Slashdot Log In
What Examples of Security Theater Have You Encountered?
Posted by
timothy
on Wed May 28, 2008 03:47 PM
from the kip-hawley-please-to-the-white-courtesy-phone dept.
from the kip-hawley-please-to-the-white-courtesy-phone dept.
swillden writes "Everyone who pays any attention at all to security, both computer security and 'meatspace' security, has heard the phrase Security Theater. For years I've paid close attention to security setups that I come in contact with, and tried to evaluate their real effectiveness vs their theatrical aspects. In the process I've found many examples of pure theater, but even more cases where the security was really a cover for another motive." swillden would like to know what you've encountered along these lines; read on for the rest of his question below.
swillden continues: "Recently, a neighbor uncovered a good example. He and his wife attended a local semi-pro baseball game where security guards were checking all bags for weapons. Since his wife carries a small pistol in her purse, they were concerned that there would be a problem. They decided to try anyway, and see if her concealed weapon permit satisfied the policy. The guard looked at her gun, said nothing and passed them in, then stopped the man behind them because he had beer and snacks in his bag. Park rules prohibit outside food. It's clear what the 'security' check was really about: improving park food vending revenues.
So, what examples of pure security theater have you noticed? Even more interesting, what examples of security-as-excuse have you seen?"
So, what examples of pure security theater have you noticed? Even more interesting, what examples of security-as-excuse have you seen?"
Related Stories
This discussion has been archived.
No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
Full
Abbreviated
Hidden
Loading... please wait.
Frist Posty? (Score:5, Insightful)
Nom nom nom (Score:5, Funny)
Re:Nom nom nom (Score:5, Interesting)
Ironically, jokes don't have to be funny to be a joke, it just helps.
You on the other hand need to buy a life, and you might want to pick up a side of sense of humor with the change.
"it is not funny because they are using technical terms in an incorrect way that detracts from their intention."
There are many comics that do that with their humor, you might even want to say that it's the unexpected use of definition that makes it fucking funny, dumbass.
I'm sorry, that was harsh~
Parent
Re:Nom nom nom (Score:5, Funny)
Some guidelines:
1. Never describe anything as "epic", especially if followed by the word win or loss.
2. Use decent grammar, punctuation, and spelling.
3. Conceal all enthusiasm under a smug nerdiness.
Parent
Re:Nom nom nom (Score:5, Funny)
Yet you're still going on about it.....
You might find this picture instructive [kairosnews.org].
Parent
The Iraq theater (Score:5, Insightful)
Re:The Iraq theater (Score:5, Insightful)
Parent
Re:The Iraq theater (Score:5, Insightful)
During my time spent in the middle east (all of which took place before 9/11) I saw... drumroll please... people who wanted to kill Americans. WHAT? DURING CLINTON?? Yes. We are not the 'cause' of these insurgents, and no matter how much you hate Bush for whatever you think it is he has done, or how much you want to blame him for the problems he inherited (from, IMO, the dem president that preceded him), he didn't make them either.
The very boring and undramatic truth of the matter is, there are always people who will capitalize on the loss or misgivings of a group of people, and people of the Middle East happen to be the latest target. Arafat did it with the PLO (which has NOTHING to do with liberating Palestinians, and has everything with creating a power base), and the same thing is happening now around Iraq.
So about "the sure thing is, there weren't insurgents": this rhetoric may work on your bleeding heart girlfriend, and probably works on many here on Slashdot, but don't try flinging that nonsense around vets, govt employees, or anyone else who has actually tried to DO something about these issues. It may sell books or commercial time on news channels, but it doesn't make any sense.
Just my 2c
Parent
Re:The Iraq theater (Score:5, Insightful)
Here were people that hated a country, and wanted it to die and suffer, but they just said that all the time. One wrong action, and those people actually started taking up arms, bombings, etc. There is a big difference between wanting American's killed, and actually trying to kill Americans. He wondered how many people we moved from Haters to Terrorists in Iraq.
Think about it for a minute. You may hate a person you don't like, and wish that they were dead. How much would it take to push you to the point that you actually murder them?
Parent
Re:The Iraq theater (Score:5, Insightful)
There were, in fact, people in the Middle East who really dislike America. Heck, 9/11 wouldn't have happened if that weren't the case.
However, you have to understand that this is at least in part due to American action. Our most egregious action was probably propping up the Shah in Iran. America has a history of using both deceit and pure muscle to get its way in the Middle East, and that has created a lot of enemies. Enemies that were there prior to Iraq.
