Effective security requires physical, logical, and administrative controls working in concert. Technical people prefer logical controls because they can understand and manage them. The fact that most logical controls (e.g. content filters) can be circumvented does little to diminish their value, it merely reinforces the fact they cannot solve security problems by themselves.
Volker and Sebastian claim the ability to circumvent any logical control, therefore such controls are useless.
Leythos says we know in advance what users need, therefore block everything else.
My boss says he posted the rules, therefore fire anyone who breaks them.
They are all wrong. Security is hard work because, to be effective, you have to find a way to get everyone to understand and participate.
Triffid