What Examples of Security Theater Have You Encountered? 1114
swillden writes "Everyone who pays any attention at all to security, both computer security and 'meatspace' security, has heard the phrase Security Theater. For years I've paid close attention to security setups that I come in contact with, and tried to evaluate their real effectiveness vs their theatrical aspects. In the process I've found many examples of pure theater, but even more cases where the security was really a cover for another motive." swillden would like to know what you've encountered along these lines; read on for the rest of his question below.
swillden continues: "Recently, a neighbor uncovered a good example. He and his wife attended a local semi-pro baseball game where security guards were checking all bags for weapons. Since his wife carries a small pistol in her purse, they were concerned that there would be a problem. They decided to try anyway, and see if her concealed weapon permit satisfied the policy. The guard looked at her gun, said nothing and passed them in, then stopped the man behind them because he had beer and snacks in his bag. Park rules prohibit outside food. It's clear what the 'security' check was really about: improving park food vending revenues.
So, what examples of pure security theater have you noticed? Even more interesting, what examples of security-as-excuse have you seen?"
On the web side of things (Score:5, Interesting)
Library Self-Checkouts (Score:4, Interesting)
Of course, when the security alarms do go off at the library anyway, they just let the people walk out.
DIEBOLD (Score:1, Interesting)
Here's the movie that partially but convincingly explores how jacked up this situation is:
http://video.google.com/videoplay?docid=-4762159260759486531&ei=Fms8SKmYKJCEqgPTx4XjAw&hl=en
Back button on bank's web site (Score:5, Interesting)
When I called to report it, I was explained that I had to click their own back button, not mine. When I said "Yes, I know, I just wanted to let you know so that you can fix the bug sometime", the final answer was something like "It's by design. It's for security reasons". At that point I was expected to say "ok. thank you" or whatever, and to understand that a "bug" was totally unthinkable on their super-reliable ultra-secure blah blah bank site.
Nevertheless, a few months later, the bug was gone. I didn't call back to say I'm now worried about the security...
2002 Winter Olympics (Score:5, Interesting)
My favorite security theatric was an ATF agent standing on a street corner, machine gun in hand and in full combat gear. He was waving and smiling at people driving buy to be sure they all saw him and his gun. I stopped and watched him for about 20 minutes before he started using his radio while giving me the 'killer' eyes. Despite the smiling and waving, he was not friendly, not at all. I decided to vacate my vantage point. Those guys were so bored they were looking for targets to harass.
My experience with the TSA and Patriot Act (Score:5, Interesting)
I had some stock options through my job that I tried to cash through the etrade account that had been set up for me. The stock price was rather high, and our trading window was about to close, so I tried selling at literally the last minute. The sell order failed, and no reason was given. A few days later, I received a letter in the mail from etrade telling me that my account was locked. Several years before, while living in a different state, I had an etrade account. Because the SSN was the same on both accounts, but the addresses were totally different, some part of the Patriot Act made them lock my account until I could prove my identity by sending them a notarized copy of my social security card.
Another example, which isn't really security theater, just shitty work by the TSA happened to me a few years before that.
My wife had to fly out of state for a funeral, and she took our 6 month old daughter with her. I took them to the ticket counter. Since she was traveling with a baby, a car seat, and her carry on bag, the ticket agent offered to print me a pass that would allow me to accompany her to the gate and help her carry her things.
As I was getting up to the xray machines, I remembered that I had a small pocket knife in my pocket. I hadn't removed it since I wasn't expecting to go through security. As I got to the xray machine, I told the operator what had happened, and told her that I'd just go back through the line and put the knife out in our car.
She seemed ok with that, and told me that I could just go ahead and go through the xray machine, and out the exit that was just a few feet from the xray machine, so I didn't have to go back and work my way through the line.
As soon as I went through, several TSA agents came up and detained me for attempting to bring a weapon through the security checkpoint. I wound up being searched, my 6 month old daughter that I was holding was searched, and I was questioned for about an hour as to why I had tried to take a knife through security. Not once did they go talk to the lady running the xray machine less than 50 feet away, who had told me to go through.
In the end, my knife was confiscated (It was about a $50 knife), and I was threatened that I could be under arrest for attempting to smuggle a weapon through the airport, and I could be facing a several thousand dollar fine for it. They filled out a report, and made me immediately leave the terminal.
About a month later, I received a letter from the TSA saying that they had chosen not to fine me this time, but if I ever came up in their system again I would face the maximum penalties.
That was the day that I lost all faith in our government.
Guard Gates (Score:5, Interesting)
In a past life, I worked for a major aerospace company. Security appeared pretty tight, what with armed guards checking IDs at entry points. They also had manned checkpoints to check vehicle passes at the road entrances. These were usually issued to upper management, enabling them to park inside the fence, close to the buildings. The peons had to park outside and walk in.
Because of my job in various R&D labs, I was always hauling equipment around in my personal vehicle. There were provisions to issue employees in my position a temporary vehicle pass and a 'parcel pass', allowing us to transport company equipment through the gates.
Throughout my career, I was never ever challenged when exiting a facility with a hatchback, obviously loaded with expensive equipment. The vehicle pass system existed only to ensure that some scumbag grunt didn't park in a manager's space. Security guards were nothing more than glorified parking enforcement.
At some of the production facilities, gate guards were instructed to examine lunch boxes of the workers exiting to ensure that they were not swiping tools. Briefcases were exempt from such checks, as they were typically carried by trusted engineers and management. As most of the engineers working within production facilities were indistinguishable from mechanics by dress or any badge markings, I suppose it never occurred to security that a worker intent on swiping tools could obtain a briefcase.
Beyond security theater (Score:5, Interesting)
single-story building, in a suburb of a second-tier city. The building
sits on its own plot of land, on a hill, in an industrial-office-park
kind of area. The building is a lab, but it's mostly monitoring
equipment. It's not weapons, or explosives, or significant quantities
of chemicals.
This is probably not what anyone would consider a high-value target.
There's never been any kind of attack or threat against the building
or its personnel. But after 9-11, management started obsessing about
security.
The first thing they did was get armed guards for the building. Armed
guards did not make my friend feel secure. My friend wondered about
their training and worried about getting shot.
Guard duty is tough. It's hot in the summer and cold in the winter,
and the guards aren't in good condition to begin with, since they just
stand there all day and never get any exercise. In practice, the
guards spend most of their time sitting in their cars in front of the
building, with the engine running for heat or AC.
Management decided that this didn't look good, so they built a guard
shack along the right-hand side of the driveway. Now the guard sits in
the shack and watches the cars go by.
But that didn't seem very secure either--a bad guy could just drive
right by without stopping
(http://en.wikipedia.org/wiki/1983_Beirut_barracks_bombing).
So they added a gate, and spikes, and a card reader. To pass, an
employee stops at the gate, rolls down their window and swipes their
card. The gate goes up, the spikes retract, and they drive through.
My friend doesn't trust this system a bit, and makes a point of
watching to see that the spikes have retracted before driving over
them. There was speculation among the staff as to who would be the
first to blow out their tires on the spikes. As it happenes, it was
the mailman, followed some time later by two visitors who either
didn't see or didn't understand the signs warning against following
another vehicle through the gate.
I suggested that they stencil silhouettes of all the vehicles they've
caught on the guard shack, the way fighter pilots (used to?) record
kills on the nose of their airplanes.
My friend points out that even with a gate and spikes, the system only
protects against attackers who
- care about their tires, and
- don't have trucks
because any vehicle can blow through the gate and make it the short
distance to the building on four flat tires, and any truck can drive
over the curb and avoid the whole thing.
Management decided that blowing out their visitors' tires was
unfriendly, so they instituted a new procedure for passing the gate.
Now, drivers stop at the gate and roll down their window. The guard
walks from the shack (on the right), in front of the car, to the card
reader (on the left), takes the driver's card, swipes it, and returns
it to the driver. Then the driver can pass.
The staff considered that the guards were now at risk of being run
over--and it happened. An employee reached down in his car to get his
card, his foot came off the brake, and the car rolled forward into the
guard. The guard was taken to hospital--I don't think the injuries
were too serious. The driver has to appear in court and pay fines--I
don't know if it is criminal or civil.
This is beyond security theater. This is real damage.
In the post-9/11 hysteria (Score:2, Interesting)
Thus making people wonder "what's so important behind that door?
