Technical Discussion

Some time ago about what is SAST and DAST emerged in one of the community threads which inspired me to write this short article explaining the difference between SAST, DAST, IAST and RASP using a clever analogy.Before we start explaining the terms, try to imagine yourself as a castellan who is concerned about protecting his castle (your computer system) from the savage raiders (cyber threats).Our application is like a castle we have to protect SAST - Static Application Security TestingNaturally, you would want to prevent most of the issues when the castle is not yet built. I mean, it's much easier to change the design of a certain wall before it is built rather than after it's already standing. And how to spot the potenti

For me, it’s cycling to and from work - it only takes me like 10 minutes, but I wouldn’t change that for the world. I also spend a significant part of my day (2-3 hours/day) in different parks/playgrounds/woods playing/walking with my son and when the night falls I like to either grab a good book, watch some tv or play HOMM3 :) I used to train kickboxing, but after partially tearing ligaments in my left knee some years ago I’ve put a pause on that activity - am planning to get back to it :)  So, what do you do to vent off / relax after work ? 

Not all tests actually test. The fact that you have 1000 tests in your test suite does not mean that if they all green that your application does not have bugs. Confused? Curios? Check the video of @IOan to see more information on the topic and what format you should/can use for your tests to make sure that they actually test.

I’d like to invite people looking for a stellar example of critical thinking applied to read this analysis by @satisfice. https://www.satisfice.com/download/appendix-chatgpt-sucks-at-being-a-testing-expert?wpdmdl=487569Regardless whether you felt for the ChatGPT  hype or not, pay attention to the methodology and how it’s applied, how the questions are raised, how the arguments are laid out and conclusions are made. I promise you’ll learn a thing or two. 

Should Testers be involved in DevOps?Explain your Answer

What are Tasks and Subtasks in Jira Used for? Give an example to explain the context.

Demystifying Saga Design Pattern in C#: A Cure for Distributed Transactional WoesIn the world of distributed systems, managing transactions across different services can often pose a significant challenge. Traditional approaches like the 2-Phase commit and 3-Phase commit patterns have been reliable companions in monolithic applications, yet they fall short when it comes to modern, distributed environments. This article explores the Saga Design Pattern, a powerful approach that addresses these issues in a distributed setting. We will delve into its definition, types, and the concept of compensation, illustrated with a real-world e-commerce platform example. The Problem at HandWhen it comes to transactions in a monolithic architecture, the typical approach is the ACID (Atomicity, Consistency, Isolation, Durability) model, with distributed transactions implemented via the 2-Phase or 3-Phase commit patterns. However, these models run into scalability an

 In this informative video, @basdijkstra, an independent test automation consultant and trainer, addresses the question, "What makes a test a good test?" He dives into different aspects of good testing, like risk assessment, valuable information, trustworthiness, scope, and speed. Bas emphasizes the need to focus on high-risk areas, deliver valuable and clear info, build trust in test results, choose the right test scope, and ensure repeatability. This video is a must-watch for anyone interested in understanding the key qualities of good testing!About Bas: Bas Dijkstra is an independent test automation consultant and trainer.He has been active in the test automation field for some 16 years now, and has worked on software testing and automation solutions across a wide rang

The world has changed in terms of technologies we use and test. IoT, AI, ML, Security, Data testing are some key areas where testers are facing a lot of challenges in getting started.What in your opinion will change the way we perceive testing?  Who will survive and who will perish? Will there be a manual vs automation discussion happening still?Do share your views.

Hi Community, I think the topic has been in debate for long. I think captcha cannot be automated and we should ask the dev team to remove it as it is designed to identify it is are used as security checks todeter spammers and hackers from using forms on web pages.But there are certain chrome windgets like buster which can resolve the captcha. kindly let me knowyour thoughts.

What are some of the steps that helped you implement security testing effectively into your testing?

🌐 Elevate Your Automation Skills with the Ultimate Resource! 🌐🔗 Playlist Link: https://www.youtube.com/watch?v=Qu4R_PCUffk&list=PLNQq42pqd-rxC6Yw97QgqMCTQojlxOzze🚀 Greetings! I am thrilled to share an invaluable resource that will empower you to take your automation expertise to the next level. Introducing the "Sites to Practice Automation" playlist, a game-changing collection of links designed to enhance your API testing, web automation, performance testing, and even security testing skills.📺 This playlist is a treasure trove of hands-on exercises and tutorials, meticulously curated to help you gain practical experience and solidify your understanding of automation concepts. Whether you're a seasoned professional or just beginning your journey in the automation world, this playlist has something for everyone.🔧 The "Sites to Practice Automation" playlist is jam-packed with essential links covering various areas of automation:1️⃣ API Testing: Di

Testers do not ensure or assure quality.To ensure something, you must control it. This is a necessary, but not sufficient condition. So, even if you control it, you may not be able to to ensure it. As a tester, I have absolutely no control over quality, therefore I cannot ensure quality. The people who could ensure quality are managers and developers. Even they can’t ensure it, but for different and more complicated reasons than those that apply to testers.(I also don’t “break the software” because it is already broken when I find it.)So, what do I do as a tester?I seek the truth, and I report the truth, about the status of the product at any given time. I do this so that the team I work for can make informed decisions about quality.If I break anything, it is the veil of illusion. I shatter the dreams of the naive. But not the product. The product is the product, before and after I test

Are you really using Agile in your Projects? A lot of projects/teams claim to work in an Agile ways. They use methodologies and ceremonies that are tipically associated with Agile and with Scrum. However in reality it is actually a Sprint based Waterfall. Share your experience. What do you use.

Hi Community, I would like to know what models do you use in your testing work? Which one do you find useful?  I heard a lot about HTSM model by James Bach. Do you use it? 🤔

Always interested in finding new ways to test blind injection and out of band responses. Here are some of the free and opensource tools i use apart from the paid burp suite collaborator:http://pingb.in

If I want to implement an error budget for my project, who would the stakeholders be that we would need to consider reaching out to?

Lean Software Development is an agile software development methodology that focuses on reducing waste and maximizing value delivery to customers. It is based on the principles of the Toyota Production System and emphasizes continuous improvement, teamwork, and customer focus.In Lean Software Development, testing is an integral part of the development process. Testing is not considered a separate phase but is instead integrated throughout the development cycle. This is because Lean Software Development emphasizes the need for continuous feedback and continuous improvement, which can only be achieved through continuous testing.Testing in Lean Software Development is carried out in various forms, including unit testing, acceptance testing, and exploratory testing. Test automation is also an essential component of Lean Software Development, as it helps to reduce waste and improve efficiency. Automated testing helps to detect defects early in the development process, which