Schneier on Security
A blog covering security and security technology.
« Speeding up Password Cracking |
| Friday Squid Blogging: Squid Pumpkin »
October 26, 2007
Dilbert on Profiling
Posted on October 26, 2007 at 1:47 PM
• 16 Comments
To receive these entries once a month by e-mail, sign up for the Crypto-Gram Newsletter.
Funny that strip #2 appeared on a day when our company instituted a new security policy for contractors. Makes me wonder if the two are related.
What a great example of wonderful side-effects to dubious policy.
First thing I thought when I saw this was "How do I submit these to Bruce?"
"I wouldn't have said, 'Funny stuff'..." [sfx: trashcan]"
oops. sorry about the redundant URL posting. :-(
Is it just me or did anyone else find this not funny? Adams has been losing his touch over the past few years. And on his blog he is usually spouting off nonsense.
"....did anyone else find this not funny?"
I wouldn't have said that.
Badge compliance is one of those perennial issues that distinguishes good security from hideously bad.
If your large company does not have a visible badge policy, with photo and with name, you are kidding yourself that you have any security at all. If you have the policy, and no one is enforcing it, even more of a joke.
If you ask that a security guard be removed because they dare to enforce the badge policy as written, you should fire all your security guards immediately and replace them with color cardboard cutouts. They're a lot cheaper and wear nicer uniforms -- and are as effective as the rest of the guards you just emasculated.
In the best companies, EVERYBODY from junior contractor to CEO both scrupulously obeys badge policy and is willing to enforce it. Someone without their badge is as obvious as someone walking down the hall stark naked and raving. The latter is far less dangerous, by the way.
Let someone like me walk around your site and get into a telco or network closet unescorted for about thirty seconds, and you're done.
Did I mention how much I adore dropped ceilings? Thank you.
It's all about perspective...
Many years ago, as a (fairly new/E2) cop in the Air Force stationed in Germany, I had a "bad" reputation for being unwilling to compromise in doing my job. It was so "obvious" that, on a day when we were to have a 3-star General visiting, I was moved from my post as an entry controller, because "they" didn't want the General being "delayed" by someone asking for his badge as he entered the Restricted Area I was scheduled to guard. So, they moved me to an "aircraft gate" - a taxiway gate at which vehicular traffic normally didn't enter/exit.
Well, Generals being Generals, he changed his itinerary and decided to enter that particular gate. Of course I stopped him and asked to see his driver's (and his) credentials. The driver, instead of complying, started arguing...at which point I went to "port arms" (bringing my weapon to the ready). The General rolled down his window and asked what was going on; I explained to the General that his driver was refusing to display his authority to enter. The General asked (in a fairly pleasant voice) "Captain, do you HAVE a badge?" to which the driver responded that he did. "Well, then," said the General, "show the nice Airman your badge!" the General replied, and he showed me his as well. I returned my weapon to my shoulder, examined the badges, saluted, and wished the General (and captain) a nice day and stood aside.
I got my butt CHEWED by my superiors...and then got a letter of appreciation from the General.
@Kevin, not hard to figure. The General knew you'd get your butt chewed for doing your job, so he evened the scale.
Having worked at a company with an (enforced) badge policy, it isn't that bad once you adjust to it. It's an easy measure to improve site security. It also makes it easier for those of us who have trouble remembering names.
The only problem is when it runs into safety regulations like "no jewelry or loose clothing around operating machinery".
Well, maybe the General actually got promoted for competence.
It's just you, as others have said. Scott is poking fun at the "there's a terrorsit under every bed" FUD that DHS and many security contractors are spouting.
As a USAFA cadet who often gives you SF types crap- more power to you! Awesome story.
So explain to me how a piece of laminated plastic with a picture and some writing on it significantly increases safety and security?
Schneier.com is a personal website. Opinions expressed are not necessarily those of BT.