DevTestSecOps
Photo
Very testing event - because of the air raid alert we went to test the bomb shelter 🤪
😱3😁2
#23andMe #hack
I was thinking of giving them my genetic information. 🤔
https://www.bleepingcomputer.com/news/security/genetics-firm-23andme-says-user-data-stolen-in-credential-stuffing-attack/
I was thinking of giving them my genetic information. 🤔
https://www.bleepingcomputer.com/news/security/genetics-firm-23andme-says-user-data-stolen-in-credential-stuffing-attack/
BleepingComputer
Genetics firm 23andMe says user data stolen in credential stuffing attack
23andMe has confirmed to BleepingComputer that it is aware of user data from its platform circulating on hacker forums and attributes the leak to a credential-stuffing attack.
😁1😱1
#testing
One of the most “high-profile” articles of the past month. It describes how #Microsoft got rid of #SDET engineers and what happened:
https://blog.pragmaticengineer.com/how-microsoft-does-qa/
One of the most “high-profile” articles of the past month. It describes how #Microsoft got rid of #SDET engineers and what happened:
https://blog.pragmaticengineer.com/how-microsoft-does-qa/
The Pragmatic Engineer
How Microsoft does Quality Assurance (QA)
The Redmond Big Tech giant pioneered the SDET role in the 90s. It then retired it in 2014. What happened and why?
👍3
A huge set of #mindmap on various #testing topics. The only downside is that they are all screenshots, so you need to rewrite them in xmind (or something similar):
https://github.com/dimensi0nless/software-testing-mindmaps
https://github.com/dimensi0nless/software-testing-mindmaps
GitHub
GitHub - dimensi0nless/software-testing-mindmaps
Contribute to dimensi0nless/software-testing-mindmaps development by creating an account on GitHub.
👍2
DevTestSecOps
#hack #Okta again!? https://sec.okta.com/harfiles
#hack #way
A good example of a suspected security breach report from !#1password
They suspected that something was going on in their #Okta account, i.e. all sorts of internal admin and helpdesk stuff.
A member of the IT team handled Okta support and, at their request, created a HAR file from Chrome Dev Tools and uploaded it to the Okta support portal. This HAR file contains a record of all traffic between the browser and Okta's servers, including sensitive information including session cookies. In the early morning hours of Friday, September 29, an unknown attacker used the same Okta session used to create the HAR file to access the Okta administration portal and attempted the following:
- Attempted to access an IT employee's user dashboard, but the attempt was blocked by the Okta system.
- Updated the existing IDP tied to our Google production environment.
- Activated the IDP.
- Requested an admin user report.
The last action on this list resulted in an alert email being sent to a member of the IT team, which of course resulted in a quick response.
More details:
https://blog.1password.com/files/okta-incident/okta-incident-report.pdf
A good example of a suspected security breach report from !#1password
They suspected that something was going on in their #Okta account, i.e. all sorts of internal admin and helpdesk stuff.
A member of the IT team handled Okta support and, at their request, created a HAR file from Chrome Dev Tools and uploaded it to the Okta support portal. This HAR file contains a record of all traffic between the browser and Okta's servers, including sensitive information including session cookies. In the early morning hours of Friday, September 29, an unknown attacker used the same Okta session used to create the HAR file to access the Okta administration portal and attempted the following:
- Attempted to access an IT employee's user dashboard, but the attempt was blocked by the Okta system.
- Updated the existing IDP tied to our Google production environment.
- Activated the IDP.
- Requested an admin user report.
The last action on this list resulted in an alert email being sent to a member of the IT team, which of course resulted in a quick response.
More details:
https://blog.1password.com/files/okta-incident/okta-incident-report.pdf
👏2🤔2
How to understand that it's time for you to move on from #testing, and what are the possible development paths after Senior and QA leads:
https://www.thequalityduck.co.uk/is-it-time-you-moved-on-from-quality-engineering/
https://www.thequalityduck.co.uk/is-it-time-you-moved-on-from-quality-engineering/
The Quality Duck - Engineering Leadership with a side of Quality Evangelism
Is It Time For You To Move On from Quality Engineering?
Feel like you've reached your career limit in Quality Engineering? You aren't alone! Read this blog for insights into options for what's next!
👍1🤔1
#programming #time
Old but gold (at work on a neighboring project just now serious bugs came out because of the transfer to winter time):
https://infiniteundo.com/post/25326999628/falsehoods-programmers-believe-about-time
Old but gold (at work on a neighboring project just now serious bugs came out because of the transfer to winter time):
https://infiniteundo.com/post/25326999628/falsehoods-programmers-believe-about-time
Tumblr
Falsehoods programmers believe about time
Over the past couple of years [I have spent a lot of time][checklist] debugging other engineers' test code. This was interesting work, occasionally frustrating but always informative. One might not...
👏1🤔1👾1
#hack #FlipperZero vs #iPhones
When it was pre-ordered - I wasn't able to order and I regret it a bit. 😏
https://arstechnica.com/security/2023/11/flipper-zero-gadget-that-doses-iphones-takes-once-esoteric-attacks-mainstream/
When it was pre-ordered - I wasn't able to order and I regret it a bit. 😏
https://arstechnica.com/security/2023/11/flipper-zero-gadget-that-doses-iphones-takes-once-esoteric-attacks-mainstream/
Ars Technica
This tiny device is sending updated iPhones into a never-ending DoS loop
No cure yet for a popular iPhone attack, except for turning off Bluetooth.
😁3
DevTestSecOps
#programming #Rust
#Rust #way
Found the original - the quote is taken from here:
A few years ago, I dropped everything to focus 100% on WebAssembly. At the time, Rust had the best support for compiling into WebAssembly, and the most full-featured WebAssembly runtimes were Rust-based. Rust was the best option on the menu. I jumped in, eager to see what all the hype was about.
Since then, I (along with some other awesome people) built Wick, an application framework and runtime that uses WebAssembly as its core module system.
Wick was the primary target of our Rust experimentation
After three years, multiple production deployments, an ebook, and ~100 packages deployed on crates.io, I feel it’s time to share some thoughts on Rust:
https://jsoverson.medium.com/was-rust-worth-it-f43d171fb1b3
Found the original - the quote is taken from here:
A few years ago, I dropped everything to focus 100% on WebAssembly. At the time, Rust had the best support for compiling into WebAssembly, and the most full-featured WebAssembly runtimes were Rust-based. Rust was the best option on the menu. I jumped in, eager to see what all the hype was about.
Since then, I (along with some other awesome people) built Wick, an application framework and runtime that uses WebAssembly as its core module system.
Wick was the primary target of our Rust experimentation
After three years, multiple production deployments, an ebook, and ~100 packages deployed on crates.io, I feel it’s time to share some thoughts on Rust:
https://jsoverson.medium.com/was-rust-worth-it-f43d171fb1b3
Medium
Was Rust Worth It?
From JavaScript to Rust, three years in.
🤔1