Aviation Security Debate: Bruce Schneier V. Kip Hawley (Former TSA Boss)
Fluffeh writes "A nice summary at TechDirt brings word that Bruce Schneier has been debating Kip Hawley, former boss of the TSA, over at the Economist. Bruce has been providing facts, analysis and some amazing statistics throughout the debate, and it makes for very educational reading. Because of the format, the former TSA administrator is compelled to respond. Quoting: 'He wants us to trust that a 400-ml bottle of liquid is dangerous, but transferring it to four 100-ml bottles magically makes it safe. He wants us to trust that the butter knives given to first-class passengers are nevertheless too dangerous to be taken through a security checkpoint. He wants us to trust that there's a reason to confiscate a cupcake (Las Vegas), a 3-inch plastic toy gun (London Gatwick), a purse with an embroidered gun on it (Norfolk, VA), a T-shirt with a picture of a gun on it (London Heathrow) and a plastic lightsaber that's really a flashlight with a long cone on top (Dallas/Fort Worth).""
This is too funny ....
-1 Not Funny
+1 Sad
There's no limit to the amoung of thermite you can carry on, and no limit to the amount of calcium carbide.
Just to name two.
Lacking <sarcasm> tags,
For congress, and they were, as usual, too spineless to tell the TSA to take a hike. After all, it's congress who spent all that money to line Chertoff's pockets (guess who makes the useless scanners now), and they didn't want to look bad for it - hearings are just photo-ops for the next election, to give the appearance of "doing something" when of course, the only thing going on is bribes and blackmail. Ever notice how DHS gets every excessive dime they ask for? Well, I know if I had warrantess wiretaps and all that kind of thing, the first thing I'd do is get the dirt on congress for future blackmail. This would occur to any bureaucrat in a few seconds. So you have to assume that's why these agencies never get seriously questioned about their ridiculous antics and waste, eh?
Why guess when you can know? Measure!
(from http://www.economist.com/debate/days/view/823)
Adam Barnes
March 30, 2012
Adam Barnes
Our debate has now ended and those supporting the motion—that changes made to airport security since 9/11 have done more harm than good—have won handsomely. ...
Voters have roundly declared that the frustrations, the delays, the loss of liberty and the increase in fear that characterize their interactions with airport-security procedures vastly outweigh the good these procedures achieve. For some, indeed, the benefits are essentially non-existent: any sensible terrorist can find a work-around or choose a different point of attack, as Bruce Schneier explains. And so the widely expressed hope is that changes made to security in the (near) future will make the whole regime less reactive, more rational, more flexible and more intelligence-driven. The results of this debate suggest that these changes should be made with some urgency: passengers are angry.
Schneier sent the Kipster off, wearing his arse like a hat.
Too bad that the "reality-based community" is attached to persuasive argument, reason and evidence. Those are now the desperate hopes of the powerless.
You see, they'll be doing whatever they want to you, anyways.
"Flyin' in just a sweet place,
Never been known to fail..."
They're in the business of making passengers feel safe. Passengers like that. They'll gladly suffer through free prostate exams if it means they can sit comfortably on the flight, believing they won't be one of the next set of 9/11 martyrs.
And it's a popular product: Look at how many people fly. If people didn't like the product, they wouldn't buy it. So whenever someone says "Ah! They're taking away their civil liberties!" ... Well, yes, but that's no worse than you forcing your own beliefs on them that they shouldn't be able to buy free prostate exams.
At the end of the day, you can only be responsible for your own behavior: These people aren't being forced to board a plane at gunpoint. They wllingly accept what the TSA is doing, regardless of whether or not it is necessary.
If you want the situation to change: Don't fly. Let the airplanes rust in their hangars. Let the corporations go bankrupt one by one. The TSA is only allowed to live by the patronage of the passengers. No passengers = No TSA.
#fuckbeta #iamslashdot #dicemustdie
It's clearly ineffective, but never mind that: we don't have the money for it. In case we haven't noticed, we're spending 1 point some odd TRILLION more every year than we take in.
