<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Eusebiu Blindu&#039;s Blog</title>
	<atom:link href="http://www.testalways.com/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.testalways.com</link>
	<description>Blog about testing</description>
	<lastBuildDate>Fri, 04 May 2012 19:15:11 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.0.4</generator>
		<item>
		<title>Agile Testing Days prequel with Scott Ambler</title>
		<link>http://www.testalways.com/2012/05/04/agile-testing-days-prequel-with-scott-ambler/</link>
		<comments>http://www.testalways.com/2012/05/04/agile-testing-days-prequel-with-scott-ambler/#comments</comments>
		<pubDate>Fri, 04 May 2012 19:15:11 +0000</pubDate>
		<dc:creator>Eusebiu Blindu</dc:creator>
				<category><![CDATA[Agile Testing Days prequel]]></category>
		<category><![CDATA[Agile]]></category>
		<category><![CDATA[Agile Testing Days]]></category>
		<category><![CDATA[AgileTD]]></category>
		<category><![CDATA[Scott W. Ambler]]></category>

		<guid isPermaLink="false">http://www.testalways.com/?p=942</guid>
		<description><![CDATA[      
      As a prequel to Agile Testing Days where I will do my presentation, I am trying to interview the other speakers. Today we have Scott W. Ambler, a software engineer, consultant and author, currently Chief Methodologist for IT at IBM Corporation in their IBM Rational division. He is known as author of several books focused on the Unified process, Agile [...]]]></description>
			<content:encoded><![CDATA[      
      <p><font size="3" face="lucinda sans"><img align="left" src="http://www.testalways.com/wp-content/uploads/2012/04/animated_logo.gif" /> As a prequel to <a href="http://www.agiletestingdays.com/" target="_blank">Agile Testing Days</a> where I will do my presentation, I am trying to interview the other speakers. Today we have Scott W. Ambler, a software engineer, consultant and author, currently Chief Methodologist for IT at IBM Corporation in their IBM Rational division. He is known as author of several books focused on the Unified process, Agile software development, the Unified Modeling Language, and CMM-based development.</p>
<p><em>Eusebiu Blindu</em>: How would Scott Ambler describe himself in the context of the testing community and as a person?</p>
<p><strong>Scott W. Ambler</strong> :I&#8217;m clearly a pro-testing person, as many within the agile community are. For many years I have promoted at test early and test often strategy in my writings as well as a test-first one. I&#8217;ve embedded testing techniques in the various methodologies that I&#8217;ve worked on over the years, in particular I&#8217;ve promoted database testing within the Agile Data method (<a href="http://www.agiledata.org/" target="_blank">http://www.agiledata.org</a>) and a range of testing strategies in Disciplined Agile Delivery (DAD) (<a href="http://www.disciplinedagiledelivery.com/" target="_blank">http://www.DisciplinedAgileDelivery.com</a>). Database testing has been a radical concept, particularly in the data community, that even now very little has been written about. In DAD I promote the idea of explicitly including independent testing, when appropriate, in addition to the whole team testing approach which is currently dominant within the agile community. Whole team testing is clearly important, but there are some situations, particularly at scale, where independent testing is required. As a person I&#8217;m a father first, a husband second, and an IT professional third.</p>
<p><em>Eusebiu Blindu</em>: How would you shortly define &#8220;Agile Testing&#8221;?<br />
<strong>Scott W. Ambler</strong>:That&#8217;s a hard one. How about: Test often, early (if not first), collaboratively, and to the risk. Some more detailed thoughts can be found at <a href="http://www.ambysoft.com/essays/agileTesting.html" target="_blank">http://www.ambysoft.com/essays/agileTesting.html</a></p>
<p><em>Eusebiu Blindu</em>: Do you apply &#8220;Agile Testing&#8221; currently and if so, how exactly?<br />
<strong>Scott W. Ambler</strong>:As you can see at the article in the previous question, there&#8217;s a range of agile testing strategies. I try to be as agile as I can at everything that I do.</p>
<p><em>Eusebiu Blindu:</em> Can you please tell us more about Disciplined Agile Delivery (DAD) and the <a href="http://www.amazon.com/Disciplined-Agile-Delivery-Practitioners-Enterprise/dp/0132810131/ref=sr_1_1?s=books&amp;ie=UTF8&amp;qid=1330286177&amp;sr=1-1" target="_blank">related book</a> you co-authored?<br />
<strong>Scott W. Ambler:</strong> DAD is a hybrid agile process framework adopting proven strategies from Scrum, XP, Agile Modeling, Kanban, Unified Process, and others. Interesting features for agilists are that it describes a full delivery lifecycle, not just construction; it is goal-driven, not prescriptive, providing the flexibility required to meet the unique challenges of your situation; it is enterprise aware, providing advice for how agile teams can fit in effectively into their overall organizational ecosystem; and it provides a solid foundation from which to scale agile approaches.</p>
