Ed T.April 6, 2007 12:56 PM


I wonder if Chuck Norris is getting a good laugh over this.

Oh, and Bruce, when can we expect to see you on the informercial circuit?


merkelcellcancerApril 6, 2007 1:06 PM

Not one...., but if you call right now, we will sent you two for only the cost of shipping and handling.

@the informercial circuit?

nzrussApril 6, 2007 2:14 PM

Have you been on the Simpsons or Southpark? It can't be too far away.....

nzrussApril 6, 2007 2:27 PM

they're all a good read.

I like this one:

"Bruce Schneier is not balding, you just can't see the encrypted portions of his hair."

MeganApril 6, 2007 2:38 PM

The facts generator is hilarious. I had no idea you were capable of mounting chosen-ciphertext attacks without choosing the ciphertext. Genius!

suoynonaApril 6, 2007 3:14 PM

"Once Bruce Schneier was kidnapped and taken out of the country. His kidnappers got picked up and charged with a violation of US cryptography export laws."


georgeApril 6, 2007 3:50 PM

I don't like the T-shirt, because his pony-tail isn't properly visible.

Magnus von KoellerApril 6, 2007 4:23 PM

I mean, the t-shirt is nice and all but it pales compared to the hilarious Bruce Schneier Facts thing that page links to. "Bruce Schneier reads RFID cards with the knuckles of his clenched fist." -- Oh yeah!

Reader XApril 7, 2007 6:10 AM

Bruce, you had nothing to do with this? Please. We all know better. This is clearly the result of a meticulously planned and flawlessly executed strategy for world domination of security discourse. That it's an unintended consequence is almost beside the point.

Now all that's left to do is the franchising. Beyond Fear(TM)! I'm in! How much for a piece of the action?

KKApril 8, 2007 1:32 PM

On the WWBSD? page, watch the price as the page loads, or when you hit reload. It starts out as $7.35 and then jumps to $8.40 when the page is fully loaded.

pejApril 8, 2007 4:17 PM

I'm not sure those look like real t-shirts...or American flags. Someone call the Boston police!

BenApril 9, 2007 4:57 AM


It is written in javascript. With javascript disabled it sits at $7.35. Using NoScript you can decide when to change the price ;-)

Although there (appears) to be some server-side checking. Since it is not possible to checkout with the lower price, it jumps to $8.40 when the item is added to the cart.

I once attempted to order an essay from one of those custom essay sites. All the validation was achieved using javascript, so I submitted my own values for price (£0.00) along with the title something to the effect of 10,000 words on ``plagiarism is wrong" to Masters standard. My order went through, but was subsequently cancelled ;-(

WitlessWarriorApril 9, 2007 2:46 PM

No, WWBSD is correct. After all, as a nearly equal member of security pantheon (Marcus Ranum) said: "enumerating badness is dumb."

MikeApril 15, 2007 5:25 PM

@Ben, @kk:

It might just be an inconsistent set of defaults in the site: the women's version of the shirt does cost $7.35.

Hope DundasApril 19, 2007 10:40 PM

Hmm, makes me wonder if there have been any parallels made with _Bruce Almighty_.... ;)

Leave a comment

Allowed HTML: <a href="URL"> • <em> <cite> <i> • <strong> <b> • <sub> <sup> • <ul> <ol> <li> • <blockquote> <pre>

Photo of Bruce Schneier by Per Ervland.

Schneier on Security is a personal website. Opinions expressed are not necessarily those of IBM Resilient.