What are we not talking about enough?

[rosie (Rosie Sherry)]

What does fundamental good testing look like? If we had a list of topics to cover, what would it include?

[asharo29 (Ashish Arora)]

Are there any good resources on learning security testing and how we can leverage AI for better security testing? and so curious about this trend of hiring people specialized in security and performance testing. I dont see recuirters hiring sesoned testers who have less experience in performance and security testing and what could enable them to go past that barrier.

[kristof (Kristof Van Kriekingen)]

@asharo29

Are there any good resources on learning security testing

I’ve written a post about it a while back, just not about using AI in it, that part is actually a self-discovery part I believe. Once you get to a certain topic, you’ll see that AI is often used or not.

Security Testing - Where on earth do you start?

Very good question The most important thing is to have fun, learning things goes twice as fast as long as you are having fun. As you mentioned yourself OWASP is a good site to get some starting information. Security evolves fast and there is a lot of information, that’s true. It can be overwhelming but don’t get scared? You can look into OWASP Top 10 API, Mobile and Web and learn about what kind of vulnerabilities go around and learn what they are so you can recognize it. Roadmap? Euhm I don…

@asharo29

how we can leverage AI for better security testing

Personally I’ve been using AI to do OSINT better and sometimes I still use chatGPT as a rubber duck.

[asharo29 (Ashish Arora)]

Thank you so much! That is really informative.

[ipstefan (Stefan Papusoi)]

I agree with Caleb on that point: we need to talk about software testing fundamentals.

We have over 3-4 decades in this profession and it doesn’t seem to evolve. It’s getting worse as time passes, with fewer leading professionals trying to pave the good way forward.

How about some of these topics to start some ideas going:
Ethics, sociology or testing as a social science, psychology(e.g. Johari window), metacognition, biases, reasoning, meaning, semantics, ontology, fallacies, principles of engagement where there’s disagreement, scientific model, confirmation vs refutation, creativity, lateral thinking, critical thinking, uncertainty and complexity
Or:
The role of a tester, the meaning of the testing profession, the basics of testing, non-conformity of a tester or test approach, failed testing projects, mathematical testing, problem-solving
Or:
curiosity, distractibility, disobedience, silliness, accountability, honesty, integrity.

And it does require to have real hard conversations, debates, to put things under scrutiny, be uncomfortable, be wrong a lot, learn.

[rosie (Rosie Sherry)]

Butter is great for discussions sessions and capturing information of what is shared, not just through transcripts and AI summaries, but it could be designed to capture information through polls too.

I wonder if this is something we can explore, perhaps covering one keyword/term per session and then publishing something at the end of it.

We have a software testing glossary at MoT, but I want to completely revamp it, maybe we could revamp it by doing this?