<p><em>Eusebiu Blindu:</em> What would be the three most important factors in your opinion when dealing with database testing (<a href="http://www.agiledata.org/essays/databaseTesting.html" target="_blank">http://www.agiledata.org/essays/databaseTesting.html</a>)?<br />
<strong>Scott W. Ambler:</strong> First is to recognize the need to do so. The majority of organizations don&#8217;t seem to understand this, a reflection of the culture within the data management community. Second is to understand that you need to do both black box testing and clear-box testing. The teams that do database testing typically do just black box testing, which is a great start but not sufficient. Third is to understand that test-first approaches to database testing are where you need to get to. I wrote an article for IEEE Software in 2007 entitled Test Driven Development of Relational Databases (<a href="http://www.computer.org/portal/web/csdl/doi/10.1109/MS.2007.91" target="_blank">http://www.computer.org/portal/web/csdl/doi/10.1109/MS.2007.91</a>) so the idea has been out there for awhile now.</p>
<p><em>Eusebiu Blindu:</em> Also because I myself started my career as IBM contractor, can you tell us what is the role currently played by the company in the world of testing?<br />
<strong>Scott W. Ambler:</strong> IBM sells testing tools, we do testing training, consulting and mentoring. We are also providing testing outsourcing services. We do research into testing. IBM has over 400,000 people worldwide, and testing is a key aspect of our overall value proposition.</p>
<p><em>Eusebiu Blindu:</em> You mention you are a father and a husband before an expert in the field. How important is that for the career balance?<br />
<strong>Scott W. Ambler:</strong> It&#8217;s incredibly difficult to have a good work-life balance. If you don&#8217;t put your family first you&#8217;re probably going to be out of balance, which then leads to problems in the long run. IT work can demand long hours of you, and you need to know when to say enough is enough.</p>
<p><em>Eusebiu Blindu:</em> In  <a href="http://www.ambysoft.com/essays/agileTesting.html" target="_blank">http://www.ambysoft.com/essays/agileTesting.html</a> it is written, kind of like a motto, &#8220;Agile Testing and Quality Strategies: Discipline Over Rhetoric&#8221;. What does &#8220;Discipline over Rhetoric&#8221; mean?</p>
<p><strong>Scott W. Ambler:</strong> The challenge that I see with the agile community is that there is a fair bit of rhetoric around testing, a lot of it good but some of it bad. One of the things that I do is run industry surveys to discover what people are actually doing, what is working well, and what might not be working so well. Then I share the results (see <a href="http://www.ambysoft.com/surveys/" target="_blank">http://www.ambysoft.com/surveys/</a>). My testing and quality article describes a collection of strategies, some of them such as TDD and whole team testing which &#8220;conform&#8221; to the common agile rhetoric. Some strategies including independent testing and formal reviews which don&#8217;t conform to the mainstream rhetoric. In DAD we promote the idea that one aspect of being disciplined is to adopt the strategies that are appropriate to your situation and then tailor them accordingly. One of the requisites of that is to know what strategies are available to you the advantages and disadvantages of them.</p>
<p><em>Eusebiu Blindu:</em> What is the one thing that you can name that keeps the motivation in your work? What makes it still exciting?</p>
<p><strong>Scott W. Ambler:</strong> I&#8217;m constantly learning. I think that if I wasn&#8217;t learning this stuff would become really dull really quickly for me.</p>
<p><em>Eusebiu Blindu:</em> What do you expect from the Agile Testing Days conference? Do you have in mind any particular talk that you would attend?<br />
<strong>Scott W. Ambler:</strong> I have decided yet which talks I will attend. It will be driven by my interests at the time which in turn is driven by what I&#8217;m doing with customers at that point.</p>
<p><em>Eusebiu Blindu:</em> How would you test a Rubik&#8217;s cube? What related to &#8220;Agile&#8221; would you apply in doing that?</p>
<p><strong>Scott W. Ambler</strong><strong>:</strong> I would hand it to my sister Carol and ask for her opinion. She loves puzzles and has mastered several different forms of Rubik&#8217;s puzzles. Collaborative testing involving an expert is hard to beat.</p>
<p><em>Eusebiu Blindu:</em> Thanks for the time spent with this interview. Looking forward to meeting you there!</p>
<p></font></p>
]]></content:encoded>
			<wfw:commentRss>http://www.testalways.com/2012/05/04/agile-testing-days-prequel-with-scott-ambler/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Agile Testing Days prequel with Zuzana Sochova</title>
		<link>http://www.testalways.com/2012/05/03/agile-testing-days-prequel-with-zuzana-sochova/</link>
		<comments>http://www.testalways.com/2012/05/03/agile-testing-days-prequel-with-zuzana-sochova/#comments</comments>
		<pubDate>Thu, 03 May 2012 12:26:45 +0000</pubDate>
		<dc:creator>Eusebiu Blindu</dc:creator>
				<category><![CDATA[Agile Testing Days prequel]]></category>
