Categories
Security Uncategorized

Dispatches on Security Theatre and airport chaos

Dispatches: Checking-in To Airport Chaos

Andrew Gilligan investigates the priorities and business tactics of the airports industry, asking how secure our airports are and who will be the winners and losers from airport expansion?

Explosives expert Sidney Alford highlights how ill-thought out and arbitrary the security rules regarding the carrying liquids is by creating an explosive that could be carried on in bottles of no more than 100ml and mixed on board and assuming there were co-conspirators on board an even greater amount could be accumulated. Alford doesn’t explain what exactly the liquids he was using are but does say that they are not particularly tightly controlled substances and can be sourced from several disparate industries in which their use is commonplace. so an amateur such as a terrorist could with a little research carry out exactly the same process.

Other experts such as Norman shanks BAA head of security 1991-1996 says that the industry always reacts to the last known threat.

Philip Baum Editor of Aviation Security International says it is all just security theatre and that he cannot cite a single example of when a bomb has been detected by the x-ray machines alone. He has carried out tests for governments and the results are very worrying one test involving a woman carrying bomb parts through 24 different airports every single one failed to detect a single component that she carried. Other results show that operators succeeded only 73% of the time to detect guns or knives.

Behaviour pattern recognition where staff are trained to spot suspicious behaviour was deemed not to be testable by the department of Transport and so the programme wasn’t implemented. They are far keener on technological answers!
I’m not sure why BAA don’t implement such procedures anyway. Where does responsibility lie? What role do they and the DoT play?

BAA also didn’t respond quickly enough to deal with the new security procedures and the result was huge queues at their airports whereas other airports owned for example by local government returned to normality pretty soon after the security scare.

Airlines are not happy with the way that BAA measures queues and would appear to be undercounting them and it is in their interest to lie as they are required to refund landing fees if queues are over a certain point. Independent surveys find their airports to be far less satisfactory than BAAs own surveys.

Almost seems designed to create long waiting times in BAAs airport shopping areas to maximise their retail revenues.

Expansion plans the government seems to have been influenced by BAA to allow the Heathrow third runway to be built ironically the CAA indicates there might not be sufficient airspace to accommodate the scale of predicted traffic growth.

Categories
Computing Security

Cyber thieves target social sites

The BBC reports that social sites such as Myspace and Facebook are prime targets of cyber thieves.

The quasi-intimate nature of the sites makes people share information readily leaving them open to all kinds of other attacks, warn security firms.

Detailed information gathered via the sites will also help tune spam runs or make phishing e-mail more convincing.

It is not just the information that people make public that they wouldn’t ordinarily tell a stranger but that add-ons to these social sites may inadvertently create vulnerabilities whereby criminals can compromise a users computer and install trojans or keylogging software to steal bank details.

Categories
Security Uncategorized

Demos Report on National Security

Bruce Schneier recommends reading National Security for the Twenty-First Century by Charlie Edwards of the think tank Demos.

Categories
Computing Security

Entire Child Benefit database lost.

The loss of two CDs containing the personal details of all families in the UK with a child under 16 inspires me with confidence of the Government’s ability to ensure the security of the data to be held in the National Identity Register.

Categories
Security Uncategorized

Secur-i-disc is solution to stolen tax discs.


secur-i-disc, originally uploaded by electricinca.

In an effort to secure my replacement tax disc so that I don’t have to suffer another break in to my car I’ve used the Secur-i-disc as recommended by both the Police and the DVLA. They describe how it works as follows.

If a thief breaks into a vehicle and steals the tax disc, the unique Secur-i-Disc encapsulation will prevent any alteration for use on another vehicle. Any attempt to alter the details on the tax disc will result in its destruction, thereby preventing the thief from “selling it on”.

Hopefully the result will be that the thief sees the warning and will not even try to break in now.

Categories
Security Uncategorized

Schneier interviews the TSA’s Kip Hawley

Bruce Schneier has posted the final part of his five part interview with the TSA Administrator Kip Hawley.

Links to Parts 1, 2, 3, and 4.

