Any security breach is making the software do something it was not intended to do.
SQL injection is using the input to affect the database in a way the programmer did not intend. For example, if I have a form which gives me the search parameters fo…
There are requirements for being a doctor. We have recognized training. There are tests we can give a person to see if they are a doctor. There is no agreed upon list of requirements for being a tester. Different people have different definitions of…
You make some very good points. Saying you are a tester means nothing. You are judged by what you do.
People have been practicing medicine for hundreds of years. Even now, how you define a medical professional changes. They have learned a lot and i…
Certifications mean nothing to me. A good education might help you to be a good software tester but just having the training means nothing. ISO 9001:2000 made it a requirement that training must be shown to be effective. If you work at an ISO 9001 r…
Testing is actually a very easy task. Getting into the right mindset is the hard part. If you have good organization skills and you can see things from someone else's point of view you are well on your way to being a great tester.
The whole idea be…
Are you judged on how many defects you file? Defects should be ranked according to impact on customer and likelihood the customer will find it. For example, you find 17 spelling mistakes in the documentation or you find 1 defect which causes the pro…
Pick enthusiasm over knowledge if you are having difficulty deciding between candidates. That is, if one candidate is more knowledgeable but not very excited or passionate about testing and the other shows an aptitude to learn and is very excited ab…
I think you are talking about safety-critical software testing. When testing safety-critical software things are quite different. First, there is less emphasis on empirical testing. It is actually less about testing and more about Quality Assurance.…
Whether a website is WEB 2.0 or not will make a significant difference. If the web site is WEB 1.0 (static HTML pages with no client-side dynamic content) then using special features of a web browser would be the main reason for testing on different…
A memory leak is called a leak because your application is 'leaking' memory. In the case of a container you are losing water. In the case of an application you are losing memory.
I associate the term with languages like C. In C language the applica…
If someone has provided requirements, they form the expected results. Beyond that expected results are a cultural aspect. I have worked in some companies where EVERYTHING that was important was documented and therefore expected results were derived…
Worked in the software industry in various capacities including, manufacturing, customer support, programming, testing, teaching and quality assurance.