// Comparison
Fancy Bear Goes Phishing vs How Cybersecurity Really Works: Which Should You Read?
Two cybersecurity books on Foundations, compared honestly: who each is for, what each does best, and which to read first.
The Dark History of the Information Age, in Five Extraordinary Hacks
Scott J. Shapiro
Five famous hacks used as a way into the deeper question of why software is insecure at all, written by a Yale law professor who learned to code to write it. More a history and theory of vulnerability than a how-to.
Sam Grubb's gentle, exercise-driven introduction for non-specialists who need a working mental model of attacker behaviour and basic defence.
Read this if
Skip this if
Key takeaways
- Insecurity is not a series of accidents but a structural property of how general-purpose computers and the industry around them are built.
- The famous hacks are interesting less for their cleverness than for what they reveal about incentives, law, and human nature.
- Treating hacking as purely a technical problem misses the legal and economic machinery that keeps it profitable.
- The chapter on threat modeling for individuals (not companies) is the one most teachers steal from: how to think about your own digital risk.
- The hands-on labs at the end of each chapter make the book usable for actual classroom teaching, not just self-study.
- Strikes the rare balance between respects-the-reader and explains-what-an-IP-address-is. Most beginner books fail one or the other.
How they compare
Fancy Bear Goes Phishing and How Cybersecurity Really Works are both rated 4/5 in our catalog. Pick by topic preference and reading style rather than by rating.
Both books target beginner-level readers, so the choice is about topic, not difficulty.
Fancy Bear Goes Phishing and How Cybersecurity Really Works both cover Foundations, so reading them in sequence reinforces the same material from different angles.
Keep reading
Fancy Bear Goes Phishing
→ Alternatives to Fancy Bear Goes Phishing→ What to read after Fancy Bear Goes PhishingHow Cybersecurity Really Works
→ Alternatives to How Cybersecurity Really Works→ What to read after How Cybersecurity Really Works