[hinkley]

No, the model there is something bad happened, we must do something. This is something, so we will do it.

I’m not saying that to diminish the value of the actual solution, but what the people want is literally something to make them feel better about a situation that is mostly out of their control.

Someone showed up to their workplace with a fucking gun. And now they have to go there every day, and hope it doesn’t happen again. They want and need the theater.

[bombcar]

This is exactly it - most "security" isn't really built around actual threat models, nor is it ever verified. IT security is perhaps the weirdest in the world in that the security of your web server will be constantly probed, whilst your front door could go your entire lifetime and never be probed once.

Where people actually care about physical security, they develop things that do actually work; and often are so unobtrusive you never realize they're there.

Security theater necessitates that it be showy and in your face.

[XorNot]

Except a decent part of security is literally just deterrence.

Will my front door stop someone robbing my house if they want to? No: I have sidelight windows you could just smash them and come through.

But the one time a house I was in got robbed, it was because we left the front door open and went out.

Which is odd if you think about it right? Statistically an open front door rather implies someone is home, not away so it's a terrible targeting priority - but our house was targeted and not say, our neighbors who also wouldn't have been home that day.

People are quick to claim security theater, talk about threat models, but equally ignore them anyway.

[bombcar]

The "I don't have to run faster than the bear; just faster than you".

[hinkley]

PSA: If your buddy starts running from a brown bear, stand very, very still. They like to chase things and they're way faster than you are.

[cozzyd]

Also carry bear spray. Use it on your buddy.