Unfortunately, like most large bureaucracies, the TSA is self sustaining. It work hard to justify itself, despite never having caught a single terrorist in its entire existence. Replicate that to hundreds of other useless federal agencies, and you have a government that far overstepped the bounds of what it's supposed to be for, and now exists to give jobs to the phone sanitizers (RIP, DA) of our country.
Yet Americans will cheerfully keep voting for Republicrats, no matter what they do, so I guess the TSA is what we deserve. You get the government you deserve, they always say.
I cannot speak for others, but I have stopped flying. Period. Instead we drive where the distance is reasonable and simply don't go many places we once went. So the argument that 'people are flying anyway, the security theater must be ok' is weak as the number flying might be much higher. Not that airports have the capacity for more air travel anyway...
Kip was a decent boss at Skyway, too bad they didn't say 'No' to the jerks who bought out the company and ran it into the ground, while skimming money off the top, every stinking month.
A feeling of having made the same mistake before: Deja Foobar
Thermite makes a wonderful toothpaste...
Actually, by itself it's a powder mix. It's convenient to add a liquid binder to make a paste for easy application but it can also be pressed with any of several other binders into any number of solid forms. Plaques, for instance, to be awarded at a conference. Carry on 20 kg of award plaques and Security might ask to see them but they won't blink at you carrying them on. The rest is obvious to any sophomore engineering student.
And TSA knows about these [1], but since there's no practical way to screen for them they just hope that the Bad Guys are too stupid to bother with a sure-fire way to remove planes from the sky.
[1] And many, many others. Ask a sophomore engineering class to come up with methods and you can have hundreds. Fortunately, Bad Guys are never geeks.
Lacking <sarcasm> tags,
a T-shirt with a picture of a gun on it
TSA agents are probably on a level with mall cops. Or lower. Some analyst probably evaluated the possibility of taking over an airliner with a fake gun. One way to slip a fake gun onto an airplane would be to make a cardboard replica that could be folded flat. With a couple of photos of a real gun affixed to the sides, and a terrorist waving it and screaming and the flight crew could be fooled. So a regulation was created to prohibit photos of guns. Now, if you explained that to a logical person, they could easily distinguish between a t-shirt print and a full sized side view of a semi-auto. TSA agents aren't hired for their judgment, but for their ability to follow rules. Simple rules. So the rule 'no pictures of guns' will be interpreted literally. And this will cover everything, including an image of Elmer Fudd with his double barreled shotgun.
Have gnu, will travel.
(Not that that list was anything but a mental list, nevertheless)
I live in switzerland, and for the last three years I've traveled to america every year for a conference. This year I decided to go to a european conference instead, for the sole reason of TSA, Security Theater and having to essentially waive all my rights(!) just to be allowed to enter the country.
While I'm only one person, flying only once per year to america, I wonder how many others did the same.
Your sarcasmometer is overdue for calibration.
Lacking <sarcasm> tags,
I present to you the TSA VIPR program.
Note how it consists of some Mall Ninja acronym/name, like the murderous "Fast and the Furious" program put on by the justice department and ATF clowns.
The reason I suggest it might not be too late is because they pissed off Amtrak by molesting train passengers (leaving the train, no less), and were banned from Amtrak property for a while (still?).
So, at least a government-sponsored entity is willing to tell these jack-booted thugs to go pound sand.
Alcohol, Tobacco and Firearms should be the name of a store, not a government agency.
The TSA guy said that by preventing terrorists from using complicated liquid explosives, they have to move to more exotic explosives. Ignoring the very porous security perimeter of an airport (many tons of airline parts and supplies are trucked in every day, there's no way to inspect everything), what's going to keep a dedicated terrorist from using old fashioned C4 explosive hidden in an obvious body cavity. I've seen enough internet porn to know that with proper training and motivation, a quite sizeable chunk of explosives could be hidden within the body. With surgical help and no desire to stay alive for more than 12 hours, I suspect that even larger portions of explosives could be hidden within the body.
