Bruce Schneier
Security technologist and author of books including Applied Cryptography and Data and Goliath; writes the Schneier on Security blog and the monthly Crypto-Gram newsletter.
Bruce Schneier did not write this page. ppll compiled it from their own words, each linked to the source. Is this you? · Report a mistake
Latest Blog
What they believe
-
AI coding agents pulling unknown code onto corporate networks will be exploited, and it will take the shape of a supply-chain attack.
This kind of thing will be exploited. Think Solar Winds–style supply chain attacks.
schneier.comSaid 4 Sept 2026This on korrents
-
Stored personal data is a toxic asset: it is a liability that keeps growing for as long as it is kept.
What all these data breaches are teaching us is that data is a toxic asset and saving it is dangerous.
schneier.comSaid 4 Mar 2016This on korrents
The bold line is korrents’ wording; the quote is theirs. These 2: what they wrote before what they said aloud, one per source, newest first.
Feed
As its own page →Hiding
20 October
19 October
16 October
15 October
14 October
12 October
9 October
4 September
-
Their words
This kind of thing will be exploited. Think Solar Winds–style supply chain attacks.
17 June
16 June
15 June
14 June
12 June
11 June
10 June
9 June
8 June
5 June
4 June
3 June
2 June
Nothing matches.
Beliefs
Korrents What they believe 9 beliefs — each backed by an exact quote.
Each is a — compiled by korrents.com, not by them: the one-line wordings are korrents', the quotes are theirs.
Recent
AI coding agents pulling unknown code onto corporate networks will be exploited, and it will take the shape of a supply-chain attack.
This kind of thing will be exploited. Think Solar Winds–style supply chain attacks.
AI Coding Agents Are Installing Unknown/Untrusted Code on Corporate Networks Said 4 Sept 2026
Stored personal data is a toxic asset: it is a liability that keeps growing for as long as it is kept.
What all these data breaches are teaching us is that data is a toxic asset and saving it is dangerous.
Data Is a Toxic Asset Said 4 Mar 2016
Storage became so cheap that companies keep everything forever, because until recently there was no downside to keeping it.
And because the cost of saving all this data is so cheap, there’s no reason not to save as much as possible, and save it all forever.
Data Is a Toxic Asset Said 4 Mar 2016
Show 6 more
An access mechanism built for the police cannot be limited to the police, so a backdoor weakens the system against every attacker at once.
As technologists, we can’t build an access system that only works for people of a certain citizenship, or with a particular morality, or only in the presence of a specified legal document.
Security vs. Surveillance Said 1 Feb 2016
The encryption argument is not security against privacy, it is more security against less security.
We’re not being asked to choose between security and privacy. We’re being asked to choose between less security and more security.
Security vs. Surveillance Said 1 Feb 2016
Against a sufficiently skilled and determined attacker computer security fails, and most people are safe only because nobody bothered with them.
If a sufficiently skilled, funded, and motivated attacker wants in to your computer, they’re in.
Security vs. Surveillance Said 1 Feb 2016
Widespread encryption protects far more against bulk surveillance than against a targeted attacker.
Ubiquitous encryption protects us much more from bulk surveillance than from targeted surveillance.
Security vs. Surveillance Said 1 Feb 2016
The right to privacy is fundamental; without it people cannot feel fully free and protected.
Privacy is an inherent human right, and a requirement for maintaining the human condition with dignity and respect.
The Eternal Value of Privacy Said 18 May 2006
Having nothing to hide is not a reason to accept surveillance.
Privacy protects us from abuses by those in power, even if we’re doing nothing wrong at the time of surveillance.
The Eternal Value of Privacy Said 18 May 2006
Beliefs others hold too
The right to privacy is fundamental; without it people cannot feel fully free and protected. 2 hold this
Privacy is an inherent human right, and a requirement for maintaining the human condition with dignity and respect.