Our invasion in Iraq certainly didn't help things. It flared up old angers that had, in some areas, begun to die out. It brought our men within striking range. It shouldn't be any kind of surprise that this situation creates insurgents. Our invasion of Iraq strengthens the political position of our enemies; their claims about America seem to be confirmed, and it helps stokes the fears that cause people to flock to such causes.
You have to look at this historically. People in the ME don't hate the US because of our freedom. They hate the US because of how we've treated them in the past.
(It is, of course, more complicated than that, but this is a Slashdot comment.)
Parent
Re:The Iraq theater (Score:5, Insightful)
So, using that accepted common concept, there are only insurgents if they are rebelling VS the government. So of course when the government is corrupt those that are corrupt aren't the insurgents. Hussein was a bad man, Hitler was a bad man, the funny thing is though, the same people who lament that our government didn't do anything about Hitler until it involved the US (who killed his own people and invaded other countries) are the same people who think that we shouldn't go after Hussein (who killed his own people and invaded other countries).
Parent
Re:The Iraq theater (Score:5, Insightful)
Insurging against you in their own backyard?
You're not strange, your colonialism is of all ages.
Parent
Re:The Iraq theater (Score:5, Insightful)
And yet you are here? Why aren't you killing insurgents in their backyard? Maybe because it does not feel all that safe after all...
Parent
FAA pilot on the do not fly list. (Score:5, Interesting)
So here I am, not only taking my shoes off, but also being escorted to the back room for the "enhanced" security check every time I fly on an airliner. The only problem is that I'm an FAA-licensed pilot, and have all the clearance to enter just about any area of the airport! (once I get past the extended searchdown, that is)
What a joke...
Parent
Re:The Iraq theater (Score:5, Insightful)
The reason that America hasn't been subsequently attacked had nothing to do with punishing the silly, stupid Taleban in Afghanistan, or fomenting a war in Iraq. The perps were a group calling themselves Al Qaeda, and they haven't been touched. They were weak, tiny, and extremely clever; they got past security in NE airports, then were successful in three crashes, while the fourth dive bombed in Pennsylvania. This was not a million man army with nukes, just some very clever people. They subsequently disrupted transportation in Spain, where people were murdered, and also in the UK, where others were murdered.
No subsequent acts have occurred for any number of reasons, almost none of which have to do with the wars, as the wars were about pride and oil. This has nothing to do with US Dept of Homeland Security, which is an oxymoron.
Fight the bastards when they try to impinge on your privacy and your liberty. Question authority. Do so politely. Then let the judges kick them in the tender parts. That's their job. Do it again, repeat until you're free, because today, you're not.
Parent
On the web side of things (Score:5, Interesting)
Re:On the web side of things (Score:5, Insightful)
We created a delete function, and kept getting reports that the customer accidentally deleted records. (And we had no undelete function.) So we added a "Are you sure?" dialog.
The incidents of accidental deletion did not go down.
So we added text "This cannot be undone. Continue?" and still the incidents did not go down (People just randomly click OK.)
Finally we changed it to "Please key in 'irreversible' to continue with the deletion." This solved the problem.
Parent
Re:On the web side of things (Score:5, Insightful)
Parent
Exteneded Validation Certificates (Score:5, Insightful)
Oh, I forgot, they are in collusion with Microsoft and other CA's to inflate the cost of digital certificates they already issue.
Apartment Accepting Packages (Score:5, Insightful)
After September 11th, the apartment management sent out a memo to all residents that because of the heightened state of terrorism awareness the office would no longer allow packages to be held there for the residents.
Of course my first thought was they were just tired of dealing with the packages and saw this as a convenient excuse to stop holding packages for people.
Disneyland (Score:5, Funny)
Re:Disneyland (Score:5, Funny)
Parent
Oh Sure (Score:5, Insightful)
In my opinion almost all forms of random searches are security theater.
People putting loaded handguns in their homes in the case of a wood-be assailant or robber breaking in. This is not only security theater, it increases the risk you are putting yourself and your family in. Not to mention that in most instances of murder the victim knew the assailant. You're more likely to die of suicide than a robber killing you.
I don't know if these are examples where the security theater is a cover for another reason--unlikely. But there's clearly examples where it just makes your life worse more often than better.
Re:Oh Sure (Score:5, Funny)
And since they're a group of them, desperate enough to mangle or kill you, they certainly all have weapons. And given the situation, the weapons in question are certainly assault rifles. And they're not stupid, just desperate, so they'll rely on strength in numbers, attacking by the hundreds. At this point, having arranged a group of hundreds of heavily armed men, they pretty much have to murder you. This is why I feel much safer keeping a loaded M1 Abrams in my bedroom.
