Bruce Schneier Quotes
You have something called ALE: average loss expectancy. You multiply the probability of an event happening with the amount of damage you'll incur, and that'll tell you how much to spend on security. When you deal with events that have a very, very high damage [amount], and a very, very low probability of occurrence, you multiply infinity by zero and get whatever you want.
- Bruce Schneier
When people are scared, they need something done that will make them feel safe, even if it doesn't truly make them safer. Politicians naturally want to do something in response to crisis, even if that something doesn't make any sense. But unfortunately for politicians, the security measures that work are largely invisible.
- Bruce Schneier
What will happen when the CFO looks at his premium and realizes that it will go down 50 percent if he gets rid of all his insecure Windows operating systems and replaces them with a secure version of Linux? The choice of which operating system to use will no longer be 100 percent technical, ... Microsoft, and other companies with shoddy security, will start losing sales because companies don't want to pay the insurance premiums.
- Bruce Schneier
We all think of the movie scenarios - the kinds of things that we would expect to see in a movie plot. Terrorists sneaking a bomb into the Super Bowl, for example. The problem is, terrorists don't care. They don't care whether it's a football game or an airport or a restaurant or a movie theater. It doesn't matter to them.
- Bruce Schneier
Page 1 of 6
