Category: schneiernews

Auto Added by WPeMatico

Can Consumers’ Online Data Be Protected?

Posted on By infossl
datacollection, essays, hacking, nationalsecuritypolicy, schneiernews, Security technology, securityengineering

Everything online is hackable. This is true for Equifax’s data and the federal Office of Personal Management’s data, which was hacked in 2015. If information is on a computer connected to the Internet, it is vulnerable. But just because everything is hackable doesn’t mean everything will be hacked. The difference between the two is complex, … Read More “Can Consumers’ Online Data Be Protected?” »

New Book Coming in September: “Click Here to Kill Everybody”

Posted on By infossl
books, internetandsociety, internetofthings, schneiernews, Security technology

My next book is still on track for a September 2018 publication. Norton is still the publisher. The title is now Click Here to Kill Everybody: Peril and Promise on a Hyperconnected Planet, which I generally refer to as CH2KE. The table of contents has changed since I last blogged about this, and it now … Read More “New Book Coming in September: “Click Here to Kill Everybody”” »

Me on the Equifax Breach

Posted on By infossl
breaches, nationalsecuritypolicy, schneiernews, Security technology

Last week, I testified before the House Energy and Commerce committee on the Equifax hack. You can watch the video here. And you can read my written testimony below. Testimony and Statement for the Record of Bruce Schneier Fellow and Lecturer, Belfer Center for Science and International Affairs, Harvard Kennedy School Fellow, Berkman Center for … Read More “Me on the Equifax Breach” »

Measuring Vulnerability Rediscovery

Posted on By infossl
academicpapers, patching, schneiernews, Security technology, vulnerabilities, zeroday

New paper: “Taking Stock: Estimating Vulnerability Rediscovery,” by Trey Herr, Bruce Schneier, and Christopher Morris: Abstract: How often do multiple, independent, parties discover the same vulnerability? There are ample models of vulnerability discovery, but little academic work on this issue of rediscovery. The immature state of this research and subsequent debate is a problem for … Read More “Measuring Vulnerability Rediscovery” »

Security and Human Behavior (SHB 2017)

Posted on By infossl
conferences, psychologyofsecurity, schneiernews, Security technology, securityconferences

I’m in Cambridge University, at the tenth Workshop on Security and Human Behavior. SHB is a small invitational gathering of people studying various aspects of the human side of security, organized each year by Ross Anderson, Alessandro Acquisti, and myself. The 50 or so people in the room include psychologists, economists, computer security researchers, sociologists, … Read More “Security and Human Behavior (SHB 2017)” »