Parent
MIT ITS passwords, and Microsoft File Servers (Score:5, Insightful)
Back in ArpaNet days, MIT had machines running an OS called ITS. It was a friendly and happy world and there were user accounts but no passwords. But networking means that strangers can connect and so Arpa insisted that passwords be added. So the ITS developers added a password prompt that ignored the password, and this made the Arpa people happy for a while until they figured it out and made them actually check the password.
In a similar vein, Microsoft file server passwords were originally checked only on the client, a fact which went undiscovered until Samba came along.
Re:MIT ITS passwords, and Microsoft File Servers (Score:5, Informative)
It wasn't just Microsoft. NFS at one point in my life was synonymous with "no fucking security". It trusted the UserID that you transmitted with it. UserID 0 was a handy value to use...
Parent
Wireless Security (Score:5, Funny)
It's probably worth pointing out he wasn't aware you could "secure" a wireless point with a basic WPA key at least - it was completely open, anyone could walk right in, assuming they beat the fear of the "virus" that was.
Re:Wireless Security (Score:5, Funny)
Parent
Shortly after 9/11 (Score:5, Funny)
They held it up triumphantly and shouted at me, "Just what do you expect to do with this?!"
I wanted to ask them them the same question back. Just what did they expect I'd do with that? In a building that had security guards with guns? Was I going to hijack the building and crash it into a plane?
Re:Shortly after 9/11 (Score:5, Funny)
Parent
Re:Shortly after 9/11 (Score:5, Funny)
Parent
Back button on bank's web site (Score:5, Interesting)
When I called to report it, I was explained that I had to click their own back button, not mine. When I said "Yes, I know, I just wanted to let you know so that you can fix the bug sometime", the final answer was something like "It's by design. It's for security reasons". At that point I was expected to say "ok. thank you" or whatever, and to understand that a "bug" was totally unthinkable on their super-reliable ultra-secure blah blah bank site.
Nevertheless, a few months later, the bug was gone. I didn't call back to say I'm now worried about the security...
Nice Article (Score:5, Insightful)
The RFID bracelets on an infant can give comfort to the parents but its more of a deterrent then anything. Sure the hospital can tell the parents that their child is protected. But the hospital is not protecting the child as much as its protecting itself. For example:
A guard that is in the bank is not there to stop a bank from being robbed. He deters people from committing the crime itself. In a robbery situation the guard himself is useless because the individual or individuals robbing a bank would take him out first. But in most bank robberies, the criminals are going to go after a bank without a guard anyway.
A mall guard doesn't stop people from stealing, he creates the presence of being watched, therefor deterring people from stealing.
Same goes with cameras in stores. Most of the time no one is monitoring the cameras and if anything their used to watch employees over customers. But their deterring employees from doing anything unethical or illegal and they deter people from stealing.
In my opinion the idea of security theater and feeling safe is crap. You might as well spend the time and effort to know your safe then make it seem like you feel like your safe.
The entire war on drugs (Score:5, Insightful)
What's worst is that we've been fighting this war for decades, no end is in sight, we've spent more money and lost more freedoms fighting it than we have in Iraq. And still, no one in power has the balls to speak out against this.
We live in a sick, sad world. People who would meet the non-violent act of drug use with the violent acts of arrest and imprisonment are themselves violent criminals. Yet in this society they are deemed good citizens.
WOD == price support (Score:5, Insightful)
It also helps politicians pander to ignorant members of the right.
Parent
My fave (Score:5, Insightful)
rj
Re:My fave (Score:5, Insightful)
Parent
Re:My fave (Score:5, Insightful)
Parent
Passwords (Score:5, Informative)
Password Policy (Score:5, Funny)
2002 Winter Olympics (Score:5, Interesting)
My favorite security theatric was an ATF agent standing on a street corner, machine gun in hand and in full combat gear. He was waving and smiling at people driving buy to be sure they all saw him and his gun. I stopped and watched him for about 20 minutes before he started using his radio while giving me the 'killer' eyes. Despite the smiling and waving, he was not friendly, not at all. I decided to vacate my vantage point. Those guys were so bored they were looking for targets to harass.
My experience with the TSA and Patriot Act (Score:5, Interesting)
I had some stock options through my job that I tried to cash through the etrade account that had been set up for me. The stock price was rather high, and our trading window was about to close, so I tried selling at literally the last minute. The sell order failed, and no reason was given. A few days later, I received a letter in the mail from etrade telling me that my account was locked. Several years before, while living in a different state, I had an etrade account. Because the SSN was the same on both accounts, but the addresses were totally different, some part of the Patriot Act made them lock my account until I could prove my identity by sending them a notarized copy of my social security card.
