ZDnet recently posted an article about AIT security. Interesting reading. Be sure and look at the comments at the bottom of the article.

http://www.zdnet.com/anchordesk/stories/story/0,10738,2838370,00.html

Barbed fences, double-closet-sized guys with Beretta pistols - tell me, how many webhosting companies have been raided in the last ten years by gunned cyber-terrorists? What is your preference: to have your site up-and-running and the hosting support guys being professional, or getting lame ex-army sergeants giving you nonsense answers to your queries when your site is down due to an on-line attack which they're uneble to tackle? The AIT servers were down for a couple of days when the Code Red worm attacked! You think the guys at the fences with their nice Berettas could do anything about that??

The fuss with AIT? they are anticipating terrorsist with "invisible technology in weaponry" invisible tanks, and invisible cyborgs who will raid their datacenter. Theives that would want to break into a datacenter and haul out tons of 4iu heavy servers that weight like a ton.

Stealing data? wouldnt it be easier to just hack in?

but how come I saw them let the pizza guy in the other day?

The only reason I can think of is to keep away all the customers they've screwed over and over again. People do get quite mad when they've cancelled their accounts and still after 6 months their ISP is still trying to bill them.

A little over the top, in my opinion.

Physical security isn't everything. One laser microphone pointed at a window, and you don't even need to enter the building to steal information. Or just have one employee bring in a commercial radio and with the right tempest equipment, you can turn the radio into a listening device.

That's all you need is an army infantryman in charge of security.

He should hire a real security expert.