When you get down to it, there are broad and poignant parallels between airport and computer security, and similar problems with each. Both fields have tried a

When you get down to it, there are broad and poignant parallels between airport and computer security, and similar problems with each. Both fields have tried and true, yet difficult-to-implement best practices (well-trained screeners a la Israel, and operational security such as "don't open that shady email"). Both industries suffer from a proliferation of charlatans, and both industries have customers who are more concerned with the appearance of doing something useful, than going through the pain of implementing actually useful best practices. Schneier's as well-qualified as any to speak to the stupidity that pervades both industries.