Beefy Boxes and Bandwidth Generously Provided by pair Networks
Just another Perl shrine

Re: Crash-Test Dummies: A Few Thoughts on Website Testing

by sundialsvc4 (Abbot)
on Oct 09, 2015 at 22:23 UTC ( #1144342=note: print w/replies, xml ) Need Help??

in reply to Crash-Test Dummies: A Few Thoughts on Website Testing

OWASP is an excellent resource and you could spend days reading it and months implementing all of its suggestions ... as some companies do.   However, there are thousands of web sites (made using frameworks and otherwise) that are pure-and-simple sloppy.   Plainly revealing that they were constructed in haste and that the developers only tested the “intended” routes before declaring the project “Done.”   It was anything but.

The HTTP protocol, because it is stateless, is actually difficult to properly test.   Nevertheless, stress-testing and smoke-testing and crap-testing tools do exist.   The question before the house is whether they have actually, ever, been used to any serious degree.   Interestingly, when we beat a site up and then turn in a report of some of the failures that we found, the developers often get a curious look on their face and said, “yeah, we saw that happen once ...”   (We could make it happen at will.)

  • Comment on Re: Crash-Test Dummies: A Few Thoughts on Website Testing

Replies are listed 'Best First'.
Re^2: Crash-Test Dummies: A Few Thoughts on Website Testing
by Anonymous Monk on Oct 09, 2015 at 22:40 UTC
    Responding to the wrong post again, just to vaguely boast how awesome you are -- flush it

Log In?

What's my password?
Create A New User
Node Status?
node history
Node Type: note [id://1144342]
and the web crawler heard nothing...

How do I use this? | Other CB clients
Other Users?
Others chanting in the Monastery: (2)
As of 2019-04-25 01:52 GMT
Find Nodes?
    Voting Booth?
    I am most likely to install a new module from CPAN if:

    Results (124 votes). Check out past polls.

    • (Sep 10, 2018 at 22:53 UTC) Welcome new users!