Slashdot Mirror
Schneier Has Something Good To Say About Airport Security
Bruce Schneier points out on his blog a proposal to use electronic randomizers at airport security checkpoints. Schneier writes there:
"I've seen something like this at customs in, I think, India. Every passenger walks up to a kiosk and presses a button. If the green light turns on, he walks through. If the red light turns on, his bags get searched. Presumably the customs officials can set the search percentage.
Automatic randomized screening is a good idea. It's free from bias or profiling. It can't be gamed. These both make it more secure. Note that this is just an RFI from the TSA. An actual program might be years away, and it might not be implemented well. But it's certainly a start."
In this case, the proposal is for randomizers that direct passengers to particular conveyor-belt lines for screening.
Nothing new here.
Had the same experience in mexico a dozen years ago.
Red light or green light.
But back then, there was a guy standing on a switch could just flex his knee to make additional selections if you looks particularly shady.
Sig Battery depleted. Reverting to safe mode.
I propose a device for random selection, consisting of a circular round object minted by our very own Federal Government that generates binary decisions with 50% probability, I can deliver these devices to the TSA at 100 units a shipment for a small price of $340,000 per shipment. I can have them delivered to every airport in the country within 2 weeks and we can implement this program by the Fall. They require no maintenance other than a 10 year service contract that adjust their randomness factor every year.
Any VC's out there?
'We are trying to prove ourselves wrong as quickly as possible, because only in that way can we find progress.' RPF
Is there evidence that profiling passengers based on appearance and behavior is not more effective than randomized screening?
You stand on a mat and it directs you to one of three different security lines, presumably to randomize the screeners incase you have one on your payroll.,
Any terrorist with a simple grasp of binomial theory could work out the number of terrorists to send through the gate necessary to achieve a 90% confidence that one of them gets through with the bomb, given only the relative probability of red vs. green.
So we must prevent binomial theory getting in the hands of terrorists.
I should use this sig to advertise my book ISBN-13 : 978-1501515132.
Issue the TSA some dice?
Only if I can negate the search with a saving throw...
Nothing new here.
Had the same experience in mexico a dozen years ago.
Red light or green light.
But back then, there was a guy standing on a switch could just flex his knee to make additional selections if you looks particularly shady.
We had (still have?) this in Brazil. But i think it was only in the customs area, not really for security screening.
I don't want to misrepresent Schneier's position, but I've read articles of his in the past which basically say a profile is bad because it gives a way to avoid screening: avoid matching the profile.
Randomized screening may allow a single terrorist through, but something like 9/11 which required 19 guys means almost certainly one of them will be caught. If one is caught, you know to look for others.
Of course, the real solution is locking the cockpit doors and passengers who will kill anyone who tries to hijack an airplane.
I got modded down for some reason, but wow, the first time you get groped at the airport, it all changes from abstract theory to miserable reality. To feel the soft caresses of the male security guard as he brushes by your balls......
That is something that affects you.
"First they came for the slanderers and i said nothing."
just functioning brain cells and a lack of bigotry.
It's not bigotry to pay more attention by behavior profiling and using a little common sense rather than blind rule following.
Behavior analysis is free of racial implications.
Meanwhile "The Randomizer" pulls aside a four year old while letting through some sweaty guy with the shakes and an oddly bulging coat.
"There is more worth loving than we have strength to love." - Brian Jay Stanley
Profiling inevitably produces more false (usually an order of magnitude more) positives than real positives, and generally produces as many false negatives as false positivves. In other words, you're a lot more likely to spend your time searching someone for no reason than catch an actual bad guy, and as likely to let a real bad guy through as not.
And that assumes the profiling is done in an objective, unbiased manner. When human decisions are made as to who gets profiled, there will be bias, whether the humans doing it realize it or not. This, at least, eliminates that.
I'll bet, though, without reading TFA, that there is no thought whatsoever of this replacing any current profile based screening, only being used in addition to everything done now.
The oldest suicide bomber I can find was a 64 year old woman. And an youngest person arrested for trying to be one is 11.
Not quite your 4 to 80 range, but close enough that you look pretty silly and uninformed.
Frankly, I don't care how effective either is; just get rid of the TSA and stop harassing people, even if at random or by profiling.
Filthy, filthy copyrapists!
Is there evidence that profiling passengers based on appearance and behavior is not more effective than randomized screening?
