Schneier on Security

Menu

Blog
Newsletter
Books
Essays
News
Talks
Academic
About Me

Search

Powered by DuckDuckGo

Blog Essays Whole site

Subscribe

Home Blog

Blog Entries by Tag

3d printers
9/11
A Hacker's Mind
Aaron Swartz
academic
academic papers
accountability
ACLU
activism
Adobe
advanced persistent threats
adware
AES
Afghanistan
AI
air marshals
air travel
airgaps
al Qaeda
alarms
algorithms
alibis
Amazon
Android
anonymity
Anonymous
antivirus
Apache
Apple
Applied Cryptography
artificial intelligence
assassinations
AT&T
ATMs
attribution
audio
auditing
Australia
authentication
authorization
automation
AVAST
backdoors
background checks
backups
Bahrain
banking
base rate
behavioral detection
Belarus
benefit denial
Beyond Fear
BGP
bias
biological warfare
biometrics
BIOS
bitcoin
BitLocker
BlackBerry
blackmail
blockchain
blog
Blowfish
Bluetooth
body armor
bombs
books
borders
Boston Marathon bombings
botnets
brain
Brazil
breaches
bribes
browsers
BT
Burma
business of security
CALEA
caller ID
cameras
camouflage
Canada
captchas
careers
Carry On (book)
cars
casinos
cell phones
censorship
certificates
certifications
CH2KE
chatbots
cheating
checkpoints
Chelsea Manning
chess
child pornography
children
China
chip and pin
Chrome
Chrome OS
CIA
Cisco
CISPA
Citizen Lab
class breaks
cloning
cloud computing
Co3 Systems
Coast Guard
Colombia
comics
complexity
compliance
computer security
concealment
conferences
Conficker
cons
consumerization
contests
control
cookies
cooperation
copyright
cost-benefit analysis
courts
cover-ups
COVID-19
cracking
credentials
credit cards
crime
cross-site scripting
crowdsourcing
cryptanalysis
crypto wars
crypto-gram
cryptocurrency
cryptography
Cryptography Engineering
Cryptome
Cuba
currency
cyber
cyberattack
cybercrime
cyberespionage
cybersecurity
cyberterrorism
cyberwar
cyberweapons
Cyprus
Czechoslovakia
dark web
DARPA
Data and Goliath
data breaches
data collection
data destruction
data loss
data mining
data poisoning
data privacy
data protection
data retention
databases
de-anonymization
DEA
dead drops
debates
debit cards
deception
decoys
deepfake
defense
Dell
democracy
deniability
denial of service
Denmark
Department of Defense
DES
DHS
Diebold
disclosure
disguise
disinformation
DMCA
DNA
DNS
doghouse
domain names
doxing
DRM
drones
drug testing
drug trade
eavesdropping
eBay
ebooks
economics of security
Edward Snowden
EFF
Egypt
email
embedded systems
employment
encryption
Enigma
entrapment
EPIC
epidemiology
espionage
essays
Estonia
ethics
EU
EULA
evacuation
exploit of the day
exploits
externalities
extortion
eyewitnesses
F-Secure
face recognition
Facebook
fake news
false negatives
false positives
FBI
fear
FEMA
feudal security
file sharing
filtering
finance
fingerprints
fire
Firefox
firewall
firmware
FISA
Flame
Flash
flash drives
Flickr
FOIA
forensics
forgery
Fortuna
France
fraud
FTC
full-body scanners
full-disk encryption
G7
gambling
game theory
games
gaming consoles
Gauss
GCHQ
GDPR
generations
geolocation
Georgia
Germany
Gmail
Google
Google Glass
GPS
Greece
Guantanamo Bay
Guardian
guards
guns
hackback
hacking
Hamas
handcuffs
hardware
hashes
HBGary
healthcare
Hezbollah
history of computing
history of cryptography
history of security
hoaxes
homeland security
homomorphic encryption
Hong Kong
hotels
HP
https
human rights
humor
IBM
ICS
ID cards
identification
identity theft
IETF
impersonation
implants
incentives
incident response
India
Indonesia
infrastructure
Inrupt
insiders
insurance
Intel
intelligence
Internet
Internet and society
Internet Explorer
Internet of Things
interviews
intrusion detection
iOS
iPad
iPhone
Iran
Iraq
Ireland
IRS
ISIS
ISPs
Israel
Italy
jamming
Japan
Juniper
Kaspersky
Kazakhstan
key escrow
key logging
keys
kidnapping
kill switch
Kuwait
law enforcement
laws
leaks
Lebanon
Lenovo