...if the TSA's security theater operations were stopped today, and instead turned back over to the contractors that did it before 9/11?
How much response or visibility would we have over things if Wackenhut (now known as G4S. The spinoff detentions company is GEO Group), Academi (fka Blackwater, Xe, et al) , and other "security" contractors were doing what the TSA does now? Wasn't the previous way of doing airport security before the TSA with the airports contracting the job out to private security companies pretty much discredited? It did seem like good fodder for the local investigative journalists to "probe" airport security regularly (e.g., get weapons past passenger security check points, etc), in my case it was Seattle TV stations and Sea-Tac International... along with the occasional story of extra searches going off the rails, etc.
And we want to go back to the old way?
Why don't we just acknowledge that airport security is security theater. Maybe the theater is necessary to some degree (keeping honest people honest). But maybe we also need to acknowledge all it has really done is move the previous point of disaster from planes to the security check-ins. And hasn't done anything about security risks at the ticketing area.
You have not seen VIPR (Visible Intermodal Prevention and Response) teams in your local subway station. I have. The TSA and Department of Homeland Security are about to metastasize throughout the country in every form of transportation, including your private car. Yes, they're planning to do random traffic stops.
You know, when I was a kid during the Cold War one of the reasons we were the good guys and the Russians weren't was because here you could travel whereever you wanted throughout the land without once being asked, "Show me your papers, Comrade."
There are a lot of Americans who remember those times, too. Many of them are heavily armed. The TSA and Department of Homeland Security had better consider very carefully that they are on the brink of provoking an armed citizen response to their overreach.
Do what you can, with what you have, where you are.
He's doing a marvelous job of systematically shredding the bullshit that the TSA is trying to sell.
-jcr
The only title of honor that a tyrant can grant is "Enemy of the State."
. . . surgical help and no desire to stay alive for more than 12 hours . . .
There have been a number of stories about TSA getting very curious about fresh surgical scars.
Woman (to Churchill): "Sir, you are drunk!"
Churchill: "Madam, you are ugly! And tomorrow morning, I shall be sober!"
"The first time I got drunk, I got married. The second time I bought a chimpanzee, after that I stayed sober" Arian Seid
I suspect that even larger portions of explosives could be hidden within the body.
Prior art waiting to become reality.
Just one step up from the 'suicide jackets' in use today....
... the airports are federal territory and staffed by state police. That is currently being changed so federal police (USA: think FBI) manage security. And all international airports recently had body scanners installed.
. . . surgical help and no desire to stay alive for more than 12 hours . . .
There have been a number of stories about TSA getting very curious about fresh surgical scars.
I've never had to disrobe for a TSA scan, how would they even know I have a fresh sugical scar?
> more intelligence-driven
An Israeli expert suggested separating risk assessment from implementation. A simple organizational change, but it would mean that the TSA could no longer expand its empire by exaggerating risks.
normally would not use the term "dumbass"..
The amount of economic damage from one talcum powder bomb in a chip fab says you are looking at the wrong metrics for what terrorism hopes to accomplish.
-- Terry
We have just launched a brand new low cost product called Hydra Control Freak. After persistent troubles over a few years in and around my property my home evolved system was getting pretty good and I decided it would be great to commercialise it. It's not well known yet as the first production run was finished just before Christmas and we are not a large company. Our focus is on proactive early warning video alerting and then flexible real world responses initiated from your smart phone. The idea is that several sensors placed around your property alert you via SMS (Or E-mail if you refer) with links allowing you to see video of what triggered the sensor (It records before the trigger event to ensure this) and provides for very flexible real world response from smart phone buttons.
