[Dshield] IDS Analysts
Dave Hull
dphull at trustedsignal.com
Tue Jan 29 20:52:02 GMT 2008
Nice post about the restaurant Josh. I frequently find myself thinking
about security implications of real world situations. This weekend, my
wife sent me to a large retail store to pick up something that she had
ordered online.
When I arrived at the store I was instructed by the greeter to go to
the back of the store and follow the signs. I did so. A manager helped
me out. The package was 149 lbs and the offered to help me and I
accepted. He was wearing a large name tag that clearly had the word
"Manager" on it. As we approached the store exit, we were stopped by
the same greeter who had helped me when I entered the store. She asked
to see my receipt.
I was surprised by this and thought it was a great use of separation
of duties to prevent collusion between shoppers and store employees,
even managers. Now that I think back on it, I would have liked to have
seen their procedure if I'd said I couldn't find my receipt.
--
Dave Hull
CISSP, GCIH, GREM, SSP-MPA, CHFI
Trusted Signal, LLC
http://trustedsignal.com
Tel. 785.424.0832
More information about the list
mailing list