Slashdot Mirror
Schneier Has Something Good To Say About Airport Security
Bruce Schneier points out on his blog a proposal to use electronic randomizers at airport security checkpoints. Schneier writes there:
"I've seen something like this at customs in, I think, India. Every passenger walks up to a kiosk and presses a button. If the green light turns on, he walks through. If the red light turns on, his bags get searched. Presumably the customs officials can set the search percentage.
Automatic randomized screening is a good idea. It's free from bias or profiling. It can't be gamed. These both make it more secure. Note that this is just an RFI from the TSA. An actual program might be years away, and it might not be implemented well. But it's certainly a start."
In this case, the proposal is for randomizers that direct passengers to particular conveyor-belt lines for screening.
Is there evidence that profiling passengers based on appearance and behavior is not more effective than randomized screening?
Any terrorist with a simple grasp of binomial theory could work out the number of terrorists to send through the gate necessary to achieve a 90% confidence that one of them gets through with the bomb, given only the relative probability of red vs. green.
So we must prevent binomial theory getting in the hands of terrorists.
I should use this sig to advertise my book ISBN-13 : 978-1501515132.
Issue the TSA some dice?
Only if I can negate the search with a saving throw...
I don't want to misrepresent Schneier's position, but I've read articles of his in the past which basically say a profile is bad because it gives a way to avoid screening: avoid matching the profile.
Randomized screening may allow a single terrorist through, but something like 9/11 which required 19 guys means almost certainly one of them will be caught. If one is caught, you know to look for others.
Of course, the real solution is locking the cockpit doors and passengers who will kill anyone who tries to hijack an airplane.
just functioning brain cells and a lack of bigotry.
It's not bigotry to pay more attention by behavior profiling and using a little common sense rather than blind rule following.
Behavior analysis is free of racial implications.
Meanwhile "The Randomizer" pulls aside a four year old while letting through some sweaty guy with the shakes and an oddly bulging coat.
"There is more worth loving than we have strength to love." - Brian Jay Stanley
Is there evidence that profiling passengers based on appearance and behavior is not more effective than randomized screening?
Yes. MIT published a paper entitled "Carnival Booth" that demonstrated that random screening is more secure than profiling, essentially due to the latter's vulnerability to probing:
Carnival Booth: An Algorithm for Defeating the Computer-Assisted Passenger Screening System
A Lay Explanation of the MIT Research Paper [Carnival Booth]
Schneier on Security: Profiling
Proxy bombs are also difficult to screen for with profiles.
Thank you, Edward Snowden.
"Arguments from authority are worthless." —Carl Sagan
With a monolithic culture, a purely random process makes sense... Could you please direct me to that imaginary monolithic culture? I want to move there and F*ck it all up...
Imagine wasting 70 percent of your time searching grandmothers, children, and the handicapped instead of searching the more likely demographic. It's pure idiocy to think profiling is a bad thing. If you are profiling to harass then yes it is bad but if you are profiling because the profiled group is doing all of the bad things then profiling is not bad. Only an idiot can't see such an obvious truth...
If you have a building with four entrances, and you have twelve guards to cover them, do you put three at each entrance, covering each as best you can, or do you put nine on one entrance you think is most likely to see an attacker, and only one on each of the other three?
If you're an idiot, you do the latter. If you're not an idiot, you realize the former yields maximum security, because as soon as you put all your guards on one entrance, it becomes far easier for an attacker to get in, they just use one of the other three.
If you can understand that, you should be able to comprehend why searching any particular demographic more (and thus, by diverting resources, means you search others less) makes you less secure, not more. As soon as your move resources into an uneven distribution mode, you open up exploitable holes, and you're a moron if you think your enemy won't exploit that.
Your "obvious truth" is the kind of thing uneducated people who don't really understand the problem say. Answers always seem obvious when you don't understand the problem -- but you could actually try educating yourself before spouting off idiotic nonsense...
"Convictions are more dangerous enemies of truth than lies."