Bruce Schneier's New Book

tgw writes: "Bruce Schneier talks about his new book 'Secrets and Lies: Digital Security in a Networked World' in the "latest Crypto-Gram newsletter." Applied Cryptography was excellent. I'll have to check out this one.

Risk Management

[Xenu]

Risk management seems to be popular with banks and other financial institutions. It has one glaring flaw, it does not take into account the costs of security failures to customers. That's why bank are often sloppy and lax about security procedures when the customer's money is at risk. It is cheaper for the bank to fix the results of security failures than it is to prevent them.

Sounds Good

[burris]

Sounds like a good book. Hopefully it will give some of the the people who make decisions at companies a little bit more realistic view of what security is all about. Many of them have practically no clue and are easily swayed by ridiculous claims from snake oil vendors. It might also be good for computer weenies who have difficulty tempering their desire for perfect security.

Burris

The book's homepage...

[harmonica]

... is here [counterpane.com]. It includes the preface of the book.