Entries Tagged "Schneier news"

Page 27 of 47

Status Report: Liars and Outliers

Last weekend, I completely reframed the book. I realized that the book isn’t about security. It’s about trust. I’m writing about how society induces people to behave in the group interest instead of some competing personal interest. It’s obvious that society needs to do this; otherwise, it can never solve collective action problems. And as a social species, we have developed both moral systems and reputational systems that encourage people behave in the group interest. I called these systems “societal security,” along with more recent developments: institutional (read “legal”) systems and technological systems.

That phrasing strained the definition of “security.” Everything, from the Bible to your friends treating you better if you were nice to them, was a security system. In my reframing, those are all trust pressures. It’s a language that’s more intuitive. We already know about moral pressure, peer pressure, and legal pressure. Reputational pressure, institutional pressure, and security pressure is much less of a stretch. And it puts security back in a more sensible place. Security is a mechanism; trust is the goal.

This reframing lets me more easily talk directly about the central issues of the book: how these various pressures scale to larger societies, and how security technologies are necessary for them to scale. Trust changes focus as society scales, too. In smaller societies (a family, for example), trust is more about intention and less about actions. In larger societies, trust is all about actions. It’s more like compliance. And as things scale even further, trust becomes less about people and more about systems. I don’t need to trust any particular banker, as long as I trust the banking system. And as we scale up, security becomes more important.

Possibly the book’s thesis statement: “Security is a set of constructed systems that extend the naturally occurring systems that humans have always used to induce trust and enable society. This extension became necessary when society began to operate at a scale and complexity where the naturally occurring mechanisms started to break down, and is more necessary as society continues to grow in scale.”

So the phrase “societal security” is completely gone from the book. (Like the phrase “dishonest minority,” it only exists in old blog posts.) There’s more talk about the role of trust in society. There’s more talk about how security, real security this time, enables trust. It felt like a major change when I embarked on it, but the fact that I did it in three days says how this framing was always there under the surface. And the fact that the book reads a lot more cleanly now says this framing is the right one.

The title remains the same: Liars and Outliers. The cover remains the same. The table of contents is the same, although some chapters have different names. The subtitle has to change, though. Candidates include:

  1. How Trust Holds Society Together—my publisher probably won’t allow me to write a book without the word “security” somewhere in the title.
  2. Security, Trust, and Society—not punchy enough.
  3. How Security Enables the Trust that Holds Society Together—probably too long.
  4. How Trust and Security Hold Society Together—maybe.

Any other ideas?

The manuscript is still due to the publisher at the end of the month, and publication is still set for mid-February. I am enjoying writing it, but I am also looking forward to it being done.

Posted on October 5, 2011 at 7:38 PMView Comments

A Status Report: "Liars and Outliers"

It’s been a long hard year, but the book is almost finished. It’s certainly the most difficult book I’ve ever written, mostly because I’ve had to learn academic fields I don’t have a lot of experience in. But the book is finally coming together as a coherent whole, and I am optimistic that the results will prove to be worth the effort.

Table of contents:

1. Introduction
2. A Natural History of Security
3. The Evolution of Cooperation
4. A Social History of Security
5. Societal Dilemmas
6. Societal Security
7. Moral Societal Security
8. Reputational Societal Security
9. Institutional Societal Security
10. Technological Societal Security
11. Competing Interest
12. Organizations and Societal Dilemmas
13. Corporations and Societal Dilemmas
14. Institutions and Societal Dilemmas
15. Understanding Societal Security Failures
16. Societal Security and the Information Age
17. The Future of Societal Security

The old title, “The Dishonest Minority,” has been completely expunged from the book. The phrase appears nowhere in the text—it’s only existence is in old blog posts about the book.

Lastly, I want to apologize to all my readers for the scant pickings on my blog and in Crypto-Gram. So much of my attention is going into writing my book that I don’t have time for much else. I promise to write more essays and blog posts once the book is finished. That’s likely to be the December issue of Crypto-Gram. Thank you for your patience.

The manuscript is due in 45 days; publication is still scheduled for mid February. Right now it’s 88,000 words long, with another 30,000 words in notes and references.

Posted on September 15, 2011 at 6:52 AMView Comments

Liars and Outliers Cover

My new book, Liars and Outliers, has a cover.

proposed cover

Publication is still scheduled for the end of February—in time for the RSA Conference—assuming I finish the manuscript in time.

EDITED TO ADD (8/12): The cover was inspired by a design by Luke Fretwell. He sent me an unsolicited cover design, which I liked and sent to my publisher. They liked the general idea, but refined it into the cover you see. Luke has a blog post on the exchange, which includes a picture of his cover.

Posted on August 12, 2011 at 2:09 PMView Comments

My Next Book: Title and Cover

As my regular readers already know, I’m in the process of writing my next book. It’s a book about why security exists: specifically, how a group of people protects itself from individuals within that group. My working title has been The Dishonest Minority. The idea behind the title is that “honesty” is defined by social convention, then those that don’t follow the social conventions are by definition dishonest.