Another example, which isn't really security theater, just shitty work by the TSA happened to me a few years before that.
My wife had to fly out of state for a funeral, and she took our 6 month old daughter with her. I took them to the ticket counter. Since she was traveling with a baby, a car seat, and her carry on bag, the ticket agent offered to print me a pass that would allow me to accompany her to the gate and help her carry her things.
As I was getting up to the xray machines, I remembered that I had a small pocket knife in my pocket. I hadn't removed it since I wasn't expecting to go through security. As I got to the xray machine, I told the operator what had happened, and told her that I'd just go back through the line and put the knife out in our car.
She seemed ok with that, and told me that I could just go ahead and go through the xray machine, and out the exit that was just a few feet from the xray machine, so I didn't have to go back and work my way through the line.
As soon as I went through, several TSA agents came up and detained me for attempting to bring a weapon through the security checkpoint. I wound up being searched, my 6 month old daughter that I was holding was searched, and I was questioned for about an hour as to why I had tried to take a knife through security. Not once did they go talk to the lady running the xray machine less than 50 feet away, who had told me to go through.
In the end, my knife was confiscated (It was about a $50 knife), and I was threatened that I could be under arrest for attempting to smuggle a weapon through the airport, and I could be facing a several thousand dollar fine for it. They filled out a report, and made me immediately leave the terminal.
About a month later, I received a letter from the TSA saying that they had chosen not to fine me this time, but if I ever came up in their system again I would face the maximum penalties.
That was the day that I lost all faith in our government.
Guard Gates (Score:5, Interesting)
In a past life, I worked for a major aerospace company. Security appeared pretty tight, what with armed guards checking IDs at entry points. They also had manned checkpoints to check vehicle passes at the road entrances. These were usually issued to upper management, enabling them to park inside the fence, close to the buildings. The peons had to park outside and walk in.
Because of my job in various R&D labs, I was always hauling equipment around in my personal vehicle. There were provisions to issue employees in my position a temporary vehicle pass and a 'parcel pass', allowing us to transport company equipment through the gates.
Throughout my career, I was never ever challenged when exiting a facility with a hatchback, obviously loaded with expensive equipment. The vehicle pass system existed only to ensure that some scumbag grunt didn't park in a manager's space. Security guards were nothing more than glorified parking enforcement.
At some of the production facilities, gate guards were instructed to examine lunch boxes of the workers exiting to ensure that they were not swiping tools. Briefcases were exempt from such checks, as they were typically carried by trusted engineers and management. As most of the engineers working within production facilities were indistinguishable from mechanics by dress or any badge markings, I suppose it never occurred to security that a worker intent on swiping tools could obtain a briefcase.
Joint account (Score:5, Funny)
The other person wasn't available... so I just said "Ok, hold on I'll get him." Then waited a few seconds and said "Hi. Yes, I'm he. Yes I confirm the transfer."
They transferred the money. No authentication, no double-checks. Just some voice on a phone (I didn't even bother faking a different-sounding voice) saying that it was ok.
Beyond security theater (Score:5, Interesting)
single-story building, in a suburb of a second-tier city. The building
sits on its own plot of land, on a hill, in an industrial-office-park
kind of area. The building is a lab, but it's mostly monitoring
equipment. It's not weapons, or explosives, or significant quantities
of chemicals.
This is probably not what anyone would consider a high-value target.
There's never been any kind of attack or threat against the building
or its personnel. But after 9-11, management started obsessing about
security.
The first thing they did was get armed guards for the building. Armed
guards did not make my friend feel secure. My friend wondered about
their training and worried about getting shot.
Guard duty is tough. It's hot in the summer and cold in the winter,
and the guards aren't in good condition to begin with, since they just
stand there all day and never get any exercise. In practice, the
guards spend most of their time sitting in their cars in front of the
building, with the engine running for heat or AC.
Management decided that this didn't look good, so they built a guard
shack along the right-hand side of the driveway. Now the guard sits in
the shack and watches the cars go by.
But that didn't seem very secure either--a bad guy could just drive
right by without stopping
(http://en.wikipedia.org/wiki/1983_Beirut_barracks_bombing).
So they added a gate, and spikes, and a card reader. To pass, an
employee stops at the gate, rolls down their window and swipes their
card. The gate goes up, the spikes retract, and they drive through.
My friend doesn't trust this system a bit, and makes a point of
watching to see that the spikes have retracted before driving over
them. There was speculation among the staff as to who would be the
first to blow out their tires on the spikes. As it happenes, it was
the mailman, followed some time later by two visitors who either
didn't see or didn't understand the signs warning against following
another vehicle through the gate.