We aim to provide extremely fast alert verification (A few seconds of the breaching of a sensor you will already be viewing the video stream [MJPG or a Pseudo MJPG stream for Android and other phones]) and your real world response can be very flexible as we support a flexible range of third party output devices. Currently, we support Phidget 4, 8 and 16 port I/O devices for input and output events and responses as well as the cm15a X10 Controller. We aim to support the RFXCOM transceiver shortly as well which will add support to a wide range of home automation products. For sensor input it's best to use quality professional PIRs. For Europe we support a quality sensor from an Italian company called CST Europa that breaks out it's wireless sensors (Multi tech PIR, Microwave, PIR, curtain and door sensors) into a relay box which you can then wire into the Phidget inputs. These have a great range. If you have enough repeaters you can get some milage out of X10 PIRs such as MS13 as well, but their range is not great. Or you can wire in sensors, this gives you a lot of choice, such as PIRs, trip beams etc. By triggering both home automation devices as well as custom I/O you can do things such as trip flood lights and set off alarms before the intruder has entered your home.
Everything about our device is about flexibility and interoperability. You can create pages of custom buttons and then link up those buttons to any manner of events by the gui driven event processor. Some of the output events can be used to add "state" then affects whether other events can fire or not. This state can also have a time to live so you can create actions that must happen without periods of time. In this way for example by using two PIRs you can easily make an alert that triggers on incoming movement (Approximately) but not out going. You would make the one sensor add some state with a short time to live, that like a firewall allows you to walk past the second sensor without triggering the alert. The other way around would immediately send the alert. That sort of thing is easy to do with HCF
Clustering and video slices : Each device can record approx 3-4 video streams depending on the resolution but they can communicate with each other regarding events recording across multiple devices but registering to the same event to the millisecond. There is a view builder page that allows you to build up views or slices across your freaks that line up events that relate to the same trigger. This is automatic, you add the credentials and details of the other freaks in your cluster and when you build your view it queries the cluster partners to see what cameras it has available and alters the selection gui so you can choose between multiple freaks for your current view (Which can also restrict time of day range and event names).
Full HTTPS: The devices comes with a gui-driven trust manager that supports the generation of self signed certificates or the importing of CA signed certificate chains.
WebM: I think ours is the first security device that supports the open WebM format. Please contact me if you know of another, I've not seen one yet.
Scheduled events: You can setup flexible daily events with the same level of flexibility on what th
what's going to keep a dedicated terrorist from using old fashioned C4 explosive hidden in an obvious body cavity. I've seen enough internet porn to know that with proper training and motivation, a quite sizeable chunk of explosives could be hidden within the body
Al Queda apparently also watches internet porn. They've already tried this attack against a saudi prince (head of counter terrorism in Saudi).
If the attacker in that case had had the sense to use a lavatory and extract the bomb (or turn the right way) the attack would most likely have been successful.
But you're right. Since there's no reasonable way to defend against this attack, we're all just ignoring it and pretending it doesn't exist. The reason we haven't seen it used against an airliner is that there just aren't enough terrorists to be worth screening for. (Intelligence and god old fashioned police work, yes. Screening at air ports, not so much.
Stefan Axelsson
Why would a terrorist bent on making bloody mayhem even bother with forging an ID? He could just wander into the crowd of people waiting for the security theater ritual. There's a far higher density of people there than you get on a plane, and it would certainly get just as much press as bringing a plane down.
Of course, there's another thing that Bruce is too polite to mention about the security theater is that its actual purpose is to compel the public to make a conspicuous show of obedience to arbitrary, useless, and idiotic authority figures. They might as well just demand a stiff-arm salute and a heel click in the direction of a photo of the Godlike Leader Whom We All Love Or Else.
-jcr
The only title of honor that a tyrant can grant is "Enemy of the State."
The TSA guy said that by preventing terrorists from using complicated liquid explosives,
Instead the "terrorists" dump their explosives in the garbage can next to the security line.
You either treat that bottle of water as a bomb, and dispose of it properly. Or you let me take it on the plane.
