[Dshield] IDS Analysts

Dave Hull dphull at trustedsignal.com
Tue Jan 29 20:52:02 GMT 2008


Nice post about the restaurant Josh. I frequently find myself thinking
about security implications of real world situations. This weekend, my
wife sent me to a large retail store to pick up something that she had
ordered online.

When I arrived at the store I was instructed by the greeter to go to
the back of the store and follow the signs. I did so. A manager helped
me out. The package was 149 lbs and the offered to help me and I
accepted. He was wearing a large name tag that clearly had the word
"Manager" on it. As we approached the store exit, we were stopped by
the same greeter who had helped me when I entered the store. She asked
to see my receipt.

I was surprised by this and thought it was a great use of separation
of duties to prevent collusion between shoppers and store employees,
even managers. Now that I think back on it, I would have liked to have
seen their procedure if I'd said I couldn't find my receipt.

-- 
Dave Hull
CISSP, GCIH, GREM, SSP-MPA, CHFI
Trusted Signal, LLC
http://trustedsignal.com
Tel. 785.424.0832


More information about the list mailing list