I suggested that they stencil silhouettes of all the vehicles they've
caught on the guard shack, the way fighter pilots (used to?) record
kills on the nose of their airplanes.
My friend points out that even with a gate and spikes, the system only
protects against attackers who
- care about their tires, and
- don't have trucks
because any vehicle can blow through the gate and make it the short
distance to the building on four flat tires, and any truck can drive
over the curb and avoid the whole thing.
Management decided that blowing out their visitors' tires was
unfriendly, so they instituted a new procedure for passing the gate.
Now, drivers stop at the gate and roll down their window. The guard
walks from the shack (on the right), in front of the car, to the card
reader (on the left), takes the driver's card, swipes it, and returns
it to the driver. Then the driver can pass.
The staff considered that the guards were now at risk of being run
over--and it happened. An employee reached down in his car to get his
card, his foot came off the brake, and the car rolled forward into the
guard. The guard was taken to hospital--I don't think the injuries
were too serious. The driver has to appear in court and pay fines--I
don't know if it is criminal or civil.
This is beyond security theater. This is real damage.
Crossing back into US from Canada... (Score:5, Interesting)
To help put this in context: I'm a ham radio operator, as well as a volunteer first-responder. I've had formal training, through our city's fire department, in disaster relief, emergency medical procedures, basic search-and-rescue, the whole bit.
Because of the above, our minivan is well-equipped for emergencies. I've installed multiple communication radios, a navigation computer, and I carry a medical trauma kit and various safety gear such as flares and a reflective vest. Besides the small antenna farm on the roof, I also have a light bar mounted on the back end (amber, red, clear... same as many tow trucks).
Every bit of it is legal under the road laws of every state except New York (I know, because I spent a couple of long nights going through said laws to make bloody sure!). Couple all that with the fact that I work for our state's police agency (non-commissioned, civil service).
Now, with all the above in mind -- Last year, we're coming back through on Sunday afternoon. I normally have the radios and navigation system on while driving, and this has never, in times past, been an issue.
Not this year. The border guard we drew seemed to be short on both sleep and temper, and rudely ordered me to turn EVERYthing off before he would even talk to us. One of the questions he asked, after that point, was who I worked for. When I told him, he said (snappily) that, for that reason alone, I should understand why he'd told me to turn everything off.
He let us move on at that point, but before I took off I told him, flat out, "No, I don't understand."
And it was the honest truth! If someone's going to try and set off something that goes bang via radio, or other wireless means, it strikes me that they're going to go to considerable effort to keep such activities hidden. They certainly would not do so in a hugely-long border-crossing line, where there was absolutely no way to move anywhere but through the guard posts, in a minivan that stands out like a solar flare and has ham radio callsign plates to boot!
I have no clear idea why this guard was so nasty, or what bizarre purpose his attitude served. I will say that it did indeed strike me as pure theater.
The only thing I can think of is that, perhaps, his sergeant or lieutenant was observing him at the time, and we didn't notice...?
Keep the peace(es).
Fake Camera (Score:5, Interesting)
The office had a second door with a peep hole into the laundry. To give the camera an air of legitimacy, she sat in the office one night and made a note of everyone who came into the laundry. When they came in to pay their rent the next week, she mentioned that she saw them doing their laundry on the "tape" and asked about a fictitious mess that was left.
She managed to do this to a couple of the complex gossips, and never had a problem in there again.
NJ Army National Guard (Score:5, Interesting)
We were deployed twice to protect Port Authority facilities around NY and NJ. On both deployment we had our weapons M16A2s or pistols. On our second deployment we were not given ammunition. Yes, we were walking around in uniforms holding empty rifles.
The best we could do is radio the Port Authority Police or possible club someone trying to steal our weapons. Our combat effectiveness was slightly above that of Nerf.
Airport Security & Mystery Liquids (Score:5, Interesting)
A bit about those three items. Both the shaving cream and deodorant were in aerosol cans, both larger than the size allowed, but obviously retail items. The mouthwash was too large as well, and was a generic amber bottle, about 14 or so ounces, with a prescription sticker (I have gingivitis).
I pull all three items out, and just tell the TSA guy that I know I need to toss them. He glances at all three and tells me I have to ditch the deodorant and the shaving cream, but I can keep the mouthwash.
Because it's prescription.
So, the two retail aerosol cans that are nearly impossible to inject anything into are verboten, but the amber bottle with the mystery liquid in it, that's okay, because it has a sticker with a Walgreens logo on it. Fan-fucking-tastic.
Re:I've been a part of the theatre. (Score:5, Funny)
Parent