Bruce Schneier On Airport Security

the4thdimension writes "Bruce Schneier has an opinion piece on CNN this morning that illustrates his view on airport security. Given that he has several books on security, his opinion carries some weight. In the article, Bruce discusses the rarity of terrorism, the pitfalls of security theater, and the actual difficulty surrounding improving security. What are your thoughts? Do you think that we can actually make air travel (and any other kind of travel, for that matter) truly secure?"

Comments

Re:Uh No

[Rei]

We do all of these stupid things to pretend to have security that even the most brain-dead terrorist could work around.

Can't bring liquids on board? Sure, but you can bring freeze-dried watermelon that you've reconstituted with a liquid of your choice onboard. Any sort of saturated porous or fibrous solid is fine. You can bring any sort of solid hydrate with you, too. Heck, on my way back from Christmas, I realized that I had reusable heat packs in my pockets, and that those were liquid. To keep them? I simply activated them so that they crystalized (releasing heat). Bam -- they're no longer liquids. But they're the exact same stuff.

Can't bring knives on board? Heck, I had a freaking dull garden spade confiscated from me, as though I was going to hijack a plane with a dull spade. But you can sure as heck bring a glass or ceramic plate or other such object and break it into long, heavy, surgically-sharp shards in a cloth towel. You can also bring any sort of electronics or other devices with you whose internal frame components are made of long, sharp pieces of metal. Even if you personally sharpened them.

Do they think terrorists are retarded? Do they think that they can't figure this sort of stuff out? No, they'd rather just put on this "Security Theatre" and inconvenience millions upon millions of travelers for no damned reason.

If they actually cared about security, it would be obvious: the approach to dealing with threats would be proactive, not reactive. It wouldn't be a case of, "someone tried to blow up a plane with shoes? Everyone has to take their shoes off". Taking shoes off would come before someone tried it. Same with liquids and all of these other ridiculous regulations. They're just trying to pretend that they're on top of it, when what they're doing isn't helping anyone. It's just making flying a pain in the arse.

One of these days, when I have enough time before a plane flight, I'm going to follow the letter of the rules while showing off (in a non-threatening manner) how easily they can be worked around: by attempting to cook a full four-course meal onboard a plane during the flight from my coach seat ;) Electric or allowed-chemical heat (no flames), minimal cook times, liquids pre-stored in dehydrated food or reconstituted from powders and water-fountain water past the security checkpoint, etc.

Can we make Air Travel Secure?

[Afforess]

The answer: No.

The sooner most people grow and learn that "Shit Happens (tm)" and that no one can every prepare for every eventuality, the better. The "Security Theatre" is just a new opening for corrupt politicans and power-hungry individuals to remove more freedom from people.

Benjamin Franklin said it best when he said "Any society that would give up a little liberty to gain a little security will deserve neither and lose both."

Weighing Opinions

[flaming error]

> Given that he has several books on security, his opinion carries some weight.

One would hope that experts be judged by quality rather than quantity.

Bruce Schneier has earned street cred in the industry over many years of work. He knows security top-to-bottom, cryptography to psychology to economy.

Once in a while some media outlets decide to air an actual competent professional instead of a fud-mongering buffoon, and people in the industry send them to Bruce.

Bruce is only pointing out the obvious. . . .

[Salgak1]

. . .simply, that as far as the TSA and similar efforts go, the Emperor not only has no clothes, nobody ever remotely NEAR him has a stitch on. About the only people doing airline security right are the Israelis, and their model only works because of the relatively limited scope of El Al's operations. The Christmas Day "panty bombing" showed cascade failures in the intelligence and investigation systems that are the only effective methods of defense against terrorism. In a RATIONAL world, **one** terrorism flag (i.e. one-way ticket, buying with cash, no luggage, watch list, etc) would yield pulling the passenger aside and "enhanced investigation": two flags, and the person is getting a very thorough body and luggage search, and three or more flags, it's grab the latex gloves, because it's a strip-search and fine-tooth comb search through luggage and posessions. But, alas, because some people don't bother checking, or reporting (assuming it's their job to do so. . .) in a timely matter, really obvious cases are allowed to pass, and the aftermath of Enhanced Security Theater does nothing but inconvenience the public, and potentially cause so much noise as to effectively mask any REAL events or dry-runs in progress. . .

Re:Uh No

[Red Flayer]

If they actually cared about security, it would be obvious: the approach to dealing with threats would be proactive, not reactive. It wouldn't be a case of, "someone tried to blow up a plane with shoes? Everyone has to take their shoes off". Taking shoes off would come before someone tried it. Same with liquids and all of these other ridiculous regulations. They're just trying to pretend that they're on top of it, when what they're doing isn't helping anyone. It's just making flying a pain in the arse.

I think you missed Schneier's point, if you RTFA.

The approach to dealing with threats should be intelligence gathering, our criminal justice system, and resilience in response to successful attacks.

