counterpane Internet Security Inc. and the author of Beyond Fear: Thinking Sensibly About Security in an Uncertain World. |  | | Even worse, Witty's author is still unknown and at large -- and we have to assume that he's going to do this kind of thing again. |  | | Opinion by Bruce Schneier, Counterpane Internet Security Inc. |
|
http://www.computerworld.com/printthis/2004/0,4814,93584,00.html
(660 words)
|
|
| |
| | An imaginary place in a reactionary time: bruce schneier interviewed |
 | | As Schneier points out, it makes no rational sense. |  | | The always insightful Schneier on why airline security and CAPS II won't work. |  | | Bruce Schneier: I think the more rationally we think, the better we’re going to spend our money. I view myself as a consumer of security, “How much am I getting versus what am I giving up?” |
|
http://www.ffej.org/archives/000996.html
(384 words)
|
|
| |
| | AlterNet: Rights and Liberties: National Insecurity Cards |
 | | Bruce Schneier's security analysis is as usual very articulate and on target. |  | | And it would be taken seriously, if the proponents of ID program were actually interested in security. |  | | Security expert Bruce Schneier is the founder and CTO of Counterpane Internet Security, Inc. This essay originally appeared in the Minneapolis Star-Tribune. |
|
http://www.alternet.org/rights/21977
(3711 words)
|
|
| |
| | SpywareInfo » Bruce Schneier on Cyberterrorism |
 | | Schneier, who has written several books on security and is the founder of Counterpane Internet Security, has previously criticized those who claim that cyberterrorism is a serious threat. |  | | “As one of the world’s foremost authorities on security issues, Bruce Schneier has been a voice of reason in an industry where hyperbole is often rife. |  | | So, with the SANS Institute warning that hackers are changing their tactics and the NISCC, the British government body responsible for cyberprotection, claiming that foreign governments pose a serious threat to the U.K.’s critical infrastructure, we caught up with Schneier to get his take on the security landscape today.” |
|
http://www2.spywareinfo.com/2005/11/28/3259
(267 words)
|
|
| |
| | Password Safe |
 | | Linux/Unix clones that use the same database format have also been written (see Related Projects). |  | | Originally created by Bruce Schneier's Counterpane Labs, Password Safe has opened it's source. |  | | Currently, the PasswordSafe Open Source project is being administered by Rony Shapiro (GPG key FA175557 fingerprint FF77 379D D46D DAA6 6182 B452 1D79 5A91 FA17 5557). |
|
http://passwordsafe.sourceforge.net
(867 words)
|
|
| |
| | Is U.S. Spending Wisely to Fight Terror? - Newsweek National News - MSNBC.com |
 | | Bruce Schneier: Psychologically, we expect it, so we are more psychologically prepared. |  | | Schneier—who believes Americans should keep the threat of terror in perspective by reminding themselves that such attacks are extremely rare—also evaluates the effectiveness of proposed measures ranging from a national ID card system to federalized airport security. |  | | NEWSWEEK’s Jennifer Barrett discussed some of these issues with security expert Bruce Schneier, whose most recent book, “Beyond Fear” (Copernicus Books), offers a comprehensive look at the challenges of keeping a nation secure from terrorism. |
|
http://msnbc.msn.com/id/4549661
(1542 words)
|
|
| |
| | broadband » News » A Cure For Identity Theft - Bruce Schneier: Make banks liable |
 | | Security expert Bruce Schneier is running an op-ed over at CNET which contains his usual assault on two-factor authentication (use of both password and code from an encrypted file), but he also suggests something new: Banks "need to be liable for sending erroneous information to credit bureaus based on fraudulent transactions," he opines. |  | | As Schneier says, retailers don't want to take precautions because they make so many sales through instant credit. |  | | So it is just not worth the cost and effort to launch the lawsuits. |
|
http://www.broadbandreports.com/shownews/62547
(4097 words)
|
|
| |
| | eBay - bruce schneier, Secrets and Lies, Nonfiction Books items on eBay.com |
 | | Book: Practical Cryptography (Bruce Schneier, Softcover), Not yet reviewed more... |  | | Book: Secrets and Lies (Bruce Schneier, Softcover), Not yet reviewed |  | | Book: Applied Cryptography (Bruce Schneier, Paperback), Not yet reviewed |
|
http://search-desc.ebay.com/search/search.dll?query=bruce+schneier&newu=1&...
(225 words)
|
|
|