History has taught us: never underestimate the amount of money, time, and effort someone will expend to thwart a security system. It's always better to assume the worst. Assume your adversaries are better than they are. Assume science and technology will soon be able to do things they cannot yet. Give yourself a margin for error. Give yourself more security than you need today. When the unexpected happens, you'll be glad you did.
Amateurs hack systems, professionals hack people.
Interpretation
What this quote means
The quote emphasizes that while amateurs focus on technical skills, true experts understand and manipulate human behavior.
Bruce Schneier's quote highlights a critical distinction between amateurs and professionals in the field of hacking. Amateurs often concentrate on the technical aspects of systems, such as exploiting software vulnerabilities, whereas professionals recognize that understanding human psychology and social engineering is essential for successful hacking. This insight emphasizes that the most effective hacking often involves manipulating people rather than just breaking into computer systems.
Themes
In practice
Example use cases
This quote can be used in a cybersecurity training session to emphasize the importance of understanding the human factor in security.
More from Bruce Schneier
All quotes βThe whole notion of passwords is based on an oxymoron. The idea is to have a random string that is easy to remember. Unfortunately, if it's easy to remember, it's something nonrandom like 'Susan.' And if it's random, like 'r7U2*Qnp,' then it's not easy to remember.
This is not the internet the world needs, or the internet its creators envisioned. We need to take it back. And by we, I mean the engineering community.
It is poor civic hygiene to install technologies that could someday facilitate a police state.
You can't defend. You can't prevent. The only thing you can do is detect and respond.
Digital files cannot be made uncopyable, any more than water can be made not wet.
Similar quotes
Together, we could open up government and invite citizens in, while connecting all of America to 21st century broadband. We could use technology to help achieve universal health care, to reach for a clean energy future, and to ensure that young Americans can compete - and win - in the global economy.
Chess is far too complex to be definitively solved with any technology we can conceive of today. However, our looked-down-upon cousin, checkers, or draughts, suffered this fate quite recently thanks to the work of Jonathan Schaeffer at the University of Alberta and his unbeatable program Chinook.
Software is a great combination between artistry and engineering.
The Internet's abundance - of information, goods, tastes and sources of authority - creates unparalleled opportunities for individuals to get exactly what they want. But this plenitude threatens political and cultural authorities who believe in telling individuals what they can have rather than letting them choose for themselves.
Virtually every major technological advance in the history of the human species - back to the invention of stone tools and the domestication of fire - has been ethically ambiguous.
The rate of human invention is faster, and the rate of cultural loss is slower, in areas occupied by many competing societies with many individuals and in contact with societies elsewhere.