We installed a single turnstile to feel secure (idiallo.com)

Article summary

A company installed turnstiles and key card readers for security, but the system caused long lines and disruptions, while a more significant security issue with Jira credentials stored in cookies was overlooked. The author argues that the visible security measures were 'security theater' and that real security is often invisible and requires proper engineering. The turnstiles were eventually shut down due to their ineffectiveness. The author reflects on the difference between visible security measures and actual security.

Main themes

• Security theater
• Authentication and access control
• Company security policies
• Employee experience
• Security vs. convenience
• Invisible security

What commenters say

• The article's criticism of security theater is misplaced, as the turnstiles and key card readers were legitimate security measures, even if poorly implemented.
• The use of turnstiles and key card readers can be seen as a form of security theater, as they provide a visible sense of security but may not actually prevent breaches.
• The real security issue was the storage of Jira credentials in cookies, which was a more significant vulnerability than the turnstiles and key card readers.
• The article's tone is self-righteous and the story may be exaggerated or fictional, which undermines the author's argument about security theater.
• Layered security controls, including elevator access control, can be an effective way to prevent breaches, even if they are not foolproof.
• The implementation of security measures should prioritize both security and convenience, rather than sacrificing one for the other.
• The article highlights the importance of proper engineering and threat modeling in implementing effective security measures.
• The use of security measures like turnstiles and key card readers can be motivated by a desire to track employee movements rather than solely to improve security.