Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I am extremely, bitterly familiar with the base rate fallacy (I was an intrusion detection researcher, and spend 4+ years working on statistical anomaly detection the Internet backbone).

The fallacy doesn't make a value judgement. It points out something counterintuitive about the accuracy of a filter or test. That thing is important, but not dispositive. If the base rate is low and the false positive rate is percentagewise high but the overall number of hits is manageable, low-power statistical tests can have utility as pre-filters.

I have the same thought every time I go through airport security ("whoever designed this probably doesn't know about the base rate fallacy"), but if the system is only ejecting 1-2 candidates per station per hour for expensive "offline" screening, it's not untenable.



It's not untenable in the sense that it's possible to get that amount of work done, but that doesn't make it worth doing. TSA is fundamentally trying to solve an unsolvable problem. No matter how many resources they throw at it, there will always be ways to evade their checks. A smart terrorist will find a way to get through undetected, find a way to avoid the check entirely (say, by bribing a TSA employee or airport employee), or will just bomb the next available target of opportunity - perhaps the security line itself. There is simply no plausible scenario in which the TSA's checks actually prevent terrorism.

(Yes, one could postulate really stupid terrorists who somehow don't realize they'll get caught going through security, but terrorists who are that stupid are likely to have their plans fail without the TSA's help. See also: the shoe bomber.)


Don't get me wrong: I think the whole enterprise of airport security is a farce.




Consider applying for YC's Summer 2026 batch! Applications are open till May 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: