秘密与谎言

Hacker News 上怎么说

• jamess · 2008 年

  ……就因为这个，我见过太多软硬件产品在安全方面彻底烂透了。如果你对这个领域感兴趣，我建议先去读读那本经典的入门读物《Secrets and Lies》。(http://www.schneier.com/book-sandl.html) 在这个领域里，可没人会惯着你边工作边现学。

  …many software and hardware products I've seen that are completely broken security wise thanks to this. If you're interested in the field, I'd suggest starting by reading the canonical introductory text, Secrets and Lies .(http://www.schneier.com/book-sandl.html) This is not a field anyone is going to thank you if you want to learn on the job.

• belorn · 2013 年

  ……跟2012年装了 Ubuntu 的服务器相比，可以说是差了十万八千里。你根本找不到任何 Schneier 提倡装默认防火墙的文章。我建议去看看 Schneier 写的《Secrets and Lies》，因为里面讲得很清楚，防火墙需要针对能够识别出的具体威胁来进行配置。如果你连威胁都识别不了，那防火墙很可能压根就毫无用处，……

  …about as far from a server installed with ubuntu in 2012 that one can get. You are not going to find any such article by Schneier promoting default firewall installations. I suggest here to check out Secrets and Lies by Schneier, as it is rather clear that a firewall need to be configured against the specific threats one can identify. If you fail at identifying threats, the firewall is likely not be useful at all,…

• citrin_ru · 2021 年

  除了其他评论里列出的特定语言资源外，我还推荐读一下 Bruce Schneier 的《Secrets & Lies》，篇幅不长而且通俗易懂，适合作为数字安全领域的通识入门。

  Aside from language specific resource listed in other comments I recommend to read Secrets & Lies by Bruce Schneier as a small and easy to read introduction to digital security in general.

• tmerse · 2026 年

  试试这本书：《Bad Blood: Secrets and Lies in a Silicon Valley Startup》

  Try the book: Bad Blood: Secrets and Lies in a Silicon Valley Startup

• larrys · 2012 年

  看了他的个人简介，我把他那一长串的资历精简成了这几条：- 写了畅销书《Applied Cryptography》- 写了《Secrets and Lies》（不是畅销书）- 写了《Beyond Fear》- 写了《Schneier on Security》- 每月发布一份 newsletter- bt.com 的首席安全官（CSO）。其余个人简介见：http://www.schneier.com/about.html……

  From his bio, I would reduce his mile long credentials to the following: - wrote a best seller "applied cryptography" - wrote "secrets and lies" (not a best seller) - wrote "beyond fear" - wrote "schneier on security" - publishes a monthly newsletter - chief security officer of bt.com The rest of the bio: http://www.schneier.com/about.html…

• david_shaw · 2012 年

  我今天看到另一则新闻，说的是法官裁定嗅探开放 Wi-Fi 网络不算窃听。[1] 如果这个先例被套用到其他类似领域，其影响可能是深远的： - 平民如果看重自己的隐私，现在得自己负责安全了吗？ - 这是否推翻了刑法中的“未经授权的网络访问”？ - 管理员会不会

  I saw a different story today about a judge's ruling that sniffing open Wi-Fi networks is not considered a wiretap.[1] The implications therein could be far-reaching, should this precedent be applied to other, similar areas: - Are civilians now responsible for their own security if they value their privacy? - Does this overrule "unauthorized network access" in the criminal code? - Would an adm

正在加载完整评论……