Categories
Computing Security

Potty about Harry’s leakage on bittorrent

Bruce Schneier reports that the New Harry Potter Book Leaked on BitTorrent and that he’s been fielding press calls all day about it.

It’s online: digital photographs of every page are available on BitTorrent.

I’ve been fielding press calls on this, mostly from reporters asking me what the publisher could have done differently. Honestly, I don’t think it was possible to keep the book under wraps. There are millions of copies of the book headed to all four corners of the globe. There are simply too many people who must be trusted in order for the security to hold. And all it takes is one untrustworthy person — one truck driver, one bookstore owner, one warehouse worker — to leak the book.

But conversely, I don’t think the publishers should care. Anyone fan-crazed enough to read digital photographs of the pages a few days before the real copy comes out is also someone who is going to buy a real copy. And anyone who will read the digital photographs instead of the real book would have borrowed a copy from a friend. My guess is that the publishers will lose zero sales, and that the pre-release will simply increase the press frenzy.

I’m kind of amazed the book hadn’t leaked sooner.

And, of course, it is inevitable that we’ll get ASCII copies of the book post-publication, for all of you who want to read it on your PDA.

Harry Potter Fans Transcribe Book from Photos

Scholastic Loses It Over Harry Potter/BitTorent Story

The Harry Potter leaker left the EXIF data still in the jpgs they created.

Categories
Security Uncategorized

Robocops and robbers?

Australia’s The Age reports that Australian Federal Police Commissioner Mick Keelty believes the greatest threat in the future will be from robots or robotic enhanced humans. [via]

Surely the correct response to the following would be ED-209 [via]

Categories
Politics Security Terrorism Uncategorized

UK Terrorism Minister

Admiral Sir Alan West has been appointed to the newly created Home Office post of Under-Secretary for Security, Counter-terrorism and Police of the United Kingdom.

The former First Sea Lord and Chief of the Naval Staff will need to be made a Life Peer in order for him to serve as a Minister in Gordon Brown’s government.

I’m bothered that we now have a former senior military officer in a post as a Government Minister without him ever having to be elected by the voters. He will however have a great deal more experience in matters of security to call on than his colleagues at the Home Office.

Categories
Security Terrorism Uncategorized

Seven British Al-Qaeda members jailed

BBC News: Al-Qaeda cell members imprisoned

Seven men have been jailed for up to 26 years over an al-Qaeda-linked plot to kill thousands in the UK and US.

Woolwich Crown Court heard they were in a “sleeper cell” led by Dhiren Barot, who is already serving a life sentence.

Barot planned attacks including an explosives-packed limousine, a dirty radiation bomb and blowing apart a London Underground tunnel.

Six admitted conspiracy to cause explosions and a seventh was found guilty of conspiracy to murder.

A rare piece of good news in the so called War on Terror with the police and presumably the Security Service, although they are not mentioned in the BBC article, preventing a cell of terrorists from carrying out an attack.

Deputy Assistant Commissioner Peter Clarke, head of the Metropolitan Police’s Counter Terrorism Command, said

“The plans for a series of co-ordinated attacks in the United Kingdom included packing three limousines with gas cylinders and explosives before setting them off in underground car parks. This could have caused huge loss of life.

“The plans to set off a dirty bomb in this country would have caused fear, panic and widespread disruption.”

I’m always wary when I hear that plots involving dirty radiation bombs have been foiled because the use of the term “dirty bomb” seems to be a preferred method of the government’s for terrifying the British public when in fact the reality of the danger of such devices is far outweighed by the perceived danger.

This goes back to what I was saying yesterday about Walter Mitty like terrorist wannabes with outlandish unfeasible plots. Whilst in theory a “dirty bomb” is relatively simple to construct the construction and deployment of such a device in a manner that could kill a great number of people is a whole different ball game.

However in this case if the BBC article is accurate then the terrorist cell contained a wide range of skills and apparently enough expertise to carry out a devastating attack using conventional methods without the need for the movie plot device of a “dirty bomb”.

In the trial of Dhiren Barot, the ringleader of this cell, an expert testified that if the radiation (dirty bomb) project had been carried out, it would have been unlikely to cause deaths, but was designed to affect about 500 people.