Tag: Bruce Schneier

Less screening. More intelligence.

Bruce Schneier talks to Lesley Stahl about the Transportation Safety Security Administration and “security theatre”:

You need about 12 minutes to watch this.

Crossing Borders with Laptops and PDAs

Bruce Schneier recommends a good cleaning and PGP (or TrueCrypt).

More on PGP here. I also use Cache Out X for clearing internet and system caches, as well as system logs.

Why Bruce Schneier Having An Open Wi-Fi Network Is No Good Reason For You To

Bruce Schneier, cryptography king, keeps his home network open. And despite what Tim Lee wrote in support of the idea, please don’t listen.

The justification is that the risk of someone using your network for illegal means is very low, while the risk of you getting hacked at the local coffee shop is potentially higher. Hence, worry about your machine, not your home connection.

I say BLAH! This piss poor argument ignores two significant points:

1) There is little or no benefit to you from opening your network; and

2) It takes minimal effort to secure your network with a password.

The risks may be low, but meanwhile you have nothing to gain. Meanwhile, the effort necessary to provide that little extra layer of protection likely outweighs the cost of that single long tail incident – one that could potential cause you tons of legal hassles.

If you are hell bent on providing web access to home visitors, I’ll take for granted that you trust them. Give them the key, like I do. Or if you’re wearing a tinfoil hat as you hand them their coffee, ask them to allow you to type it in yourself.

UPDATE: Being open can cause hassles (unless you don’t consider having your computer confiscated by less than technology savvy law enforcement officers a hassle).

Spam going nowhere

According to Bruce Schneier, spam is going nowhere (except in your inbox).

I’m still waiting for some spam to hit my Blackberry. Maybe those Blackberry guys took all the embedded cryptography in it from Bruce, and he somehow holds the keys to stopping spam (we know Bill Gates doesn’t), or maybe the fact that I have 70 different spam filters I run all my mail through is the reason why I don’t get any email at all!

BT buys Counterpane Systems

BT acquired Counterpane Systems, noting…

“Counterpane is a welcome addition to BT’s global professional services community. As more and more of our customers seek to exploit the opportunities of globalisation, we are finding that increasingly business critical applications are dependent upon the resilience and security of their infrastructure. “

In separate news, Bruce Schneier, former CEO of Counterpane, will be blogging from Fiji, until April.

DATA won’t do much to protect data

Bruce Schneier comments on data theft disclosure law, stating emphatically that the Data Accountability and Theft Act is too “watered down” to do much good.

I guess my intuition engine is still running.

Feeling safe in the crowd

If the ecommerce site you frequent suddenly announces their database was cracked, and thieves took off with you credit card information, you can keep the warm fuzzies because you are not alone. Huh?

When Schneier talks security, people should listen

Most of you have never heard of him. But Bruce Schneier is one of my geek heroes. He doesn’t know it, but this co-founder and CTO of Counterpane Internet Security is the one who introduced me to the concept of public key encryption. My email has never been the same since (mostly because my friends can’t read my 4096 bit scrambled messages)!

No seriously…Bruce was the author of Applied Cryptography, which was one of the first books on encryption that didn’t require a PhD in astrophysics to understand. You could also send away for the source code associated with the book – I did, and six weeks later I had a floppy loaded with algorithms. I never compiled any of that source, but it led me to grab PGP, so it was worth the trip.

The reason I say all this is because Mr. Schneier is a guy who knows security. And by that I mean not only the code, but the processes behind them, and how they can affect users in our data driven world.

Now Bruce has commented on “identity theft,” and again it is worth listening to.