Earlier quoted context omitted.
How would you explain the observed difference in behaviour then?
Skull shape. They obviously are predisposed to having the right set of skull bumps.
That's one way to avoid an unwelcome conclusion.
We installed a single turnstile to feel secure
201–203 of 203 posts
Re: We installed a single turnstile to feel secure
#202Earlier quoted context omitted.
> The core problem is that risks were not being identified (systematically or in response to expert feedback) and prioritised. Or the person who wrote the article just wasn't involved in that loop, or otherwise disagreed on what threat models mattered.
It seems much more a compliance and auditing goal. To meet some objective of knowing who is in the office at what time, which informs office space leasing decisions, return to office mandates, decisions of charging for staff parking, etc. Personnel protection seems almost an afterthought. Protecting JIRA auth tokens is quite likely low down the list for IT security. Making sure your workers are not remote North Korea…
I still challenge whether his proposal was actually "meaningful, expert driven changes" - is this actually a serious threat vector? How would you actually exploit it, without having access to dozens of other vectors? Can you even meaningfully resolve that vulnerability when you have people walking in off the streets due to a lack of physical security?
Re: We installed a single turnstile to feel secure
#203This discussion reminds me of this bit of security theatre: https://wpollock.com/images/Security-done-wrong.jpg>