Category Archives: security-theater

Rational Astrologies and Security

Posted on by

John Kelsey and I wrote a short paper for the Rossfest Festschrift: “Rational Astrologies and Security“:

There is another non-security way that designers can spend their security budget: on making their own lives easier. Many of these fall into the category of what has been called rational astrology. First identified by Randy Steve Waldman [Wal12], the term refers to something people treat as though it works, generally for social or institutional reasons, even when there’s little evidence that it works—­and sometimes despite substantial evidence that it does not…

Continue reading Rational Astrologies and Security→

What is header ? and what is the different Between header attacks. And other normal attacks?

Posted on by

I was looking for the answer of this question what is header and what is header Attack. And I want to know that how powerful is header attack and is the best way to perform header attacks. If anyone here who can guide me regarding to the h… Continue reading What is header ? and what is the different Between header attacks. And other normal attacks?→

Why Vaccine Cards Are So Easily Forged

Posted on by

My proof of COVID-19 vaccination is recorded on an easy-to-forge paper card. With little trouble, I could print a blank form, fill it out, and snap a photo. Small imperfections wouldn’t pose any problem; you can’t see whether the paper’s weight is right in a digital image. When I fly internationally, I have to show a negative COVID-19 test result. That, too, would be easy to fake. I could change the date on an old test, or put my name on someone else’s test, or even just make something up on my computer. After all, there’s no standard format for test results; airlines accept anything that looks plausible…

Continue reading Why Vaccine Cards Are So Easily Forged→

How can I, as an enduser, put pressure on corporations and discourage password strength theater? [duplicate]

Posted on by

For work and other official matters, I am often forced to use websites and apps which clearly have some kind of cargo cult going on in their security department, given that they impose extremely foolish requirements on passwords:

Characte… Continue reading How can I, as an enduser, put pressure on corporations and discourage password strength theater? [duplicate]→

Airline Passenger Mistakes Vintage Camera for a Bomb

Posted on by

I feel sorry for the accused:

The “security incident” that forced a New-York bound flight to make an emergency landing at LaGuardia Airport on Saturday turned out to be a misunderstanding — after an airline passenger mistook another traveler’s camera for a bomb, sources said Sunday.

American Airlines Flight 4817 from Indianapolis — operated by Republic Airways — made an emergency landing at LaGuardia just after 3 p.m., and authorities took a suspicious passenger into custody for several hours.

It turns out the would-be “bomber” was just a vintage camera aficionado and the woman who reported him made a mistake, sources said…

Continue reading Airline Passenger Mistakes Vintage Camera for a Bomb→

Why would searchlights in a prison or similar setting use a set pattern? [closed]

Posted on by

In numerous action/stealth movies, video games, cartoons, etc., they are escaping from a prison or similar setting, in the middle of the night when it’s dark, with the guards moving the searchlights in a predictable, set-in-stone pattern.
… Continue reading Why would searchlights in a prison or similar setting use a set pattern? [closed]→