Schneier Blog@schneierblogJun 17, 2020Bank Card "Master Key" Stolen schneier.comBank Card "Master Key" Stolen - Schneier on SecuritySouth Africa’s Postbank experienced a catastrophic security failure. The bank’s master PIN key was stolen, forcing it to cancel and replace 12 million bank cards. The breach resulted from the...262678781.5K1.5K
Schneier Blog@schneierblogSep 13, 2016Someone Is Learning How to Take Down the Internet: Over the past year or two, someone has been probing the de... bit.ly/2cDV2Zk88699699432432
Schneier Blog@schneierblogNov 22, 2021“Crypto” Means “Cryptography,” not “Cryptocurrency” schneier.com"Crypto" Means "Cryptography," Not "Cryptocurrency" - Schneier on SecurityI have long been annoyed that the word “crypto” has been co-opted by the blockchain people, and no longer refers to “cryptography.” I’m not the only one.16167878308308
Schneier Blog@schneierblogSep 21, 2017ISO Rejects NSA Encryption Algorithms schneier.comISO Rejects NSA Encryption Algorithms - Schneier on SecurityThe ISO has decided not to approve two NSA-designed block encryption algorithms: Speck and Simon. It’s because the NSA is not trusted to put security ahead of surveillance: A number of them voiced...88283283259259
Schneier Blog@schneierblogJan 3, 2023Breaking RSA with a Quantum Computer schneier.comBreaking RSA with a Quantum Computer - Schneier on SecurityA group of Chinese researchers have just published a paper claiming that they can—although they have not yet done so—break 2048-bit RSA. This is something to take seriously. It might not be correct,...101011811824424497K97K
Schneier Blog@schneierblogAug 1, 2019Facebook Plans on Backdooring WhatsApp schneier.comFacebook Plans on Backdooring WhatsApp - Schneier on SecurityThis article points out that Facebook’s planned content moderation scheme will result in an encryption backdoor into WhatsApp: In Facebook’s vision, the actual end-to-end encryption client itself...1515227227223223
Schneier Blog@schneierblogDec 16, 2014Fake Cell Towers Found in Norway: In yet another example of what happens when you build an insecure communicat... bit.ly/1xpBN96112952952323
Schneier Blog@schneierblogOct 10, 2017Changes in Password Best Practices schneier.comChanges in Password Best Practices - Schneier on SecurityNIST recently published its four-volume SP800-63b Digital Identity Guidelines. Among other things, it makes three important suggestions when it comes to passwords: Stop it with the annoying password...77188188210210
Schneier Blog@schneierblogApr 7, 2021WTF: Signal Adds Cryptocurrency Support schneier.comSignal Adds Cryptocurrency Support - Schneier on SecurityAccording to Wired, Signal is adding support for the cryptocurrency MobileCoin, “a form of digital cash designed to work efficiently on mobile devices while protecting users’ privacy and even their...10108686175175
Schneier Blog@schneierblogNov 15, 2023New SSH Vulnerability schneier.comNew SSH Vulnerability - Schneier on SecurityThis is interesting: For the first time, researchers have demonstrated that a large portion of cryptographic keys used to protect data in computer-to-server SSH traffic are vulnerable to complete...66656518918967K67K
Schneier Blog@schneierblogApr 22, 2019Excellent Analysis of the Boeing 737 MAX Software Problems schneier.comExcellent Analysis of the Boeing 737 Max Software Problems - Schneier on SecurityThis is the best analysis of the software causes of the Boeing 737 MAX disasters that I have read. Technically this is safety and not security; there was no attacker. But the fields are closely...339191171171
Schneier Blog@schneierblogMay 1, 2020Me on COVAD-19 Contact Tracing Apps schneier.comMe on COVID-19 Contact Tracing Apps - Schneier on SecurityI was quoted in BuzzFeed: “My problem with contact tracing apps is that they have absolutely no value,” Bruce Schneier, a privacy expert and fellow at the Berkman Klein Center for Internet & Society...1212124124170170
Schneier Blog@schneierblogMar 31, 2025The Signal Chat Leak and the NSA schneier.comThe Signal Chat Leak and the NSA - Schneier on SecurityUS National Security Advisor Mike Waltz, who started the now-infamous group chat coordinating a US attack against the Yemen-based Houthis on March 15, is seemingly now suggesting that the secure...44676717617623K23K
Schneier Blog@schneierblogDec 18, 2014ISIS Cyberattacks: Citizen Lab has a new report on a probable ISIS-launched cyberattack: This report describes... bit.ly/1AuVnyz1119019077