"The user's going to pick dancing pigs over security every time"
About this Quote
Schneier’s line lands like a bleak punchline for anyone who’s ever tried to sell “responsible” tech to a room that just wants the app to feel fun. “Dancing pigs” is doing heavy work: it’s not just frivolity, it’s spectacle engineered to be irresistible. The phrase drags product design into the barnyard, implying that much of what passes for innovation is trained entertainment - cute, performative, and ultimately dumb. Security, by contrast, is invisible when it works. It offers fewer dopamine hits, no braggy screenshots, no viral delight. So it predictably loses.
The intent isn’t to mock users as idiots so much as to indict the system that recruits their attention. Schneier has spent decades arguing that security is a property of ecosystems, incentives, and institutions, not individual virtue. This quote compresses that worldview: if the market rewards engagement and speed-to-market, products will ship dancing pigs, and security will be framed as a tax - a drag on growth, a friction point in onboarding, a reason someone abandons a checkout page.
The subtext is uncomfortable: we keep pretending security failures are exceptions or technical missteps, when they’re often the logical outcome of what companies optimize for. It’s also a warning to security professionals. If your pitch sounds like scolding or homework, you’ve already lost. The only way security competes is by becoming boringly default - built in, automated, and subsidized by regulation, liability, or design that makes the safer choice the easiest one.
The intent isn’t to mock users as idiots so much as to indict the system that recruits their attention. Schneier has spent decades arguing that security is a property of ecosystems, incentives, and institutions, not individual virtue. This quote compresses that worldview: if the market rewards engagement and speed-to-market, products will ship dancing pigs, and security will be framed as a tax - a drag on growth, a friction point in onboarding, a reason someone abandons a checkout page.
The subtext is uncomfortable: we keep pretending security failures are exceptions or technical missteps, when they’re often the logical outcome of what companies optimize for. It’s also a warning to security professionals. If your pitch sounds like scolding or homework, you’ve already lost. The only way security competes is by becoming boringly default - built in, automated, and subsidized by regulation, liability, or design that makes the safer choice the easiest one.
Quote Details
| Topic | Privacy & Cybersecurity |
|---|
More Quotes by Bruce
Add to List