		<category><![CDATA[Agile]]></category>
		<category><![CDATA[Agile Testing Days]]></category>
		<category><![CDATA[AgileTD]]></category>
		<category><![CDATA[Zuzana Sochova]]></category>

		<guid isPermaLink="false">http://www.testalways.com/?p=1025</guid>
		<description><![CDATA[      
      As a prequel to&#160;Agile Testing Days&#160;where I will do my presentation, I am trying to interview the other speakers. Today we have&#160;Zuzana Sochova&#160;from Czech republic. She is one of the&#160;&#160;founders of the Agile Association Czech Republic, an association creating sharing platform for individuals, teams and companies interested in agile. She works as Agile trainer and [...]]]></description>
			<content:encoded><![CDATA[      
      <p><font size="3" face="lucinda sans"></p>
<p>
			<img align="left" src="http://www.testalways.com/wp-content/uploads/2012/04/animated_logo.gif" /></span></span></p>
<p>
			As a prequel to&nbsp;</span><a href="http://www.agiletestingdays.com/">Agile Testing Days</a><span style="background-color: rgb(255, 255, 255); ">&nbsp;where I will do my presentation, I am trying to interview the other speakers. Today we have&nbsp;</span><a href="http://www.linkedin.com/in/zuzka">Zuzana Sochova</a>&nbsp;from Czech republic. She is one of the&nbsp;&nbsp;founders of the <a href="http://agilniasociace.com/">Agile Association Czech Republic</a>, an association creating sharing platform for individuals, teams and companies interested in agile. She works as Agile trainer and coach offering consultancy of <a href="http://sochova.com/">agile services </a> and management, and among many other things she is a <a href="http://sochova.cz/conferences-lectures-talks.htm"> speaker at Agile conferences </a> and a contributor to the Czech Technical University Agile project management programs. </span></span></span></p>
<div>
			&nbsp;</div>
<div>
			<em>Eusebiu Blindu:</em> How would Zuzana Sochova describe herself in the context of the testing community and as a person?</span></span></div>
<div>
			<strong>Zuzana Sochova:</strong> My way to the testing world was not any short. I started as SW tester in one small innovative company, operating on telecommunication. This was still during my hi-school. I like the creative exploratory testing role, and as we haven&#39;t been any bureaucracy corporate, it was fun. But as the time went, I started studied Computer Science with and after some time, I had decided to become a great developer instead of SW tester. Part of the decision was indeed based on the state of the SW testing industry here, in the Czech Republic, part of the decision was the realization I&rsquo;m not so conscientious, as the tester should be. On my first full time job, I finally got an option to choose whether I prefer to be a developer and work under enthusiastic and innovative manager, or rather a tester and work under the &ldquo;real boss&rdquo; guy. So you can imagine who I chose. I never regret that decision in future.&nbsp;</span></span></div>
<div>
			Later on, I find out I value talking to people over, coding and become a teamlead and project manager. Finally, when we moved to Scrum, I started to realize how poor the testing was driven in our company and when finally in a few years I got an opportunity to lead the whole engineering department, I spent about a year improving the testing in our organization, implementing agile principles and learning, trying to improve their skills and abilities as testers in an agile organization.</span></span></div>
<div>
			Finally, in my startup now, I&rsquo;m the only one who is able to do any exploratory testing, so surprisingly I&rsquo;m testing most of our products, and trying to incorporate good testing culture and strategy to the people&rsquo;s minds. The same with all my clients I&rsquo;m coaching on agile or scrum adoption. It&rsquo;s not always so easy as I spent most of my working time on mission and life-critical application, where even single mistake could possibly kill an individual or harm many people. Therefore, I expect from my teams zero errors product, and trying to learn the practices leading to very high quality both developers and testers. &nbsp;</span></span></div>
<div>
			&nbsp;</div>
<div>
			&nbsp;</div>
<div>
			<em>Eusebiu Blindu:</em>&nbsp;How would you shortly define &quot;Agile Testing&quot;?</span></span></div>
<div>
			<strong>Zuzana Sochova:</strong>&nbsp;Collaborative, improving, iterative.&nbsp;</span></span></div>
<div>
			The biggest difference is in people&rsquo;s heads, they are used to the old-world roles, having developer who did any code, hope it work and send it to the tester, wait and then fix bugs. I believe in the team work, intensive collaboration and pair work on the functionality from both testing and development perspective. If you communicate and share well during the sprint, the number of bugs dramatically decreases. &nbsp;</span></span></div>
<div>
			&nbsp;</div>
<div>
			<em>Eusebiu Blindu:&nbsp;</em>Do you apply &quot;Agile Testing&quot; currently and if so, how exactly?</span></span></div>
<div>