Liars and Outliers
Libya
lies
LinkedIn
Linux
LLM
locks
loopholes
lotteries
LulzSec
machine learning
mail
Malaysia
malware
man-in-the-middle attacks
managed security
marketing
McAfee
MD5
medicine
Meta
metadata
Mexico
MI5
MI6
Microsoft
military
mission creep
mitigation
Moldova
monoculture
movie-plot threat contests
movie-plot threats
Mozilla
music
NASDAQ
National Security Letters
national security policy
nationalism
natural disasters
natural security
Nepal
Netherlands
network security
New York Times
New Zealand
Nigeria
NIST
no-fly list
Nokia
noncomputer hacks
North Korea
Norway
NSA
nuclear power
nuclear weapons
obscurity
one-time pads
open source
OpenBSD
Opera
operating systems
operational security
Osama bin Laden
overreactions
Pakistan
passports
Password Safe
passwords
patching
patents
PATRIOT Act
PayPal
PCI
penetration testing
PGP
phishing
phones
photos
physical security
pickpocketing
PINs
plagiarism
point of sale
poisons
police
police informants
policy
pornography
power
Practical Cryptography
press
printers
PRISM
prison escapes
prisons
privacy
privilege escalation
profiling
programming
propaganda
protocols
proxies
pseudonymity
psychology of security
psychopaths
public interest
public transit
Qatar
QR codes
QUANTUM
quantum computing
quantum cryptography
radio
random numbers
ransomware
RC4
redaction
regulation
replay attacks
reports
reputation
resilience
Resilient Systems
restaurants
retail
reverse engineering
RFID
risk assessment
risks
robbery
robotics
Romania
rootkits
RSA
Russia
sabotage
Safari
safes
Samsung
Saudi Arabia
SCADA
scams
scanners
Schneier news
Schneier on Security (book)
Schneier's Law
schools
science fiction
seals
search engines
searches
secrecy
Secret Service
secret sharing
Secrets & Lies
SecureDrop
security analysis
security awareness
security conferences
security education
security engineering
security mindset
security monitoring
security policies
security questions
security standards
security theater
security tokens
sensors
SHA-1
SHA-2
SHA-3
shame
shootings
shredders
side-channel attacks
Signal
signatures
SIM cards
Singapore
Skein
skimmers
Skype
smart cards
smartphones
SMS
smuggling
snake oil
social engineering
social media
societal security
software
software liability
Sony
SOPA
South Africa
South Korea
SP800-90
Spain
spam
spamflooding
spoofing
sports
Sprint
spyware
SQL injection
squid
Sri Lanka
SS7
SSH
SSL
stalking
steganography
Stuxnet
Sudan
supply chain
surveillance
Sweden
Switzerland
Symantec
Syria
T-Mobile
Taiwan
Taliban
tamper detection
Target
Tasers
taxonomies
TCP
TED
telecom
Telegram
television
TEMPEST
terms of service
terrorism
Thailand
theft
theory of security
threat alerts
threat models
Threefish
TLS
Tor
torrents
torture
Total Information Awareness
TPM
tracing
tracking
tradecraft
traffic analysis
transparency
transportation
treaties
TrueCrypt
trust
TSA
Turkey
Twitter
two-factor authentication
Twofish
UAE
Uber
UK
Ukraine
UN
undercover
United Arab Emirates
US-CERT
usability
USB
USPS
utilities
Uzbekistan
Verisign
Verizon
video
videoconferencing
videos
violence
voice recognition
voicemail
VoIP
voting
VPN
vulnerabilities
war
war on the unexpected
watch lists
weapons
web
web privacy
WhatsApp
whistleblowers
whitelisting
Wi-Fi
WikiLeaks
Wikipedia
Windows
wireless
Yahoo
Yemen
zero-day

Sidebar photo of Bruce Schneier by Joe MacInnis.

Powered by WordPress Hosted by Pressable

About Bruce Schneier

I am a public-interest technologist, working at the intersection of security, technology, and people. I've been writing about security issues on my blog since 2004, and in my monthly newsletter since 1998. I'm a fellow and lecturer at Harvard's Kennedy School, a board member of EFF, and the Chief of Security Architecture at Inrupt, Inc. This personal website expresses the opinions of none of those organizations.