Retail terrorists – individuals or small groups carrying out armed attacks against soft targets in open societies – are extremely difficult to deal with. The threat and the reality of attacks will require greater social resilience and quite possibly a rebalancing of individual privacy and collective security.