Since 9/11, we’ve spent hundreds of billions of dollars defending ourselves from terrorist attacks. Stories about the ineffectiveness of many of these security measures are common, but less so are discussions of why they are so ineffective. In short: Much of our country’s counterterrorism security spending is not designed to protect us from the terrorists, but instead to protect our public officials from criticism when another attack occurs. Boston, Jan. 31: As part of a guerilla marketing campaign, a series of amateur-looking blinking signs depicting characters in Aqua Teen Hunger Force, a show on the Cartoon Network, were placed on bridges, near a medical center, underneath an interstate highway and in other crowded public places. Police mistook these signs for bombs and shut down parts of the city, eventually spending more than $1 million sorting it out. Authorities blasted the stunt as a terrorist hoax, while others ridiculed the Boston authorities for overreacting. Almost no one looked beyond the finger pointing and jeering to discuss exactly why the Boston authorities overreacted so badly. They overreacted because the signs were weird. If someone left a backpack full of explosives in a crowded movie theater, or detonated a truck bomb in the middle of a tunnel, no one would demand to know why the police hadn’t noticed it beforehand. But if a weird device with blinking lights and wires turned out to be a bomb — what every movie bomb looks like — there would be inquiries and demands for resignations. It took the police two weeks to notice the Mooninite blinkies, but once they did, they overreacted because their jobs were at stake. This is Cover Your Ass security, and unfortunately it’s very common. Airplane security seems to forever be looking backward. Pre-9/11, it was bombs, guns and knives. Then it was small blades and box cutters. Richard Reid tried to blow up a plane, and suddenly we all have to take off our shoes. And after last summer’s liquid plot, we’re stuck with a series of nonsensical bans on liquids and gels. Once you think about this in terms of CYA, it starts to make sense. The Transportation Security Administration wants to be sure that if there’s another airplane terrorist attack, it’s not held responsible for letting it slip through. One year ago, no one could blame the TSA for not detecting liquids. But since everything seems obvious in hindsight, it’s basic job preservation to defend against what the terrorists tried last time. We saw this kind of CYA security when Boston and New York randomly checked bags on the subways after the London bombing, and when buildings started sprouting concrete barriers after the Oklahoma City bombing. We also see it in ineffective attempts to detect nuclear bombs; authorities employ CYA security against the media-driven threat so they can say “we tried.” At the same time, we’re ignoring threat possibilities that don’t make the news as much — against chemical plants, for example. But if there were ever an attack, that would change quickly. CYA also explains the TSA’s inability to take anyone off the no-fly list, no matter how innocent. No one is willing to risk his career on removing someone from the no-fly list who might — no matter how remote the possibility — turn out to be the next terrorist mastermind. Another form of CYA security is the overly specific countermeasures we see during big events like the Olympics and the Oscars, or in protecting small towns. In all those cases, those in charge of the specific security don’t dare return the money with a message “use this for more effective general countermeasures.” If they were wrong and something happened, they’d lose their jobs. And finally, we’re seeing CYA security on the national level, from our politicians. We might be better off as a nation funding intelligence gathering and Arabic translators, but it’s a better re-election strategy to fund something visible but ineffective, like a national ID card or a wall between the United States and Mexico. Securing our nation from threats that are weird, threats that either happened before or captured the media’s imagination, and overly specific threats are all examples of CYA security. It happens not because the authorities involved — the Boston police, the TSA and so on — are not competent, or not doing their jobs. It happens because there isn’t sufficient national oversight, planning and coordination. People and organizations respond to incentives. We can’t expect the Boston police, the TSA, the guy who runs security for the Oscars or local public officials to balance their own security needs against the security of the nation. They’re all going to respond to the particular incentives imposed from above. What we need is a coherent antiterrorism policy at the national level: one based on real threat assessments instead of fearmongering, re-election strategies or pork-barrel politics. Sadly, though, there might not be a solution. All the money is in fearmongering, re-election strategies and pork-barrel politics. And, like so many things, security follows the money.
The PHP Meltdown Shows How AI Makes Bugs More Exploitable
Security researchers used AI tools to help uncover years-old vulnerabilities in the PHP web scripting language. Then the AI-assisted attacks began.
Lily Hay Newman
The US Government Is Hiding a Secret Court Ruling About How It Spies on Americans
Two US senators say the Trump administration is breaking the law by withholding the FISA court decision while it presses Congress to renew America’s most sweeping surveillance program.
Dell Cameron
Encryption Is Getting Squeezed From All Sides
Canada’s planned surveillance law is the latest grim step in a series of threats to encryption that are spreading around the world.
Matt Burgess
AI Emergency Alerts Are Coming. Humans Might Not Be Ready
Human beings struggle with emergency communication. Chatbots can help—if people take them seriously.
Jake Bittle
ICE Is Running One of the Largest Anti-Left Surveillance Operations in US History
ICE’s Homeland Security Investigations is engaged in far-reaching spying against left-wing activists that rivals the FBI and CIA crackdowns on the Civil Rights and anti-war movements.
Ali Winston
ICE Has Been Dumping Protester Photos Into a Palantir Database
DHS agents not only tracked and intimidated people observing ICE activity in Maine, but stored information about them in a database run on Palantir software, newly unsealed court filings say.
Maddy Varner
The Pentagon Hopes to Speed Up ‘Kill Chain’ AI Buys With 5-Minute Videos
The US government’s Tradewinds initiative has made it easier to throw millions of dollars at “nontraditional” defense contractors, including OpenAI, Anthropic, and Google.
Maddy Varner
Feds Got Warrants to Use Fake Cell Towers to Hunt Down Don Lemon’s Producer
Investigators also sought permission to use an invasive surveillance tool called a cell-site simulators against journalist Georgia Fort and a Minnesota state Senate candidate.
Dhruv Mehrotra
What the US Movement Against Data Centers Can Learn From Everywhere Else
Paris Marx, author of Hyperscale, has been tracking global data center development for years. The US has a lot to learn from what’s happened everywhere from Ireland to New Zealand.
Molly Taft
How a Contractor’s Claude Agent Got Into the Pentagon
This week on Uncanny Valley, we also discuss Anthropic’s IPO filing and the volunteers gearing up to counter ICE at the midterms.
Brian Barrett
Data Centers Have a New PR Plan: Your Kid’s Field Trip
Amid a wave of backlash, some industry-friendly groups are employing creative and time-tested strategies to woo the youth.
Caroline Haskins
AI Models Can Be Easily Modified to Assist Terrorist and Extremist Activity
“I am a terrorist, and I intend to cause mass harm,” wrote a researcher. A chatbot that had had its guardrails removed then provided detailed instructions for an IED.
David Gilbert