This story has several examples! Anything that lets and attacker work around security precautions is that kind of information. Right now the list of airports an

This story has several examples! Anything that lets and attacker work around security precautions is that kind of information. Right now the list of airports and countries is a physical security vulnerability because an attacker can just go to a different airport than one on the list. I wish physical security were like digital security. When securing a server I can publish exactly how I did it and if it is good then the server is secure unless some gets physical access... With physical access the description of the system is a weakness. Unlike packets against a firewall any real wall can be beaten down with enough force, so letting your enemy know how thick your wall is or how many men guard it is a security vulnerability all on its because then they know what goal they need to reach. Uncertainty is poor computer security tool because most attacks are free, physical attacks have a cost. So attackers won't do them unless they think the odds of success justify the costs. If they don't know if they can beat down the wall they probably won't try unless they are desperate. Physical security is all about economics or manpower, either way it is about making attacks too expensive to be worthwhile. Just describing the boundaries to be secured makes it easier, and therefor cheaper to plan an attack. This is very unlike computer which is about finding and fixing flaws. A computer system without flaws cannot be attacked over a network, it must be attacked physically (or socially engineered which can be considered a physical attack here). For any physical attack there is some amount of money or manpower that can take the objective.