The security guard on the early shift was the most frail ancient person I have ever seen in a uniform, but dammit, we were doing something. Or at least being seen to do something, which is just as good.
Crossing back into US from Canada... (Score:5, Interesting)
To help put this in context: I'm a ham radio operator, as well as a volunteer first-responder. I've had formal training, through our city's fire department, in disaster relief, emergency medical procedures, basic search-and-rescue, the whole bit.
Because of the above, our minivan is well-equipped for emergencies. I've installed multiple communication radios, a navigation computer, and I carry a medical trauma kit and various safety gear such as flares and a reflective vest. Besides the small antenna farm on the roof, I also have a light bar mounted on the back end (amber, red, clear... same as many tow trucks).
Every bit of it is legal under the road laws of every state except New York (I know, because I spent a couple of long nights going through said laws to make bloody sure!). Couple all that with the fact that I work for our state's police agency (non-commissioned, civil service).
Now, with all the above in mind -- Last year, we're coming back through on Sunday afternoon. I normally have the radios and navigation system on while driving, and this has never, in times past, been an issue.
Not this year. The border guard we drew seemed to be short on both sleep and temper, and rudely ordered me to turn EVERYthing off before he would even talk to us. One of the questions he asked, after that point, was who I worked for. When I told him, he said (snappily) that, for that reason alone, I should understand why he'd told me to turn everything off.
He let us move on at that point, but before I took off I told him, flat out, "No, I don't understand."
And it was the honest truth! If someone's going to try and set off something that goes bang via radio, or other wireless means, it strikes me that they're going to go to considerable effort to keep such activities hidden. They certainly would not do so in a hugely-long border-crossing line, where there was absolutely no way to move anywhere but through the guard posts, in a minivan that stands out like a solar flare and has ham radio callsign plates to boot!
I have no clear idea why this guard was so nasty, or what bizarre purpose his attitude served. I will say that it did indeed strike me as pure theater.
The only thing I can think of is that, perhaps, his sergeant or lieutenant was observing him at the time, and we didn't notice...?
Keep the peace(es).
Re:Joint account (Score:3, Interesting)
I also met a woman named "Joshua" once. I wonder if she gets hassled by people who don't believe she is who she is.
Re:Nom nom nom (Score:5, Interesting)
Ironically, jokes don't have to be funny to be a joke, it just helps.
You on the other hand need to buy a life, and you might want to pick up a side of sense of humor with the change.
"it is not funny because they are using technical terms in an incorrect way that detracts from their intention."
There are many comics that do that with their humor, you might even want to say that it's the unexpected use of definition that makes it fucking funny, dumbass.
I'm sorry, that was harsh~
Fake Camera (Score:5, Interesting)
The office had a second door with a peep hole into the laundry. To give the camera an air of legitimacy, she sat in the office one night and made a note of everyone who came into the laundry. When they came in to pay their rent the next week, she mentioned that she saw them doing their laundry on the "tape" and asked about a fictitious mess that was left.
She managed to do this to a couple of the complex gossips, and never had a problem in there again.
NJ Army National Guard (Score:5, Interesting)
We were deployed twice to protect Port Authority facilities around NY and NJ. On both deployment we had our weapons M16A2s or pistols. On our second deployment we were not given ammunition. Yes, we were walking around in uniforms holding empty rifles.
The best we could do is radio the Port Authority Police or possible club someone trying to steal our weapons. Our combat effectiveness was slightly above that of Nerf.
Email Confidentiality Notices (Score:2, Interesting)
If I put a confidentiality notice on a postcard, is there a reasonable expectation of privacy?
Comment removed (Score:4, Interesting)
Airport Security & Mystery Liquids (Score:5, Interesting)
A bit about those three items. Both the shaving cream and deodorant were in aerosol cans, both larger than the size allowed, but obviously retail items. The mouthwash was too large as well, and was a generic amber bottle, about 14 or so ounces, with a prescription sticker (I have gingivitis).
I pull all three items out, and just tell the TSA guy that I know I need to toss them. He glances at all three and tells me I have to ditch the deodorant and the shaving cream, but I can keep the mouthwash.
Because it's prescription.
