3 ms·
"I can't think of any reason for someone in Schneier's position to publicize his actual security arrangements at this time." Schneier is more and more about pr
by larrys 13y ago
"I can't think of any reason for someone in Schneier's position to publicize his actual security arrangements at this time."
Schneier is more and more about promoting Schneier. I can't imagine a reason why someone who is so concerned about security would provide details on exactly what they do security wise (that would be accurate at least) because the more information you have about someone's practices the easier it is to defeat those practices.
Not to mention the mere fact that he is so much a public figure now makes him much more likely a target which could negate many of the things he is trying to do.
- kevinpet 13y agoHe's not concerned primarily with his own security. His entire career has been about promoting good security practices.
- larrys 13y agoHas he actually said that he isn't primarily concerned with his own security and he is willing to risk his security for the benefit of others?
- vdaniuk 13y agoCome on, he is doing one of the best jobs in the world educating him about security. No, he probably wont risk his security for the benefit of others but he is a positive force. So please stop holding him to the absurd standards.
- ateeqs 13y agoHe is educating himself about security? This may actually be a tautology. :) By the way, how many of you guys have read his books? Having actually read Applied Cryptography, I felt his contribution to this field was very little.
- vdaniuk 13y agoWell, that was obviously a typo. There are generation of new knowledge and dissemination of old knowledge. I am not quailified to comment on the first, however his contribution to the second is substantial.
- ateeqs 13y agoHow exactly is it substantial? I felt he mostly says things along the lines of, "oh, here is the 3-DES algorithm." But there is no commentary after it. Queestions like why is 3-DES structured so, or what are these fields are not explained at all. To me, it says that he doesn't really know how 3-DES works at all. Or, another case I remember is the simple password protection scheme in ZIP. He says that the three keys are initialized with these three values (which can be found in the PKZIP app readme). Then he goes on to claim that it is not secure and that cryptographers can break it easily. But how would start to do it is not explained at all. Why even mention what these three keys are initialized with? It was a disappointing book. I felt he did not even disseminate old knowledge because he does not know/comprehend old knowledge. He just disseminated old predicates.