A proactive approach that you suggest would require listing possible attack vectors, then taking action to prevent each of them. Carried to its logical conclusion, we'd all have to board planes naked (you could strangle someone with the elastic band from your underwear!), or even restrained (hands are weapons too!) in order to prevent terrorist actions on planes.

It's simply unreasonable to take that kind of preventative action.

In truth, (and one of Schneier's points), we cannot realistically defend against all attack vectors. To try to do so is pointless, except that it gives people a feeling of security. True defense against terrorism isn't served by reactive restrictions, nor by proactive restrictions -- unless they absolutely limit our ability to conduct regular tasks.

You're right, though, what they're doing isn't helping and is a royal pain in the ass. But the solution is not to become proactive in travel restrictions. It's most of what Schneier wrote in the piece.

Re:Uh No

[nodwick]

One of these days, when I have enough time before a plane flight, I'm going to follow the letter of the rules while showing off (in a non-threatening manner) how easily they can be worked around

You don't even have to work around the list of things you can't carry on board; items on the list get missed all the time. Jeffrey Goldberg of the Atlantic had an article from last year detailing all the things he's managed to sneak onto planes, including pocketknives, matches from hotels in Beirut and Peshawar, cigarette lighters, nail clippers, bottles of Fiji Water, and box cutters. He's even brought two cans' worth of beer through security by wearing a Beerbelly under his clothes and walking it through the metal detector. And this in spite of the fact that he was selected for secondary inspection at the time he was wearing it.

He's also tried forging and printing out his own boarding pass (with help from Bruce Schneier) and getting through security with it, with similar results:

I would try to pass through security with no ID, a fake boarding pass, and an Osama bin Laden T-shirt under my coat. I splashed water on my face to mimic sweat, put on a coat (it was a summer day), hid my driver's license, and approached security with a bogus boarding pass that Schneier had made for me. I told the document checker at security that I had lost my identification but was hoping I would still be able to make my flight. He said I'd have to speak to a supervisor. The supervisor arrived; he looked smart, unfortunately. I was starting to get genuinely nervous, which I hoped would generate incriminating micro-expressions. "I can't find my driver's license," I said. I showed him my fake boarding pass. "I need to get to Washington quickly," I added. He asked me if I had any other identification. I showed him a credit card with my name on it, a library card, and a health-insurance card. "Nothing else?" he asked.

"No," I said.

"You should really travel with a second picture ID, you know."

"Yes, sir," I said.

"All right, you can go," he said, pointing me to the X-ray line. "But let this be a lesson for you."

because planes are the only potential target...

[bigbigbison]

Let's say that we make airline flights 100% terrorist proof. Then what? Simple, the terrorists move on to bombing other things. Can you imaging the panic that would happen if they bombed a large high school graduation? There are a nearly infinite number of potential targets for terrorists and it is impossible to secure them all.

Re:no

[Bigjeff5]

The real TSA screeners are not the highschoold dropout instructing you to remove your shoes.

In most airports, there is nobody filling that role except the highschool dropout telling you to remove your shoes. If you think there is some hidden screener out there who is REALLY keeping you safe, you are sadly mistaken. There might be a very small number of airports that do this, but even so most people would be able to slip by anyway. Act bored and you win. They won't spot a thing.

It is pretty trivial to get knives past TSA, unless you are being honest about it. A friend of mine accidentally brought a boxcutter (the kind that can extend out to a 4-5" blade) through at least six TSA screenings, and he had simply put it in a pocket and forgotten about it. How's that for security?

You can get explosive rope these days, if you're clever you could probably sneak a half pound of the rope and another four or five pounds of standard plastics on board in a suitcase and nobody would be the wiser. You could do some major damage with that combo. The guy who got caught recently was just dumb as shit, and didn't know what the hell he was doing, and he STILL got explosives past security. They make you stay seated for the last hour and a half of an international flight now, but so what? The guy lit the bomb off in his chair anyway, what's the "remain seated" bullshit supposed to stop?

If you look at what happened on 9/11, the main problem was our attitude about hijackings at the time. Hijackings were supposed to be about ransoming for cash, not blowing up a target, so the standard procedure was do whatever the hijackers say and wait till it is over. Now, standard procedure is subdue the hijacker as soon as possible. Had that been done on 9/11 the news would have been about how 19 hijackers were thwarted in an attempt to hijack four airplanes, and a few passengers were injured in the process. That new policy is what protects us in the sky now, not any of the bullshit security theater which is absolutely worthless at catching all but the most basic and obvious weapons. People see someone with a weapon now, they won't hesitate any more - that guy is going down in a hurry. 9/11 would not happen again today and the TSA has nothing to with that at all.

It's all designed to make us feel safer, since the folks in the know realize they can't actually make us any safer. What we were doing before is as good as what we are doing now as far as airport screenings, the only real changes that can be made are in the background, with inteligence agencings tracking suspected terrorists and such. TSA is just the government saying "Look! aren't you glad we're making you so safe?"