The security mirage - Bruce Schneier

The feeling of security and the reality of security don't always match, says computer-security expert Bruce Schneier. In his talk, he explains why we spend billions addressing news story risks, like the "security theater" now playing at your local airport, while neglecting more probable risks -- and how we can break this pattern. (Filmed at TEDxPSU.)
Talk by Bruce Schneier.

[@jackkraken3888]

Reminds me of a humorous story: A CEO of anti-identity theft company was so sure of his own product he actually displayed his own social security number on the company website and hilarity ensured.
The CEO of Lifelock had his identity stolen 13 times! Plus the company was fined $12 million for deceptive advertising by the FTC, which probably had something to do with the company promising to pay a million dollars if a customer used their service and had their identity stolen.

[@Simple_Jackass]

Yeah, unfortunately that $12 million dollar fine was "security theater" itself, as 3 years ago, when this comment was posted, he (they, LifeLock) was just about to sell that company to Symantec for $2.3 billion, which he did... Yay for slaps on the wrist....

[@graydonsmith5447]

I am so disappointed that this presentation only has 44K views. I am a security professional and recommend this talk to everyone that will listen. Bruce explains the theories of security better than anyone I have ever listened to.

[@dakshdiliptalreja4088]

TL;DR: If our feelings match reality, we make better security trade-offs.

[@PijusONLINE]

I found this to be helpful for a piece that I've been writing about irrational fears. Thanks.

[@stevenericsmith2352]

Ha, ha 2020!

[@anialator1000000]

i Must say the RFID tags on babies would also help with giving the babies to their correct parents and not having to worry if nurse remember which Mike she was carrying.. Certainly there are other signs and factors, but if you really want to approach security theater like this, then you really have to accept that there is no such thing as security. the Law agasint murder is just security theater, Doors and locks are security theater, Bunkers, just really clever security theater. there is ALWAYS a way around any kind of security, ALWAYS. its impossible to perfectly protect any computer data on the internet. what security theater really is, is security that is not perfect, which is all secruity. What you call security theater is just the stuff that is less effective, but none the less is effective to a degree.
i mean, How easy is it to replace Pills with poison if a bottle has no tamper proof cap. Now if it does, how many super easy ways have just been shot down because of evidence you are forced to leave behind to do so. Suddenly, you cant have Idiots doing this stuff. Idiots cant carry guns through Metal detectors or hide them from a pat down. Security Theater stops the idiots from doing these things. if a person is smart enough and wants to do something, they can probably figure out a way to do it, regardless of the security. Security Theater is just security that stops the idiots from even trying, and catches them when they do. Now since the idiots are automatically taken care of, you need only worry about the smarter ones and plan to deal with them. Because certainly the Smart ones like you can figoure out to use a small enough syringe and stick it in on a specific point so that there is nearly no visible evidence that you did so, but when the customer opens it up, the poison you used is certainly not the pills themselves like it could have been if some idiot emptied the bottle and replaced it with ones that look real but are poison.

[@andrewober-reynolds9184]

It makes you wonder how people asses biometrics like facial recognition because I think facial recognition is just security theater

[@Cpt.Zenobia]

This is so still relevant.

[@villusive]

I just found this guy in tmol's vid bc he had bass XD

[@JesusNunezFernandez-vf8td]

Carlos por favor que no se ingles :(

[@JesusNunezFernandez-vf8td]

Por cierto con subtítulos en español no esta tan mal la charla pero en 21 minutos podría resumir lo de que el sentimiento de seguridad no corresponde a la realidad

[@MadsOcto7]

Awesome talk

[@scourgeofsnackind]

democracynow brought me here

[@Douglas_Gillette]

I feel a hum.

[@MrN0nex]

this has way to little views

[@Jason-qs4jj]

The people who have commented already have said some of the most insanely idiotic things I have ever read. May God have mercy on the souls of those who have written comments thus far.

[@Simple_Jackass]

DO ANOTHER (NEW) TED TALK BRUCE! YOU'RE THE BEST! 2019