Earlier quoted context omitted.
Any time that when that information falls into the hands of attackers and enabled them to make more effective plans. I do not know if this is that case, but there is a class of information that when made public reduces safety. The problem is not with telling any one individual, you or I would probably do little with the information, but once "everyone" knows it potential attackers could use the information. If it wer…
>"Any time that when that information falls into the hands of attackers and enabled them to make more effective plans." You mean like announcing a laptop ban from flight originating in 10 predominantly Muslim countries? Do you think terrorists don't pay attention to the news? >"I do not know if this is that case, but there is a class of information that when made public reduces safety." Please provide an example of t…
I wish physical security were like digital security. When securing a server I can publish exactly how I did it and if it is good then the server is secure unless some gets physical access...
With physical access the description of the system is a weakness. Unlike packets against a firewall any real wall can be beaten down with enough force, so letting your enemy know how thick your wall is or how many men guard it is a security vulnerability all on its because then they know what goal they need to reach. Uncertainty is poor computer security tool because most attacks are free, physical attacks have a cost. So attackers won't do them unless they think the odds of success justify the costs. If they don't know if they can beat down the wall they probably won't try unless they are desperate.
Physical security is all about economics or manpower, either way it is about making attacks too expensive to be worthwhile. Just describing the boundaries to be secured makes it easier, and therefor cheaper to plan an attack. This is very unlike computer which is about finding and fixing flaws. A computer system without flaws cannot be attacked over a network, it must be attacked physically (or socially engineered which can be considered a physical attack here). For any physical attack there is some amount of money or manpower that can take the objective.