Bruce Schneier Quotes

Chaos is hard to create, even on the Internet. Here's an example. Go to Amazon.com. Buy a book without using SSL. Watch the total lack of chaos.

Technical problems can be remediated. A dishonest corporate culture is much harder to fix.

Attacks always get better, they never get worse.

I mean, the computer industry promises nothing. Did you ever read a shrink-wrapped license agreement? You should read one. It basically says, if this product deliberately kills your children, and we knew it would, and we decided not to tell you because it might harm sales, we're not liable. I mean, it says stuff like that. They're absurd documents. You have no rights.

There are two kinds of cryptography in this world: cryptography that will stop your kid sister from reading your files, and cryptography that will stop major governments from reading your files.

More people are killed every year by pigs than by sharks, which shows you how good we are at evaluating risk.

Against the average user, anything works; there's no need for complex security software. Against the skilled attacker, on the other hand, nothing works.

The lesson here is that it is insufficient to protect ourselves with laws; we need to protect ourselves with mathematics. Encryption is too important to be left solely to governments.

Anyone, from the most clueless amateur to the best cryptographer, can create an algorithm that he himself can't break.

It is poor civic hygiene to install technologies that could someday facilitate a police state.