So, the two retail aerosol cans that are nearly impossible to inject anything into are verboten, but the amber bottle with the mystery liquid in it, that's okay, because it has a sticker with a Walgreens logo on it. Fan-fucking-tastic.
Re:The Iraq theater (Score:1, Interesting)
Nice comeback, but please try harder next time!
Re:The Iraq theater (Score:4, Interesting)
I don't see wave after wave of people trying to storm our beaches, rape our infidel women or blow up idolatrous symbols of capitalistic greed over here.
The only reason "they" are relevant any more is that "they" are today's Commie Pinko Red Bastards.
"They" are a useful scare tactic, and that's it. I might care once they start killing more people over here than amount that die to three wheeled volkswagen eurkel-mobile collisions.
Re:Oh Sure (Score:2, Interesting)
Actually, studies do show a definite increase in suicide with gun ownership (seems obvious). Some studies have found the likelihood of being murdered also increases. I'm not aware of any studies that indicate owning a gun in the US actually improves ones safety, but I don't really care enough to do that much research.
Citations:
The association between the purchase of a handgun and homicide or suicide. [ajph.org]
Does Owning a Firearm Increase or Decrease the Risk of Death? [guncite.com]
Owning a gun doesn't change the likelihood of a home invasion. It does change the likelihood of mistaking oneself for Jack Bauer while the sad truth is that most of us are more akin to Gomer Pile.
Most everything done since the 9/11 attacks. (Score:2, Interesting)
FAA pilot on the do not fly list. (Score:5, Interesting)
So here I am, not only taking my shoes off, but also being escorted to the back room for the "enhanced" security check every time I fly on an airliner. The only problem is that I'm an FAA-licensed pilot, and have all the clearance to enter just about any area of the airport! (once I get past the extended searchdown, that is)
What a joke...
TSA of course... (Score:1, Interesting)
Re:Exteneded Validation Certificates (Score:3, Interesting)
Now that you can get an SSL cert set up inside of 10 minutes that means absolutely nothing (You can even get one for free), they had to create the stupid EV system to go back and make sure that there would be an easy way for the end users to tell the difference. You know what is funny though? The vendors examine you less when getting an EV certificate now than they did to get an SSL certificate 10 years ago.
Re:Disneyland (Score:3, Interesting)
Three years ago I spent a few months in Ecuador and brought home some 21-inch machetes as gifts for my brothers. I arrived back in the UK on the 7th July 2005, the same day that some bombs went off in the London Underground.
A week or two later I went down to visit my parents by train, passing through London. One of my brothers was also going to visit them, so we arranged to meet on the train. I took a train in to London, arriving in the early afternoon, took the Tube to Victoria, and boarded the train to my parents' town.
Chatting to my brother, I discovered that he'd had his bag searched by police when he got on the Tube that morning, and they'd found a 2-inch penknife he'd forgotten he was carrying and told him off. I hadn't passed through any checkpoint with the machetes, though, because they wrapped up at noon.
Re:Shortly after 9/11 (Score:4, Interesting)
Re:NJ Army National Guard (Score:4, Interesting)
Remind me of a friends story while in China. His friend, who was Chinese, was driving down this shortcut and in front of him was the very professional, and heavily armed Chinese soldier standing in the way. He decided to just drive around him and my friend started to freak out and asked him, "what the hell was he doing, he could have gotten them killed!" His friends reply was, 'oh they don't give them any bullets!"
Re:FAA pilot on the do not fly list. (Score:3, Interesting)
I have no problem identifying myself with my FAA pilot's license, and even tried to show that to security once. If anything, it annoyed the guard and I got a more thorough checkout! (WTF?)
What's odd is that I could go across the street from the commercial terminal to the General Aviation terminal AT THE SAME !@## AIRPORT and identify myself with my state driving license and pilot license, and then DRIVE MY VAN OUT ON THE TARMAC to load up my plane!
All after identifying myself, that is, which I'd much rather do than watch some condescending guard pull on yet another pair of blue surgical gloves. (Seriously, why do they wear these things? It's not like they give me a rectal exam...)
Seriously, when you fly private, it's a whole different ball of wax...