Yes. MIT published a paper entitled "Carnival Booth" that demonstrated that random screening is more secure than profiling, essentially due to the latter's vulnerability to probing:
Carnival Booth: An Algorithm for Defeating the Computer-Assisted Passenger Screening System
A Lay Explanation of the MIT Research Paper [Carnival Booth]
Schneier on Security: Profiling
Proxy bombs are also difficult to screen for with profiles.
Thank you, Edward Snowden.
"Arguments from authority are worthless." —Carl Sagan
Wrong. Now that we secure cockpit doors and passengers are willing to fight back (neither of which violate anyone's freedoms), such hijackings are simply not going to happen.
That said, even if we didn't have either of those things, I believe freedom is more important than security, so toss your "happy medium" right in the garbage.
Filthy, filthy copyrapists!
With a monolithic culture, a purely random process makes sense... Could you please direct me to that imaginary monolithic culture? I want to move there and F*ck it all up...
Imagine wasting 70 percent of your time searching grandmothers, children, and the handicapped instead of searching the more likely demographic. It's pure idiocy to think profiling is a bad thing. If you are profiling to harass then yes it is bad but if you are profiling because the profiled group is doing all of the bad things then profiling is not bad. Only an idiot can't see such an obvious truth...
If you have a building with four entrances, and you have twelve guards to cover them, do you put three at each entrance, covering each as best you can, or do you put nine on one entrance you think is most likely to see an attacker, and only one on each of the other three?
If you're an idiot, you do the latter. If you're not an idiot, you realize the former yields maximum security, because as soon as you put all your guards on one entrance, it becomes far easier for an attacker to get in, they just use one of the other three.
If you can understand that, you should be able to comprehend why searching any particular demographic more (and thus, by diverting resources, means you search others less) makes you less secure, not more. As soon as your move resources into an uneven distribution mode, you open up exploitable holes, and you're a moron if you think your enemy won't exploit that.
Your "obvious truth" is the kind of thing uneducated people who don't really understand the problem say. Answers always seem obvious when you don't understand the problem -- but you could actually try educating yourself before spouting off idiotic nonsense...
"Convictions are more dangerous enemies of truth than lies."
Profiling gives criminals a way to game the system; if you don't look like the profile then you don't get tagged as a potential criminal (it also allows some unfortunate biases to come into play by the profiler). The solution, Schneier suggests, is a system that by its simple randomness, does not allow profiling or gaming.
Whether you agree with his logic or not, I strongly doubt that any such system would be allowed into common usage in US airports without an override. This negates the very advantages Schneier advocates. Whether this addition strengthens the overall system is up to debate (Schneier would argue that it does not), but the addition of a human override weakens those aspects that Schneier looks upon favorably.
Myself, I think all such methods are extreme overkill and that its far more likely that criminals interested in damaging the US with such attacks will strike at our practically undefended infrastructure, be it the huge AV fuel tanks at the airport, or any of the bridges or tunnels in a major city, or some toxic chemical depot in an urban area. Most of these are protected by little more than rusty chain-link fencing and an underpaid security guard and could cause far more harm than a simple plane crash. It's these weaknesses that terrify me far more than the presumed risk of some schmuck with a razor blade hijacking a plane. I'd rather they stop wasting money frisking passengers for penknives and spend it shoring up those vulnerabilities instead.
Or alternately, we could stop pissing off three-quarters of the world so they all don't want to blow us up. It's just whacky enough an idea to work!
Passengers on flights coming from Willemstad into Amsterdam get checked 100%, because of the lax checks at Willemstad and the proportionally high amount of drug trafficking on this route.
Doing random checks on people not selected because they trigger certain alerts that make them suspicious makes it hard for customs/safety to get bribed and increases the chance the bad guys get caught. Once the bad guys figure out how not to stand out or bribe the guards, it's hard to catch them otherwise. This is why the random selector is better than having people do the random part of the selection. You want to check the poor African guy travelling alone to a rich country with a stop of one day in central America, because that's suspicious. But that doesn't mean that the mom and pop with a kid coming back from a 2 week holiday in Mexico can't be smuggling in a few Ks of cocaine as well. Having them press the button will make them think twice about the risk and it will probably even have a preventative effect in itself.
I was promised a flying car. Where is my flying car?