// Comparison

A Hacker's Mind vs Cyberjutsu: Which Should You Read?

Two cybersecurity books on Strategy, compared honestly: who each is for, what each does best, and which to read first.

Beginner

4/52023

How the Powerful Bend Society's Rules, and How to Bend Them Back

Bruce Schneier

Bruce Schneier extends the security-engineering frame of "hacking" to law, finance, politics, and tax: every rule-based system has exploitable seams, and the wealthy and powerful exploit them constantly.

Beginner

3/52021

Cyberjutsu

Cybersecurity for the Modern Ninja

Ben McCarty

Ben McCarty maps declassified medieval ninja scrolls onto modern adversary tradecraft. More analogy-driven than technical, useful for security-program framing.

Read this if

Security professionals who want to argue for security thinking outside computers, and policy-curious readers who already know Schneier's blog. The book makes vulnerability research, threat modeling, and patch dynamics legible to non-technical audiences in a way most authors cannot.

Security program managers and CISOs looking for non-technical framing for executive conversations. McCarty's analogies between feudal-Japan ninja tradecraft and modern adversary behaviour are unusual but practical for anchoring strategic discussions.

Skip this if

Readers looking for technical depth on cybersecurity itself. There is almost no code, no protocol detail, no incident dissection. The book is a generalization, not a primer; pair it with one of his earlier titles (Secrets and Lies, Liars and Outliers) if you want the security substrate.

Practitioners wanting technical depth or hands-on guidance. The book is metaphor-driven and conceptual; engineers and analysts will find the depth thin.

Key takeaways

Every system of rules has exploits; the question is who has the resources to find and use them, and law and finance are not exceptions.
Patch cycles, vulnerability disclosure, and threat models are the right lenses for analyzing tax loopholes, regulatory capture, and political process — and Schneier makes the analogy rigorous, not cute.
The asymmetry between attackers (power, money, time) and defenders (institutions, slow consensus) is the same in cyber as in policy; the book argues for governance designed around that asymmetry.

The ninja-vs-modern-adversary analogies hold up surprisingly well, particularly around deception, patience, and information operations.
The framing is most useful when explaining adversary thinking to non-technical executives; the chapters on deception and counter-intelligence are the strongest.
Treat the book as strategy-and-vocabulary scaffolding, not as technical training; its value is in framing decisions, not making them.

How they compare

We rate A Hacker's Mind higher (4/5 against 3/5 for Cyberjutsu). For most readers, that means A Hacker's Mind is the primary pick and Cyberjutsu is a useful follow-up.

Both books target beginner-level readers, so the choice is about topic, not difficulty.

A Hacker's Mind and Cyberjutsu both cover Strategy, Narrative, so reading them in sequence reinforces the same material from different angles.

Keep reading

A Hacker's Mind

→ Alternatives to A Hacker's Mind → What to read after A Hacker's Mind