Marcus Ranum wrote “Information security’s response to bitter failure, in any area of endeavour, is to try the same thing that didn’t work — only harder.”
It seems that this often applies to the entire security field, not just IT. Here’s a timely example.
There have been calls, in the wake of April’s bombing at the Boston Marathon, for increased surveillance of Americans — already, arguably, the most-surveilled and most spied-on citizens on the planet, to such an extent that ex-Stasi staff are likely envious. In particular, there have been calls for mass (camera) surveillance from police department officials in Boston and New York City.
These recommendations clearly raise serious issues about privacy and the Constitution and the values we hold as a society. Others have written about those issues more eloquently than I can. But let me break from their approach and point out something on a much more pragmatic level:
It didn’t work.
Let me ask you to consider for a moment the Boston Marathon and all the video/still cameras that were focused on it, the ones whose images were in front of the nation nonstop for days. Anyone who’s run in or been to a major distance running event knows that there are cameras everywhere. There are race operation cameras at the start and finish. There are TV news cameras, all over the course — some fixed, some mobile. There are family/friends of runners and other spectators, concentrated at the start and finish, but scattered everywhere along the course, and nearly all of them have cameras. There are official and unofficial race photographers in multiple locations who try to grab still shots of every runner and then offer them for sale afterwards. There are even some runners wearing cameras from time to time. And then of course there are all the now-ubiquitous cameras on stores, banks, parking garages, traffic signs, and on all kinds of other structures along the way.
We don’t know why the those responsible for the attack in Boston did it; but what we do know is that the attack required a modicum of planning and intelligence: they weren’t entirely stupid. I submit that there is no possible way that they did not know that the finish area of a major marathon is one of the most heavily-photographed areas of the planet on the day of the event. Yet they not only selected it as their target, they made no attempt at all to evade the massive number of lenses focused on it.
Thousands of cameras equated to zero deterrent value.
Yes, those cameras certainly helped identify and locate the suspects: but that is cold consolation to those who lost life and limb, because they didn’t actually prevent the attack. The upcoming prosecution of Dzhokhar Tsarnaev, while it might yield some answers to troubling questions, is not going to help local runner Carol Downing’s daughters (Nicole Gross suffered two broken legs; Erika Brannock lost part of one of hers) recover and rehab and go on with their lives.
A thousand more, ten thousand more, a hundred thousand more cameras would not help: cameras have no deterrent value to people who are prepared to die and/or don’t care if they’re identified.
There also remains the distinct, disturbing possibility that the attackers chose the locationbecause they knew it was so thoroughly covered with cameras. An attack like this is clearly directed at those present, but if its real purpose is, as Bruce Schneier observes, to attack the minds of hundreds of millions elsewhere, then it can only reach its targets if the event is heavily documented and widely disseminated.
To put that point another way: it’s entirely possible that adding cameras to a particular location will decrease public safety — because it may make that location more attractive to those who want to make certain their attacks are captured on video and of course, dutifully replayed in slow-motion thousands of times by 24×7 news networks with many hours of airtime to fill.
Go deeper with Bing News on:
Spying on the public
- Former German military translator on trial as Iran spyon January 29, 2020 at 1:26 am
BERLIN (AP) — A German-Afghan man who worked for years as an interpreter and adviser for the German military went on trial Monday on charges of spying for Iranian intelligence ... Media and the public ...
- Op-Ed: The NYPD-Clearview Scandal Shows Only Oversight Will Stop the Spying and the Coverupson January 28, 2020 at 8:46 am
But here in New York, one of the most galling aspects wasn’t the spying. It was the coverup. If the NYPD is willing to say one thing in public and do another behind closed doors, it hasn’t earned our ...
- 2019-NCoV Is Going To Make The SPY Sickon January 28, 2020 at 7:40 am
Let that sink in: The closure of schools and public transportation, the lockdown of schools and cities ... I suggest taking a synthetic straddle on the S&P 500 ETF (SPY). Here is how I set up a ...
- Civilian team to keep an eye on spy agencyon January 26, 2020 at 1:35 pm
For More of This and Other Stories, Grab Your Copy of the Standard Newspaper. Subscribe Now » ...
- Chuck Grassley asks if FBI informant used Pentagon contract money to spy on Trump campaignon January 24, 2020 at 11:24 am
Grassley said Trubnikov was a source for British ex-spy Christopher Steele, whose unverified dossier was used by the FBI to obtain Foreign Intelligence Surveillance Act warrants to wiretap Page. In an ...
Go deeper with Google Headlines on:
Spying on the public
Go deeper with Bing News on:
- After Departure, JSTARS Surveillance Aircraft Spotted Back in Middle Easton February 4, 2020 at 1:03 pm
Just as mission planners thought it was out, the Joint Surveillance Target Attack Radar System (JSTARS) was recently pulled back into the Middle East. The Air Force said the E-8C JSTARS aircraft had ...
- Hearing on Barnard Killing Touches on Shoes in Surveillance Videoon February 4, 2020 at 12:51 pm
A 13-year-old suspect accused of a role in the fatal stabbing of a Barnard College student told investigators that his shoes looked like ones worn by a person in surveillance video, a NYPD officer ...
- Surveillance video shows stepmom with Colorado boy before he went missingon February 4, 2020 at 12:33 pm
A neighbor of a missing 11-year-old Colorado boy says home security footage shows the child's stepmother leaving the house with him the day he went missing and returning hours later without him.
- Silicon Valley startups backed by Bill Gates and Andreessen Horowitz are using the US-Mexico border to test new surveillance technologyon February 4, 2020 at 9:05 am
The rise in border surveillance experiments reflects companies' efforts to capitalize on an increase in federal funds flowing to the border.
- China Marshals the Power of Its Surveillance State in Fight Against Coronaviruson February 4, 2020 at 8:02 am
Chinese officials have launched an unprecedented effort to track the fast-spreading coronavirus, using big data to trace the movements of infected individuals.