3 ms·
sorry I didn't mean to appear to disrespect Bruce Schneier, I've met him, gone to his book signings, own all his books, I even buy his books for gifts to my fri
by davidj 16y ago
sorry I didn't mean to appear to disrespect Bruce Schneier, I've met him, gone to his book signings, own all his books, I even buy his books for gifts to my friends. I'm a huge fan of his work. We need people like him who have done highly advance studies in the security field; he is the best and an amazingly lucid writer. I never said he was a random academic or that his overall research should be disregarded. I really don't think you understand my original comment. Theory is not practice; they are two separate things. I guess I should have just said that. do you see my point now?
- tptacek 16y agoI am not so much a Schneier fan, so if you feel like you need cover for leveling any kind of criticism against anything he says, don't worry too much. Are you sure you believe Schneier would know anything about the code quality of a specific IPSEC implementation --- or really, about the code quality of any IPSEC implementation?
- bl4k 16y agoAlright, I will bite. What are your reasons for not liking Bruce? (I can't wait for this)
- tptacek 16y agoI don't so much "not like him". But, compare cite records: http://scholar.google.com/scholar?q=Serge+Vaudenay&hl=en&btnG=Search&as_sdt=400001&as_sdtp=on http://scholar.google.com/scholar?q=Serge+Vaudenay&hl=en... http://scholar.google.com/scholar?q=hans+dobberton&hl=en&btnG=Search&as_sdt=400001&as_sdtp=on http://scholar.google.com/scholar?q=hans+dobberton&hl=en... http://scholar.google.com/scholar?hl=en&q=eli+biham&btnG=Search&as_sdt=400000&as_ylo=&as_vis=0 http://scholar.google.com/scholar?hl=en&q=eli+biham&... http://scholar.google.com/scholar?hl=en&q=bruce+schneier&btnG=Search&as_sdt=400000&as_ylo=&as_vis=0 http://scholar.google.com/scholar?hl=en&q=bruce+schneier...
- bl4k 16y agooh is that all. An entire generation were taught cryptography on the back of AC, so he definitely the widest read crypto dev.
- tptacek 16y agoHe is definitely the widest-read crypto dev. There can be no question of that.
- marchdown 16y agoOut of curiosity, who else is out there writing essay-length on crypto and security in general?
- bl4k 16y agoOne of the better recent sites has been RSnake's: http://ha.ckers.org/ http://ha.ckers.org/ But he just retired from blogging about netsec and is done with the industry, I think (a lot of ppl get sick of it, I left the sec industry 10+ years ago and never looked back)
- tptacek 16y agorsnake doesn't do any crypto work. Like, at all. A fine guy to go to for XSS or SQLI.