This might be a case of what Schneier calls "cover your ass" security: No-one want's to be held responsible if something happens.[1] If you are an organization

This might be a case of what Schneier calls "cover your ass" security: No-one want's to be held responsible if something happens.[1] If you are an organization, or even just a random guard, the real priority might not to stop something bad from happening. It could just as well be to avoid blame. So it's much better to be extremely cautious. You're in a world of hurt if someone tipped you off to a "suspicious" tweet, you let them through, and (beyond belief) they actually carried out an attack. Much better to deny them entry, even if it's obvious the "threat" is false. Since everyone has to be at least as careful as the next guy, probably even more so, I I see this ending badly. [1] http://www.schneier.com/blog/archives/2007/02/cya_security_1.html http://www.schneier.com/blog/archives/2007/02/cya_security_1...