I actually flew with a swiss knife in my handluggage. United flight from Frankfurt, Germany to Washington DC (IAD). I was checked twice in Frankfurt (by Germans and Americans), the knife got entangled in a plastic cover for a notebook .... didnt catch attention (parody). So .... that's about the airport security. Let's not forget the Madrid international, where when you get off an international flight, You can 'squeeze' through into the international departures (outside Schengen Zone) because someone forgot the lock up the automatic door. Regarding that swiss knife thingy .... I actually realized I have it when looking into my backpak for the laptop. Almost felt like taking it out and peeling off the orange. Didnt want to end up on CNN. Anyways, the security business is doing well. Body scanners sell like pancakes and US Taxpayers are made money off. All you have to do is convince ppl about threats on CNN/FOX etc ... Ppl will believe it.
The lovely thing about mercury is that it's slow. The attacker stands an excellent chance of being off the plane and gone before it falls apart in the air on a later flight.
Lacking <sarcasm> tags,
Further deponent sayeth naught.
Lacking <sarcasm> tags,
> The Economist is left leaning by U.S. standards
This may be true; I haven't read it regularly in a couple of years. But I do think it's true that extremists in either US party would find much of what appears in The Economist very uncomfortable. It's probably the most fair and balanced news source around these days and most USians aren't accustomed with that.
My question for this position is always: "why?" Why would the government want a bunch of sheep?
You either treat that bottle of water as a bomb, and dispose of it properly. Or you let me take it on the plane.
You tell the security monkey :)
"The likes of Facebook and WhatsApp are free to those whose privacy is of zero value."
TSA stands for Teamsters, Service Workers, and AFL/CIO. It makes work for the otherwise unemployable.
On the one hand, thank god there are some rules to constrain what these morons can do to as a security checkpoints. On the other hand, I want my pocket knife back that these pricks took from me in San Diego, just this week (Swiss Army "Super Tinker" model with its devastatingly dangerous 2.5" blade, $20 on Amazon.COM). (Note that neither of those hands speaks positively about the TSA.) I get so tired of having to be so polite to those people just so I can get through their little power bubble with the least amount of hassle.
I think it was Schneier that said there are only two real improvements to airline security since 9/11:
1. Locking cockpit doors
2. Passengers that fight back
Everything they do at TSA checkpoints is ineffective window dressing.
My question for this position is always: "why?" Why would the government want a bunch of sheep?
Isn't this what every government that ever existed wants/wanted? Governments don't exist FOR the people, they think the people exist FOR them. Sadly, but not surprisingly, the US federal government (as well as those of the other major democracies) lost sight of the real reason it exists long ago.
Again, why? Why do they want that?
Lady Astor once said to Churchill, "If you were my husband, I'd poison your tea," to which he responded, "Madam, if you were my wife, I'd drink it!"
It's The Golden Rule: "He who has the gold makes the rules."
You are presuming a defense is in place already (recall: zero terrorists stopped thus far). And that a legitimate threat exists in the first place (1 in 3.5 million chance of dying to terrorism).
"what's going to keep a dedicated terrorist from using old fashioned C4 explosive hidden in an obvious body cavity."
The same thing that will keep me from winning the lottery. Statistics.
I believe, but I can't cite the source, that the main goal of any government is to prolong its existence.
Finding new ways to increase the scope of government, beyond its chartered responsibility, is a means to this end. Having citizens object to this expansion, and push back on the expansion of scope, is counter to this direction. If the citizens learn that they can somehow, someway, live without the government being involved in something, it means that people in government will become redundant. And if that starts happening it might snowball. Isn't this the basis of revolution? Instead, if people conform to the will of the government and continue to fund its expansion of scope, then all those in positions of minor power (like TSA stiffs at the airports) are safe. Isn't this the basis of enslavement?
Government is about power, and power is about money. Being required to demonstrate value to maintain your income is something to be avoided, if you can get away it it, no?
“The purpose of government is to enable the people of a nation to live in safety and happiness. Government exists for the interests of the governed, not for the governors.” Thomas Jefferson
Why would the government want a bunch of sheep?
Why does a shepherd want a bunch of sheep?
The more docile people are, the more government can take from them.
-jcr
The only title of honor that a tyrant can grant is "Enemy of the State."