The Eternal Value of Privacy Said 18 May 2006
Having nothing to hide is not a reason to accept surveillance. 2 hold this
Privacy protects us from abuses by those in power, even if we’re doing nothing wrong at the time of surveillance.
The Eternal Value of Privacy Said 18 May 2006
What is a korrent?
A korrent is a belief a person has stated in their own words: one sentence stating the claim, backed by a quote and a source, kept at korrents.com.
Under a name here, the quoted block is what they actually said. The korrent beneath it is the claim those words support, in korrents' wording — tap it to see the record, its source, and who else holds it.
Nobody here wrote their own korrents. They are compiled from public statements, and a person can change their mind, which is recorded too.
Recommends rcmnd
rcmnd What they recommend 10 things — each backed by an exact quote.
Compiled by rcmnd.app, not by them: the quotes are theirs, and each links to the post it was copied from.
Recent
Uses Beyond Compare
For backup, I use Beyond Compare and a variety of external drives.
usesthis.com 14 Apr 2015
Uses Uniball Micro
My goto pen is a Uniball Micro, in both black and blue.
usesthis.com 14 Apr 2015
Liked Sony Vaio
My computer is a Sony Vaio, which seems to give me the best power/weight ratio. It's a Pro 13, but that's not important.
usesthis.com 14 Apr 2015
Show 7 more
Mixed on Outlook
I use Outlook to maintain my calendar and address book. I hate that program, too, but I can't find anything else that lets me sync locally to my iPhone without going through the cloud.
usesthis.com 14 Apr 2015
Uses HTTPS Everywhere
Firefox is my browser, with a whole bunch of security plug-ins like AdBlock Plus, BetterPrivacy, and HTTPS Everywhere.
usesthis.com 14 Apr 2015
Uses Firefox
Firefox is my browser, with a whole bunch of security plug-ins like AdBlock Plus, BetterPrivacy, and HTTPS Everywhere.
usesthis.com 14 Apr 2015
Disliked Windows 8.1
I don't like software gadgets any more than I like hardware gadgets. I use Windows 8.1 – hate it – and Microsoft Word.
usesthis.com 14 Apr 2015
Liked Eudora
I still use Eudora for my e-mail (version 7.1, not the one based on Thunderbird), because I don't want my mail living in the cloud. I'd upgrade to something newer and better, but there isn't anything newer and better.
usesthis.com 14 Apr 2015
Uses Notepad++
If I need a text editor, I use Notepad++. Occasionally, I use Excel.
usesthis.com 14 Apr 2015
Uses Password Safe
Where they publish
Site schneier.com His site: blog, essays, books, talks.
Link verified 5 Sept 2026.
Blog Schneier on Security Daily posts on security, privacy and surveillance.
Recent
- Possible new Cellebrite iPhone Radio Zero-Day 20 Oct 2026 Justin.sh is reporting on a confidential Cellebrite document that has been leaked to him: Cellebrite calls it Advanced Unlocks (AU from here on), not to be confused with the “advanced unlocking services” they’ve markete…
- Training AIs to Solve CAPTCHAs 19 Oct 2026 Interesting research: Abstract: Vision-language models (VLMs) can solve visual CAPTCHAs without task-specific training, but the agents built on them approach every challenge from scratch. For such an agent, the hundredt…
- Friday Squid Blogging: Squid Before the Chicxulub Meteor Impact 16 Oct 2026 New research shows that squid lived all around the globe even before the Cretaceous-Paleogene mass extinction event. As usual, you can also use this squid post to talk about the security stories in the news that I haven…
Show 7 more
- Backdooring Open-Weight AI Models 16 Oct 2026 This is a problem: Any open model whose weights have been edited can carry a backdoor, whether it’s a task-specific fine-tune, a merged adapter or an abliterated build. We have abliterated models in the title because it…
