Why Security Sucks, One Black Belt's Opinion

Of course, y’all already commit to memory the kung-fu prose of computer security guru Bruce Schneier, but in case, you’ve missed the latest addition to the Schneier corpus: CYA Security. Airplane security seems to forever be looking backward. Pre-9/11, it was bombs, guns and knives. Then it was small blades and box cutters. Richard Reid […]

Of course, y'all already commit to memory the kung-fu prose of computer security guru Bruce Schneier, but in case, you've missed the latest addition to the Schneier corpus: CYA Security.

Airplane security seems to forever be looking backward. Pre-9/11, it was bombs, guns and knives. Then it was small blades and box cutters. Richard Reid tried to blow up a plane, and suddenly we all have to take off our shoes. And after last summer's liquid plot, we're stuck with a series of nonsensical bans on liquids and gels.

Once you think about this in terms of CYA, it starts to make sense. The Transportation Security Administration wants to be sure that if there's another airplane terrorist attack, it's not held responsible for letting it slip through. One year ago, no one could blame the TSA for not detecting liquids. But since everything seems obvious in hindsight, it's basic job preservation to defend against what the terrorists tried last time.

We saw this kind of CYA security when Boston and New York randomly checked bags on the subways after the London bombing, and when buildings started sprouting concrete barriers after the Oklahoma City bombing. We also see it in ineffective attempts to detect nuclear bombs; authorities employ CYA security against the media-driven threat so they can say "we tried."

Full column. Photo: Shaylor