Comments
Rontea • October 21, 2026 9:36 AM
Reading this 2002 article through the lens of 2026, I’d say its core premise still holds up remarkably well. Professor Schneier argued that security is fundamentally an economic problem, and that liability would become the unavoidable driver of change. Looking at the evolution of cybersecurity over the last two decades, we’ve seen this play out almost exactly as predicted.
Anonymous • October 22, 2026 7:57 AM
Following on from @Rontea:
I read this in the paper:
“Internet security is a commons. Like all commons, keeping it working benefits everyone, but any individual can benefit from exploiting it. In our society we protect our commons—our environment, healthy working conditions, safe food and drug practices, sound accounting practices—by legislating those goods and by making companies liable for taking undue advantage of those commons. This kind of thinking is what gives us bridges that don’t collapse, clean air and water, and healthy sanitary restaurants. We don’t live in a “buyer beware” society; we hold companies liable for taking advantage of buyers.”
That is the exact statement explaining why Doge was such a stupid idea.
Subscribe to comments on this entry
Leave a comment
Sidebar photo of Bruce Schneier by Joe MacInnis.
David Mohring • October 21, 2026 7:30 AM
2002 When most services were still provided to businesses using client-server desktop apps.
Our Data (Usenet-archive)
Bonus from 2004 Twelve Step TrustABLE IT : VLSBs in VDNZs From TBAs
The best hope remains a move toward requiring a combination of Trusted Build Agents, Reproducible Builds and some form of “Warrant of Fitness” by either insurers or legislative mandate.