A collection of thoughts related to the challenges of software engineering

stay connected

Posts Tagged with ‘airplanes’

December 27th, 2009

As you all know someone tried to ignite an explosive in a plane yesterday. The USA are now going to impose on all of us more and more inefficient and counter-productive security measures.

The liquid ban was already a non-sense. I'm not even going to speak about the shoes and belt scan. Now I've heard you have to remain seated for the last hour of the flight. How does it improve security? This is typically a measure crated for the sole purpose of saying "look, we're doing something!"

Want secure planes? Prohibit passengers from boarding. All the rest is threat mitigation.

Security in airport must be thought as the last line of defense as the real fight takes place on the intelligence field. Behavior analysis, random checks, last minute modifications, that's the kind of things you want to have.

There's no way you can detect everything. Someone will always come up with a new idea you didn't think off. Unless you spend one hour scanning every person boarding the plane, you will eventually fail. And even in that case you don't protect yourself against compromised agents. You don't protect yourself against new explosives. You don't protect yourself against someone popping up with an AK-74 and shooting at the lines in the airport.

That doesn't mean you must stop scanning luggage, but do that sensibly. Understand you're looking for the desperate act, the lone wolf. And it wouldn't make sense to let people board with guns or machetes, wouldn't it?

The more complex and numerous your security policies are, the more likely they are going to be improperly applied. As someone who worked a lot on software security , I know that all too well.

What's simply going to happen is that people are going to fly less and less. People we be scared. When this happens, terrorism wins. Terrorism isn't about killing, it's about spreading terror.

One last important thing to consider: the attack failed.