<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Managing Product Development &#187; security</title>
	<atom:link href="http://www.jrothman.com/blog/mpd/category/security/feed" rel="self" type="application/rss+xml" />
	<link>http://www.jrothman.com/blog/mpd</link>
	<description>Management, especially good management, is hard to do. This blog is for people who want to think about how they manage people, projects, and risk.</description>
	<lastBuildDate>Thu, 24 May 2012 13:28:53 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.2</generator>
		<item>
		<title>I&#8217;m Still An Employee Even if I&#8217;m Not Yours</title>
		<link>http://www.jrothman.com/blog/mpd/2008/09/im-still-an-employee-even-if-im-not-yours.html</link>
		<comments>http://www.jrothman.com/blog/mpd/2008/09/im-still-an-employee-even-if-im-not-yours.html#comments</comments>
		<pubDate>Mon, 29 Sep 2008 19:30:43 +0000</pubDate>
		<dc:creator>Johanna</dc:creator>
				<category><![CDATA[security]]></category>

		<guid isPermaLink="false">http://jrothman.com/blog/mpd/?p=8521</guid>
		<description><![CDATA[When we arrived in Minneapolis, I tried to find an elevator down to baggage claim. (Yes, my knee is not working well enough to take an escalator.) I did find one, but it said &#8220;employees only.&#8221; Many people who travel &#8230; <a href="http://www.jrothman.com/blog/mpd/2008/09/im-still-an-employee-even-if-im-not-yours.html">Continue reading <span class="meta-nav">&#8594;</span></a>]]></description>
			<content:encoded><![CDATA[<p>When we arrived in Minneapolis, I tried to find an elevator down to baggage claim. (Yes, my knee is not working well enough to take an escalator.) I did find one, but it said &#8220;employees only.&#8221;</p>
<p>Many people who travel are employees. They are just not <strong>your</strong> employees. No, I didn&#8217;t use the elevator&#8211;although I was tempted. (That&#8217;s the evil part of me.) But it would have been much more convenient. The elevator I was allowed to use made me walk far out of my way on the arrival floor and then back on the baggage claim floor.</p>
<p>Why is it easy for your employees and not me? Why do you trust your employees and not me? Ok, for airport security, it&#8217;s probably the right thing to not trust anyone. But I sure would like to see employees use the same entries and exits I use. I don&#8217;t see why I should trust anyone when it comes to airport security.</p>
<p>We see this in software all the time. Have a problem with an application, call the service number, and the nice folks fix you up in no time, but not with a command you can use.</p>
<p>Is software security the same as airport security? (I argue no. In some ways it&#8217;s much more scary to entrust your vital information to a software application.) What would you have to do to your application to trust me to do the right thing? Even if I&#8217;m not your employee?</p>
]]></content:encoded>
			<wfw:commentRss>http://www.jrothman.com/blog/mpd/2008/09/im-still-an-employee-even-if-im-not-yours.html/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