Re:CORRELATION DOES NOT EQUAL CAUSATION (Score:2, Interesting)
I think the scenario is that some burglar breaks in to steal your goodies, you try to be Rambo and it turns out he's a better shot. Another possibility is the lover's quarrel that escalates to murder in the heat of the moment. Or if you have a concealed weapon in our purse and it gets snatched, you just armed the thief. Come on, I'm sure you can think a few ways that having a gun could backfire, so to speak.
Who said I was against gun ownership? I was amused by the call for a citation that didn't include one, so I Googled a couple. I should have said "some studies show," although I did try to make my lack of expertise clear. I don't really care if people own guns, and as a matter of fact I support the 2nd amendment given the current reality. But I think it is just as dishonest to assume that guns are an equally good idea for all households. If you live in a low crime area, have children, etc. it's is perfectly possible that you are safer not to have a loaded gun lying around. And if it's not loaded and easily accessible it loses a lot of the home protection value.
You are right about correlation and causation, but when making decisions you've got to start somewhere.
Disney World (Score:3, Interesting)
Hehe. One of the incidents that prompted me to ask this question was my own experience at Disney World two weeks ago.
The friendly security guard carefully looked through my backpack, even making me pull the cover off my camera to check that it wasn't dangerous, and then passed us on in. So the only thing the guard was keeping out was weapons in bags. Weapons carried on the body sail right in.
As someone who frequently (and legally) carries a gun hidden on my body, the situation just made me shake my head.
Re:The Iraq theater (Score:3, Interesting)
And if there were American troops marching through Glasgow, I'd be shooting at them too. Learn to leave when you've outstayed your welcome.
Box cutters in the airport (Score:2, Interesting)
So, I'm at the airport, ready to board an international flight with that same backpack. To their credit, the security checkpoint found the thing, but what do you think they did? Nothing! No taking down names and numbers, no "Why don't you have a seat over there?"--nothing. They just threw it in a big red bucket with, among other things, at least two other bright orange box cutters.
Now, seeing as how I was just trying to get to Frankfurt in one piece and that it was an honest mistake, they did the right thing. But what other than "security theater" can you call it if you've set up the infrastructure to catch box cutter-wielding hijackers (whether that's a threat or not), and you just let folks on after anonymously checking their cutlery.
Re:Fingerprint scanners (Score:5, Interesting)
Re:On the web side of things (Score:4, Interesting)
Also on the web side of things, a friend of someone I don't even know was working for a government department where certain officers with very high legal responsibility where given access to the network over the internet using an extremely locked down remote desktop type of product. These officers were given the access so they could review important and often highly sensitive files at home. Just to be clear, these officers are also cleared to take the material home on paper, so giving them this kind of access is not really a problem.
The hole in the the system was that the secure remote desktop type product allowed them to deny certain types of access and the policy forbade the ability to print on the officer's local printers. This was to prevent the leaking of sensitive information in case the officer was burgled, or perhaps to keep the log files neater. Most likely to look good to their bosses by applying strict security measures.
One day in a meeting on security for an unrelated project this friend of someone I have never even met used this as an example to illustrate the difference between reality and theatre by pointing out that these officers had taken to emailing sensitive documents to hotmail accounts (!!!!), then downloading them and printing them at home. You wouldn't call the colours of their anglo faces white on receiving this information, more a dull silvery grey.
The following week it was announced that these officers would be allowed to print on local computers when logged into the network. The friend of someone I have no idea about also got a generally more pragmatic approach to security for at least three weeks!
Re:Oh Sure (Score:2, Interesting)
1) Havent killed myself with my own gun yet.
2) Have successfully run out someone breaking into my apartment with that useless gun of mine (did not shoot him, I dont shoot people in the back when they are running away from me)
3) have had two similar experiences out on the street, where (thanks to my concealed carry license) a quick disclosure than I was prepared and equipped to respond with lethal force made the situation very nonviolent very fast once they realized I was not a tourist (I'm a british citizen living in the US).
Oh, and I work as an infosec consultant, so sorry, but your little hoplophobic insertion into the commentstream falls very flat here.
NEXT!
Re:The Iraq theater (Score:1, Interesting)
So instead of dying we have at least another 6,000 people with both arms and both legs blown off, blinded and deaf. Their heads horribly burned. It is the worst living hell you can imagine.
Just so that the politicians can say that only 6,000 American soldiers have died.
