Schneier on Security
 
Showing 1-10 of 278 records
 
Expand article

Crypto-Gram Tenth Anniversary Issue

2008-05-15 11:13:10 by schneier in Schneier on Security
 
...security, published the 15th of the month every month. Now, 120 issues later , none of that has changed I started Crypto-Gram because I had a lot to say about security, and book-length commentaries were too slow and too infrequent. Sure, I was writing the occasional column in the occasional magazine, but those were also too slow and...
 
Tags: crypto-gram, crypto-gram entries, blog online, blog, security products, snake-oil security products, blog entries, crypto-gram format, format
 
 
 
 
Expand article

Third Annual Movie-Plot Threat Contest Winner

2008-05-15 06:24:06 by schneier in Schneier on Security
 
...security against those risks Your job is to invent one. First, find a risk or create one. It can be a terrorism risk, a criminal risk, a natural-disaster risk, a common household risk -- whatever. The weirder the better. Then, create a product that everyone simply has to buy to protect him- or herself from that risk. And finally, write a...
 
Tags: health risk, risk, criminal risk, toothpaste immediately, toothpaste, common household risk, toothpaste test strips, annual movie-plot threat, terrorism risk
 
 
 
 
Expand article

The Ethics of Vulnerability Research

2008-05-14 11:29:45 by schneier in Schneier on Security
 
...information about how good the security actually is. And yes, there are more and less responsible--and more and less legal--ways to handle a new vulnerability. But the bad guys are constantly searching for new vulnerabilities, and if we have any hope of securing our systems, we need the good guys to be at least as competent. To me, the...
 
Tags: software security experts, software, vulnerabilities nurtures, vulnerabilities, exploitable vulnerabilities, vulnerabilities lie dormant, security vulnerabilities, computer, computer security experts
 
 
 
 
Expand article

U.S. Air Force Considers Creating its Own Botnet

2008-05-14 06:09:50 by schneier in Schneier on Security
 
Stories here Actually, I think this is a fine idea -- as long as they only use computers that they legally own
 
Tags: fine idea, stories, computers
 
 
 
 
Expand article

What Is the Comprehensive National Cybersecurity Inititative?

2008-05-13 12:54:34 by schneier in Schneier on Security
 
The Department of Homeland Security has a new $200 million Comprehensive National Cybersecurity Inititative (CNCI). Congress is happy to fund it, but kind of wants to know what it's going to do I have to admit, I'm kind of curious myself
 
Tags: homeland security, fund, department, congress, cnci, curious, admit, happy
 
 
 
 
Expand article

Interesting Microsoft Patent Application

2008-05-13 07:05:32 by schneier in Schneier on Security
 
...information in view of stored preferences specific to one of multiple profiles of the user. Based on the analysis, the agent can suggest or automatically implement a solution to a given issue or problem. In addition, the agent can identify another potential issue that requires attention and suggests or implements action accordingly....
 
Tags: agent monitors, agent, user, environment observation, issue, potential issue, environment, implements action, ray ozzie
 
 
 
 
Expand article

Terrorism as a Tax

2008-05-12 06:29:47 by schneier in Schneier on Security
 
...security lines; the annual cost in lost work hours runs into the billions. Add to that the freight delays at borders, ports and airports, the cost of checking money transfers as well as goods in transit, the wages for beefed-up security forces around the world. And that doesn't even attempt to put a price tag on the compression of civil...
 
Tags: tax, security, security risks, security countermeasures, security trade-offs, fear tax falls, security lines, beefed-up security forces, percent decline
 
 
 
 
Expand article

Friday Squid Blogging: Squid Fishing Lures

2008-05-09 16:04:48 by schneier in Schneier on Security
 
In a variety of colors
 
Tags: variety, colors
 
 
 
 
Expand article

Schneier Talks

2008-05-09 13:34:27 by schneier in Schneier on Security
 
Last month I gave a talk at InfoSecurity Europe in London. The title was "Reconceptualizing Security," or maybe "The Theater of Security," and it is a follow-on to my work on the psychology of security . I haven't yet written this work up, but you can listen to or watch my talk
 
Tags: security, infosecurity europe, talk, follow-on, month, theater, psychology, london, title
 
 
 
 
Expand article

Making Security Cuddly

2008-05-09 11:57:36 by schneier in Schneier on Security
 
I don't know what I think of Sweet Dreams Security
 
Tags: sweet dreams security