Secrets and Lies
Digital Security in a Networked World
by Bruce Schneier · first published 2000
22% recommend78% neutral
"A primer in practical computer security aimed at those shopping, communication, or doing business online -- almost everyone, in other words."--Dust jacket.
Affiliate links. As an Amazon Associate I earn from qualifying purchases.
Mentions per year
What Hacker News says
Related books
2007–2024Beyond fear
Bruce Schneier
Recommended by 8 · mentioned by 148 recommend · 14 mention8 recommend · 148 recommend
2008–2026Practical cryptography
Niels Ferguson
Recommended by 17 · mentioned by 3417 recommend · 34 mention17 recommend · 3417 recommend
2008–2026Applied Cryptography
Bruce Schneier
Recommended by 76 · mentioned by 18976 recommend · 189 mention76 recommend · 18976 recommend
2012–2026Liars and outliers
Bruce Schneier
Recommended by 18 · mentioned by 2718 recommend · 27 mention18 recommend · 2718 recommend
2010–2026Cryptography engineering
Niels Ferguson, Bruce Schneier, Tadayoshi Kohno
Recommended by 50 · mentioned by 8050 recommend · 80 mention50 recommend · 8050 recommend
2018–2026Bad Blood
John Carreyrou
Recommended by 119 · mentioned by 207119 recommend · 207 mention119 recommend · 207119 recommend
…many software and hardware products I've seen that are completely broken security wise thanks to this. If you're interested in the field, I'd suggest starting by reading the canonical introductory text, Secrets and Lies .(http://www.schneier.com/book-sandl.html) This is not a field anyone is going to thank you if you want to learn on the job.
on “Ask HN: 37 signals loathing mixed content - A possible solution?” ↗…about as far from a server installed with ubuntu in 2012 that one can get. You are not going to find any such article by Schneier promoting default firewall installations. I suggest here to check out Secrets and Lies by Schneier, as it is rather clear that a firewall need to be configured against the specific threats one can identify. If you fail at identifying threats, the firewall is likely not be useful at all,…
on “How I spend my first 5 minutes on a server” ↗Aside from language specific resource listed in other comments I recommend to read Secrets & Lies by Bruce Schneier as a small and easy to read introduction to digital security in general.
on “Ask HN: Resources for learning how to write more secure code?” ↗Try the book: Bad Blood: Secrets and Lies in a Silicon Valley Startup
on “The Elizabeth Holmes documentary “You Can See Everything” is deceiving” ↗From his bio, I would reduce his mile long credentials to the following: - wrote a best seller "applied cryptography" - wrote "secrets and lies" (not a best seller) - wrote "beyond fear" - wrote "schneier on security" - publishes a monthly newsletter - chief security officer of bt.com The rest of the bio: http://www.schneier.com/about.html…
on “Schneier removed from TSA oversight meeting at TSA request ” ↗I saw a different story today about a judge's ruling that sniffing open Wi-Fi networks is not considered a wiretap.[1] The implications therein could be far-reaching, should this precedent be applied to other, similar areas: - Are civilians now responsible for their own security if they value their privacy? - Does this overrule "unauthorized network access" in the criminal code? - Would an adm
on “The Disturbing, Unchecked Rise of the Administrative Subpoena” ↗…the bundle that aren't listed in either category above are: CEH v9: Certified Ethical Hacker Version 9 Study Guide Malware Analyst's Cookbook and DVD: Tools and Techniques for Fighting Malicious Code Secrets and Lies: Digital Security in a Networked World, 15th Anniversary Edition Threat Modeling: Designing for Security Unauthorised Access: Physical Penetration Testing For IT Security Teams
on “Cybersecurity Humble Book Bundle” ↗Awesome, thanks! I haven't read enough Schneier to have picked up on that (really just Secrets and Lies).
on “BA jihadist relied on Jesus-era encryption” ↗Sure. I've not read Threat Modeling, Malware Analyst's Cookbook and DVD, Unauthorized Access, Secrets and Lies and CEH v9 Study Guide.
on “Cybersecurity Humble Book Bundle” ↗after reading Secrets and Lies: Digital Security in a Networked World by Bruce Schneier I have come to realize that trust is a really difficult thing to implement online. Look at how hard it is for Amazon to police counterfeit items…
on “Twitter to ban political advertising” ↗Bruce Schneier made a similar point in his book, “Secrets and Lies: Digital Security in a Networked World“. Quote: Society needs defectors. Groups benefit from the fact that some members do not follow the group norms. These are the outliers: the people who resist popular…
on “What if you did the exact opposite?” ↗…Ph.D from the University of Westminster in London - is chief technology officer of BT Managed Security Solutions 15 publications, 6 notable books - - Applied Cryptograph - Cryptography Engineering - Secrets and Lies: Digital Security in a Networked World - Beyond Fear: Thinking Sensibly About Security in an Uncertain World - Liars and Outliers: Enabling the Trust that Society Needs to Thrive - Data and Goliath:…
on “The Mirai Botnet Was Part of a College Student Minecraft Scheme” ↗…POV. Basically, "here are some tools". * Practical Cryptography - Let's look a bit bigger picture. The issue is about how to do what you want and how to not screw it up. Let's look at how to do that. * Secrets and Lies - Security isn't about crypto, we need to think about the whole of networking and infrastructure. Here's how to think about security more generally. * Beyond Fear - Security is an innate part of how…
on “What I've Been Thinking About” ↗…titles. I meant to write PC where I wrote AC. If PC disavows AC, then I've failed to find the disavowal by looking up the pointers to AC in the index of PC. There's something nearer to a disavowal in "Secrets and Lies", but it still doesn't go further than (I paraphrase) "I focused on the algorithms, but actually other stuff matters more". (Both books mention that plenty of very bad systems have been built by people…
on “Schneier reviews: Here Comes Everybody” ↗…if they want mass adoption, they have to have much faster updates. Bruce Schneier joked that the user definition of an 'unacceptable' software delay is a 'noticeable' software delay [NB: I read this in Secrets and Lies - he may have been quoting someone else but I can't find a source online]. Based on that standard, this is way too long.
on “GPG Suite” ↗