- Measuring Human Cryptanalysis Effort 15 Oct 2026 Matthew Green has a new site that tries to estimate the number of cryptanalyst-hours that have been spent analyzing different public-key algorithms: Abstract: We estimate how much public cryptanalysis each public-key as…
- Upcoming Speaking Engagements 14 Oct 2026 This is a current list of where and when I am scheduled to speak: I’m speaking at ATTENTION: Democracy, Rebuilt in Montreal, Quebec, Canada. The event runs October 21–23, 2026, and my talk is on Wednesday, October 21. I…
- The Future of AI Cryptanalysis 14 Oct 2026 Matthew Green has been writing a rather pessimistic series of posts about the potential for AI systems to vastly outperform humans in cryptanalysis of both symmetric and public-key ciphers. I am more optimistic than he…
- Cyberattack on Connected Fridges in France 14 Oct 2026 Another IoT cyberattack, this one in France: Hackers gained control of the software that regulates the temperatures of the refrigeration units, forcing some to warm to 50C (120F) overnight, according to one supermarket…
- FBI Arrests Suspect in FBI-Hacking Case 12 Oct 2026 In September, hackers from a group called ShinyHunters announced that they stole a trove of FBI data about its own agents. It was an intelligence disaster. Last week, the FBI arrested (alternate link) someone associated…
- Friday Squid Blogging: I Caught a Squid 9 Oct 2026 On Wednesday I spent a day fishing, on a small boat out of Gloucester, MA. We caught many cod (none of which we could keep), and a bunch of hake and mackerel (all of which we could keep). And…I caught a squid! Near as I…
Link verified 5 Sept 2026. Recent items update automatically from the channel.
Newsletter Crypto-Gram Monthly newsletter, published since 1998.
Link verified 5 Sept 2026.
x.com @schneierblog Feed of his blog posts.
Recent
- AI Use by the US Government 17 Jun 2026 schneier.com
- Flock Cameras Are Being Used for Stalking 16 Jun 2026 schneier.com
- The FCC Wants to Eliminate Burner Phones 15 Jun 2026 schneier.com
Show 17 more
- Upcoming Speaking Engagements 14 Jun 2026 schneier.com
- Friday Squid Blogging: Squid-Inspired Fluid Pump 12 Jun 2026 schneier.com
- Bernie Sanders’ AI Sovereign Wealth Fund Plan 12 Jun 2026 schneier.com
- Enhanced License Plate Tracking 11 Jun 2026 schneier.com
- NSO Group Hacking WhatsApp Despite Court Order 10 Jun 2026 schneier.com
- GPS As a Key Distribution Platform 9 Jun 2026 schneier.com
- Critical Zcash Vulnerability Found and Fixed 8 Jun 2026 schneier.com
- Anthropic's Project Glasswing Update 8 Jun 2026 schneier.com
- AI Worm 5 Jun 2026 schneier.com
- Hacking Meta's AI Chatbot 4 Jun 2026 schneier.com
- AI Used to Decrypt Medieval Ciphers 3 Jun 2026 schneier.com
- The Intersection of Encryption and AI 2 Jun 2026 schneier.com
- Microsoft Threatening Security Researcher 2 Jun 2026 schneier.com
- Vulnerability Disclosure in the Age of AI 1 Jun 2026 schneier.com
- Friday Squid Blogging: Another Squid 29 May 2026 schneier.com
- Chilling Effects 29 May 2026 schneier.com
- FBI's 2025 Internet Crime Report 27 May 2026 schneier.com
Link verified 5 Sept 2026. Recent items update automatically from the channel.
About the English under a post
Some people here publish in a language other than English. Where they do, this site shows a machine translation beneath the post, in this typeface — the site's own, not theirs.
The post itself is never changed, moved or hidden: what is set in the serif above is exactly what the person published, and it is what to quote them on. A translation can be wrong in ways that matter, especially about tone.
Only the post's own words are translated. A quoted post, a linked article and a belief on korrents.com are left in their original language.