Re:WOD == price support (Score:2, Interesting)
Just over half the price of a pack of smokes is government taxes of some sort or another, they make gobs of cash from your addiction.
While basic economics tells us that outlawing something only makes a black market for it, the add on to that would be 'legalizing something lets you tax it'.
While we piss billions down the drain that is the war on drugs we also create a multi billion dollar multi-national black market and organized crime to go with it, with all the subsequent violence that goes with criminal groups fighting each other. Making drugs illegal gives drug dealers an incentive to operate, theres profit in selling drugs, A LOT of profit. Doubly so since theres no pesky regulatory boards you have to keep happy. FDA approval means shit to a drug lord.
So we spend billions trying to stop them, while drug lords make billions, and the much touted war on drugs never nabs anybody really important.
If it was all legalized and regulated (driving drunk is a crime, so to would driving high be, obviously) we'd cut the knees out from under organized crime, and see violent, drug related crimes vanish.
Of coruse that would actually accomplish something useful, and we cant have that because then you lose political leverage, alas.
Re:WOD == price support (Score:3, Interesting)
High School Parking Lot (Score:3, Interesting)
At the local High School, here in rural south Georgia where just about everybody has a pickup that could scale Mt. Everest without so much as breaking a sweat, the parking lot is in the middle of a field whose elevation change can be measured in microns. Just an island of asphalt with a sea of grass lapping at its black beaches. There one two-lane asphalt road leading up to the parking lot, similarly drenched in fields.
There is no seawall, no fence, no border of any sort. Except where the road meets the lot, however. Here there is a small aluminum swinging gate which is faithfully unlocked and opened half an hour before school starts and ends, and locked back half an hour before school starts and after school ends.
It is there, of course, to keep students from skipping class by driving off campus...
Re:The blinking red light (Score:3, Interesting)
All anyone I know thinks when they hear a car alarm is thoughts of destruction imposed on the owner of said car. Hell most people would be GLAD to have the car stolen so that it would go away and shut the fuck up.
There's a reason cities are starting to ban car alarms - they are just annoying and serve little to no useful purpose whatsoever.
Re:Fingerprint scanners (Score:5, Interesting)
This English-language article [heise.de] at Heise Online gives all of the gory details...
Re:Frist Posty? (Score:4, Interesting)
Airports are pure Security Theater. The checks are far from perfect but all the hassle and the absurd details (shoes in the carry-on scanner, the stupid small liquid bottles etc.) make for a great show. They really doesn't do much but it's cumbersome and annoying so it must be really efficient...
The facts are that you can make bomb that can down a jetliner with less than 200ml of liquid, you can hijack a jetliner (then kill the pilots and fly the plane into a building or two) using materials that would not show up on any of the current scans.
If you work at an airport you can place as many big bombs in the cargo hold as you like because the security is all shell and no depth, and the shell has holes... the background checks are shallow (journalists with simple fake identities have been able to get jobs at airports with full access to otherwise secured areas) and does not take into account neither 'sleeper agents' nor sudden radicalization post check.
So yes, airports are one of the worst cases of Security Theater.
Re:NJ Army National Guard (Score:3, Interesting)
I could forgive this lack of training in US security immediately after 9/11, but it has now been seven years and they still aren't trained. I blame the NG commanders who are clearly incompetent and don't think it's important to get real and appropriate training for their men, and I also blame Homeland Security who are trying to do security on the cheap by not establishing a professional and highly trained security force. Farce.
Re:The blinking red light (Score:3, Interesting)
The best deterrent is to drive a used car with no real resale value and park next to expensive cars.
Re:Frist Posty? (Score:2, Interesting)
You cannot buy any local beverages and take with you because they will most likely break due to the low temperatures in the luggage compartment if you put it in the checked in luggage, and if you put it in the hand luggage security will throw it away.
This means that if people want to take liquor etc. home they will have to buy it at the last connecting airport thus increasing revenue. Also all airports on the way (plus airlines that sell beverages on board) will recieve extra income from water sales etc.
So instead of buying a cheap and good champagne locally in France for instance, you are forced to buy an expensive non-local champagne in the airport.
And the really cool twist: We are doing it for security, so you - the traveller - must pay for all the security checks through your ticket and airport tax costs!