In my second blog post about the book, there was a lot of commentary about the word “dishonest.” The problem is that there are two kinds of dishonest people: those who are selfish, and those who are differently moral than the rest of society. So the word has to apply to both burglars and abolitionists. It has to apply to a criminal within society as a whole, and a police informant within a society of criminals. It has to apply to people who don’t pay their taxes because they’re selfish, and those who don’t pay because they are morally opposed to what the government is doing with the money. It has to apply to both Bernie Madoff and Gandhi.

It’s true that it’s a bit pejorative to use the word “dishonest” to describe both Madoff and Gandhi. But I can’t think of a better word. Here are some options:

  • The Dishonest Minority
  • The Dangerous Minority
  • The Deviant Minority
  • The Disobedient Minority

I don’t really like any of them.

Another option is to explicitly call out the two different types:

  • Murderers, Messiahs, and Other Dangerous People
  • Sinners, Saints, and Other Dangerous People
  • Sociopaths, Saints, and Other Dangerous People
  • Criminals, Revolutionaries, and Other Dangerous People
  • Criminals, Activists, and Other Dangerous People
  • Madoff, Gandhi, and Other Dangerous People
  • Jesus, the Two Thieves, and other Dangerous People
  • Liars, Outliers, and Other Threats
  • Crime, Revolution, and Other Dangers

Alliteration is always a plus. Biblical references I’m less sure about.

I like this general concept for title, because the potential reader will be intrigued how the two are related. They’re both “transgressors,” which might be a good word for the title.

  • Criminals, Revolutionaries, and Other Transgressors
  • Sociopaths, Saints, and Other Transgressors
  • Crime, Activism, and Other Transgressions
  • Murder, Revolution, and Other Transgressions

Or the word alone:

  • Transgressors
  • Transgressions

The subtitle is still one of these:

  • Security and its Role in Modern Society
  • Security and its Role in Protecting Modern Society
  • Security and its Role in Defending Modern Society
  • Security and its Role in Defending Society
  • Security and its Role in Protecting Society

Other options:

  • Protecting Society through Security
  • Securing Society from its Deviants

In general, I like an exciting title paired with a descriptive subtitle. But I’m willing to be convinced otherwise.

Remember, the goal of a title is to make people—people who don’t already know me and my writing—want to read my book.

Question 1: What do you think of the title options? What other words would work, either in the “adjective noun” title style, or the “A, B, and other Cs” style? What other completely different titles or subtitles would work?

Next: cover options. I’m not sure how much book cover matters anymore, now that my books will primarily be sold from online stores and in ebook formats. But I’d like a cover that doesn’t suck. And it’s hard. “Security” is a concept that’s full of trite metaphors. And it’s hard to come up with a picture that really captures what I am writing about. (Maybe this one.) Below are five options that my publisher has sent me.

1. proposed cover 2. proposed cover 3. proposed cover 4. proposed cover 5. proposed cover

Note that the stock photos sometimes have watermarks, or are shown in artificially reduced resolution. If we actually use one of the photos, those artifacts will disappear.

Question 2: What do you think of the cover options: the stock photos, the typefaces, the colors, the overall layout of the cover? Will any of those work, or do we have to go back to the drawing board?

I appreciate your opinions. Please first give them to me cold, without reading the other comments. Then feel free to comment on what other people think.

Posted on June 21, 2011 at 11:20 AMView Comments

Fourth SHB Workshop

I’m at SHB 2011, the fourth Interdisciplinary Workshop on Security and Human Behavior, at Carnegie Mellon University. This is a two-day invitational gathering of computer security researchers, psychologists, behavioral economists, sociologists, political scientists, anthropologists, philosophers, and others—all of whom are studying the human side of security—organized by Alessandro Acquisti, Ross Anderson, and me. It’s not just an interdisciplinary conference; most of the people here are individually interdisciplinary. For the past four years, this has been the most intellectually stimulating conference I have attended.

Here is the program. The list of attendees contains links to readings from each of them—definitely a good place to browse for more information on this topic.

Ross Anderson is liveblogging this event. Matt Blaze is taping the sessions; I’ll link to them if he puts them up on the Internet.

Here are links to my posts on the first, second, and third SHB workshops. Follow those links to find summaries, papers, and audio recordings of the workshops.

Posted on June 18, 2011 at 1:06 PMView Comments

Interview with Me About the Sony Hack

These are what I get for giving interviews when I’m in a bad mood. For the record, I think Sony did a terrible job with its customers’ security. I also think that most companies do a terrible job with customers’ security, simply because there isn’t a financial incentive to do better. And that most of us are pretty secure, despite that.

One of my biggest complaints with these stories is how little actual information we have. We often don’t know if any data was actually stolen, only that hackers had access to it. We rarely know how the data was accessed: what sort of vulnerability was used by the hackers. We rarely know the motivations of the hackers: were they criminals, spies, kids, or someone else? We rarely know if the data is actually used for any nefarious purposes; it’s generally impossible to connect a data breach with a corresponding fraud incident. Given all of that, it’s impossible to say anything useful or definitive about the attack. But the press always wants definitive statements.

Posted on May 13, 2011 at 11:29 AMView Comments

1 25 26 27 28 29 47

Sidebar photo of Bruce Schneier by Joe MacInnis.