is a --bruce schneier security technologist.s the e author of "data a and goliath: the hidden battles to cocollect your data and control your world." talk about your concerns today in the aftermath of the 2016 election. >> a lot of our voting machines are basically computers. especially computers without any paper audit trail or horrible to hacking -- vulnerable to hacking and errors in ways that cannot be corrected. my worry is we're going to happen election n where there is credible evividence of a hack ad we're literally not going to know the actual results and have no way to figure it out. and that, right now, , will be disaster for our system. amy: your concern is we're going to have an election. do you think we had one? >> my guess is no. it is interesting to watch these three states. amy: you mean pennsylvania,, wisconsin, and michigan? >> yes, those three states. there a are anomalilies in the results that seem to correlate with voting m machine types. that is a red flag for hacking. and something we should look at and w

i'm bruce schneier, a security technologist and while i've been a solution with both harvard and ibm, i'm not speaking for any of them am not sure they know i am here. [laughter] >> it's a secret. nobody on the internet knows either. [laughter] >> as the chairman pointed out, there are now computers and everything but a want is just another way of thinking about it and that everything is now a computer. this is not a folder this is a computer that makes phone calls, or refrigerators is addicted to keep things go. atm is a computer with money inside. your car is not a mechanical device. it's a computer with four wheels and an engine. this is the internet of things and this is what caused the ddos attack we are talking about. i come from the world of computer security, and that is now everything security. i want to give you four truths from my world that now apply to everything. first, attack is easier than defense. for whole bunch of reasons the one that matters here is that complexity is the worst thing as security. complex systems are hard to secure for an hour's worth of reasons. th

i'm bruce schneier. i am a security technology gist and while i have an affiliation with harvard and ibm, i am not speaking with any of them and i'm not sure they know i'm here. >> it's a secret. nobody on the internet knows either. >> as the chairman pointed out, there are now computers in everything, but i want to suggest another way of thinking about it, in that everything is now a computer. this is not a phone. this is a computer that making phone calls. or the refrigerator say computer that keeps things cold. an atm is a computer with machine inside. your car is not a mechanical device with computers, but a computer with four wheels and an engine. and this is the internet of things. and this is what caused the ddos attack we're talking about. i come from the world of computer security, and that is now everything security. so i want to give you four truths from my world that now apply to everything. first, attack is easier than defense. for a whole bunch of reasons. the one that matters here is that

bruce schneier and mr. kevin fu and mr. drew, what would it look like? iem giving you a blank slate. i think we need a new agency. the problem that we are going to have is that we can't have different rule rules if they hae fields or propellers or fixed phone calls or your body. that just isn't going to work. it's all computers and we have to figure out rules that are central. >> we have a continuing majority so i don't think they want to create an agency honestly don't this thing needs to get done. they don't like that stuff. new agencies and regulations, we are dead in the water but we can't leave this issue to be dead in the water. our country deserves much bett better. the risks are too great and the stakes are too high. nothing motivates the government into action like security and fear. 2001, we had the government, no regulation administration producing new federal agencies 44 days after the attacks. something similar happens and there is no cyber security expert that will say sure that could happen. i think that he will have a similar response. re

i'm bruce schneier, a security technologist, and while i have an affiliation with both harvard and ibm, i am not speaking for any of them and i'm not sure they know i'm here. >> it's a secret. nobody on the internet knows either. >> as the chairman pointed out, there are now computers in everything. but i want to suggest another way of thinking about it, in that everything is now a computer. this is not a phone. this is a computer that makes phone calls or a refrigerator's a computer that keeps things cold. an atm machine is a computer with money inside. your car is not a mechanical device with computers but a computer with four wheels and an engine, actually a computer distributed system with four wheels and an engine. this is the internet of things and this is what caused the ddos attack we're talking about. i come from the world of computer security, and that is now everything, security. so i want to give you four truths from my world that now apply to everything. first, attack is easier than defense. for a whole bunch of reasons, the one that matters here is that complexity is the

i'm bruce schneier. i am not speaking for harvard or ibm and not sure they know i'm he here. >> it's a secret. nobody on the internet knows either. >> as the chairman pointed out, there are notice computers in everything. but i want to give us another way of thinking about this. this is not a phone. this is a future that makes phone calls. or the refrigerator say computer that keeps things cold. an atm is a computer with machine inside. your car is not a mechanical device with computers, but a computer with four wheels and an engine. and this is the internet of things. and this is what caused the ddos attack we're talking about. i come from the world of computer security, and that is now everything security. so i want to give you four truths from my world that now apply to everything. first, attack is easier than defense. for a whole bunch of reasons, the one that matters here is that complexity is the worst enemy of security. complex systems are hard to secure for an hour's worth of reasons. and this is