April 2017 Summaries

The importance of manual testing on mobile devices cannot be overstated, as it fills the gaps in automated testing and ensures that software works as intended by real users. Manual tests are used to answer questions about user experience, such as comfort and ease of use, and measure reactions to test functions. To perform effective manual tests, one must organize and standardize the tests, plan them out, run them, note errors, register errors, repeat the process after code changes, select different devices, and maintain consistent standards for mobile testing. By following these steps, organizations can encourage greater dedication and higher quality in their software, monitor user reactions, and identify areas for improvement.

Fail, and fail often. Learn from your mistakes to make it better. Run small, self-sufficient tests and execute them in random order. Include multiple levels of parallelization to speed up the testing process. Tweak the desired_capabilities used for Sauce Labs sessions to meet minimum needs. Watch total execution time of each test and configure a low max duration setting, refactor where necessary. A team effort is key to achieving quality, so ensure that the team communicates and feels ownership equally. Track stats over time to identify areas for improvement and use Sauce Labs Support when needed. Watching video playbacks can help figure out failure anomalies, while staying focused on Sauce Connect Tunnels is also crucial. Having fun is essential, especially by attending conferences like SauceCon where experts share their knowledge on cloud-based testing.

Cloud security is a shared responsibility between cloud service providers (CSPs) and users. CSPs must maintain high levels of security to retain client trust, while users are responsible for security at lower levels where they have control. Cloud-based testing raises specific security concerns, including insider access, communication with cloud services, data sharing on servers, and virtual instance recycling. Leaked development information can reveal vulnerabilities and compromise test data, which is equally sensitive as source code. However, cloud-based testing is a practical necessity, especially for virtualized and microservices-based applications, and provides economic benefits through reduced overhead and maintenance costs. A good cloud-based testing service can implement measures to provide high levels of security, such as single-use virtual machines and Transport Layer Security encryption.

Intern is a modern, flexible, open source JavaScript testing stack that supports the full testing lifecycle and multiple environments for testing in browsers, Node.js, and in the cloud. It provides features such as code coverage, CI integration, and visual performance regression testing. With recent support from the Mozilla MOSS program, Intern has added capabilities for performance benchmarking, accessibility testing, and visual regression testing. To get started with visual regression testing using Intern and Sauce Labs, you need to create a test config and tests using the intern-cli tool, install the `intern-visual` plugin, and configure it as a package with your module loader. Visual regression tests can be written programmatically or via configuration and provide a quick way to establish baselines for how an application should appear. The `intern-visual` plugin provides tools such as visual test reporters and command helpers that accept screenshots as parameters. The plugin also generates HTML reports showing any visual regressions, allowing developers to quickly identify changes in the application's appearance. With its open source nature and extensive feature set, Intern is a popular choice for developers looking to automate their testing workflows.

Hackers are constantly discovering security vulnerabilities in various systems, including web applications and IoT devices. This is largely due to companies neglecting to integrate security into their development life cycle, despite having dedicated security teams. Testing tools, such as Selenium, can be a valuable asset in identifying and fixing these vulnerabilities. OWASP provides a list of common vulnerabilities, known as the Top 10, which web applications are susceptible to. To mitigate these risks, it's essential for developers to educate themselves on security best practices and use tools like Selenium and ZAP to analyze and assess their application's security. By doing so, companies can reduce the risk of being hacked and ensure compliance with industry security standards.