Bruce Schneier Quotes

I keep my stuff updated all the time. Being in the security industry, I keep up to date with securities.

A lot of companies are clueless, because they spend most or all of their security budget on high-tech security like fire walls and biometric authentication - which are important and needed - but then they don't train their people.

We're going to become the number one security company.

The reality is that there are simply not enough skilled humans available to properly plan, manage, integrate, and optimize security devices, strategies, and protocols.

Being a CISO is a tough job. I have the end responsibility for the personal information of over a billion people.

For most companies, they don't want to ever talk about security unless it's an absolute emergency and they've had a breach. And I think that's a mistake.

As safe and secure as you believe you are is as vulnerable as you can turn out to be.

Some people may get in to the building without the proper passes and things, but I think that's the price you pay for being an open place for people to come.

I won't be satisfied until I've put the entire security industry out of work.

I think if we're going to live in this - in this world - in this technological world where information can be disseminated so quickly, we have to be serious and take firm, strong action against those who are putting American lives at risk. Because this will put people's lives at risk.

For me, privacy and security are really important. We think about it in terms of both: You can't have privacy without security.

Privacy and security are those things you give up when you show the world what makes you extraordinary.

You can't defend. You can't prevent. The only thing you can do is detect and respond.

I'm just not security-minded.

There is no such thing as perfect security, only varying levels of insecurity.

QQ is not secure. You might as well be sharing your information with the Public Security Bureau.

I characterize myself as a retired hacker. I'm applying what I know to improve security at companies.

Businesses should absolutely set aside funding in their budgets for security consultants. Unless there is an expert on staff, and there usually is not, it needs to be outsourced.

But a lot of businesses out there don't see the return on investment, they look at it as a liability, and until they can understand that proactive security actually returns, gives them a return on investment, it's still a hard sell for people.

I've spent my life defending the Net, and I do feel that if we don't fight online crime, we are running a risk of losing it all.

People don't want to talk about death, just like they don't want to talk about computer security. Maybe I should have named my workstation Fear. People are so motivated by fear.

Keep it simple, stupid. Good game design shouldn't keep you looking at the manual but should have enough depth where you feel like you bring something new to the game every time you play.

If you think technology can solve your security problems, then you don't understand the problems and you don't understand the technology.

I've met some smart people doing security work in the government, and they're starting to reach out to a broader audience, which I think is a good thing.

Cloud computing is a challenge to security, but one that can be overcome.