			<strong>Zuzana Sochova:&nbsp;</strong>Several teams I&rsquo;m coaching on agile methods are real Scrum teams where they abandoned the formal roles and give preference to the shared commitment driven by business value. They cooperate on the functionality, taking responsibility for the quality, help each other.&nbsp;</span></span></div>
<div>
			&nbsp;</div>
<div>
			<em>Eusebiu Blindu:&nbsp;</em>By starting working in hi-school do you think you got an upper hand in evolving professionally compared with the people who started later?</span></span></div>
<div>
			<strong>Zuzana Sochova:&nbsp;</strong>Well, a little bit I guess. The biggest competitive advantage I got was in realizing how the working in a company can differ from school laboratory environment and team to team as well. So I would say the part tile jobs during my studies both on hi-school and university helped me later in selection of my first full time job.&nbsp;</span></span></div>
<div>
			&nbsp;</div>
<div>
			&nbsp;</div>
<div>
			<em>Eusebiu Blindu:&nbsp;</em>You mentioned that the tester position was under the &quot;real-boss&quot; guy while development looked more loosen-up. Do you think organizations don&#39;t let the same creativity develop in the testing team as in the development team?</span></span></div>
<div>
			<strong>Zuzana Sochova:&nbsp;</strong>This is quite usual pattern (unfortunately) seen in the Czech companies. I didn&rsquo;t observe it so much in our international customers&rsquo; environment (USA, Germany, and Great Britain). But I would say as the automation is getting used more and more often, testing is slowly gaining the importance and the teams are improving, especially in the agile teams. There are indeed some good testing teams in the Czech companies, but still my feeling is there is bigger number of the &lsquo;old-fashioned&rsquo; organizations which either treat tester as &ldquo;poor developer&rdquo; or don&rsquo;t test at all. But it&rsquo;s improving as the times goes, and we try to promote the importance of the tester role and good testing practices at Agile Prague Conference (agileprague.com) I&rsquo;m co-organizing in September.&nbsp;</span></span></div>
<div>
			&nbsp;</div>
<div>
			<em>Eusebiu Blindu:&nbsp;</em>Do you think in Czech Republic the balance between testers and developers is worst than in US/UK for example?</span></span></div>
<div>
			<strong>Zuzana Sochova:&nbsp;</strong>Yes, to my opinion it is. The similar situation I had observed in Latvia for example. But It&rsquo;s improving fast. Part of the problem is the testing was never really taught at universities. The Software Engineering was all about development. Now it&rsquo;s slowly changing, but it needs time.&nbsp;</span></span></div>
<div>
			&nbsp;</div>
<div>
			<em>Eusebiu Blindu:&nbsp;</em>What is the biggest advantage of the &quot;pair work&quot; that you mentioned?&nbsp;</span></span></div>
<div>
			<strong>Zuzana Sochova:&nbsp;</strong>In traditional organized teams where the original roles preserves, the developer makes a code, then send it to tester. When we have waterfall process, they in most cases don&rsquo;t even know each other and the information from the tester has often just limited value saying &ldquo;it&rsquo;s broken&rdquo;. &nbsp;In agile teams, it often ends up as the tester has &ldquo;no work&rdquo; at the beginning of sprint and is overwhelmed by testing in the end. For the team then it is hard to get team commitment and often trying to present untested stories, or keep the testing for next sprints. The solution we take in such teams lets the tester cooperate on the solution directly, testing the functionality already on the fly and discussing with the developer the behavior and scenarios. In other words, there is no sequence development and testing work, it&rsquo;s all in parallel. They must cooperate, and discuss the functionality together.&nbsp;</span></span></div>
<div>
			&nbsp;</div>
<div>
			<em>Eusebiu Blindu:&nbsp;</em>You have like a trademark that attracts curiosity your hair, which is very colorful <img src='http://www.testalways.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' />  Do you think that helps (to have a personal trademark), especially when we need to build a reputation to get clients?&nbsp;</span></span></div>
<div>
			<strong>Zuzana Sochova:&nbsp;</strong>First, I believe it helps to have a personal trademark. There are plenty of same and &lsquo;gray&rsquo; people. I know many well-dressed managers in dark suits and costumes, which would tell you it not acceptable to look different. But it&rsquo;s up to you. It&rsquo;s always your decision. However, it must fit your business I would say. I&rsquo;m changing people and companies, I&rsquo;m learning them to take courage and be different, be Agile. So should I look as traditional old-fashioned manager? &nbsp;I&rsquo;m looking for client who really need change, and need help. And those people don&rsquo;t care so much about your hair color. They are more interested if you are good enough and can help them. And it helps the other way around as well, I don&rsquo;t need to reject clients who just want to pretend some agile activity, they most likely not even contact me <img src='http://www.testalways.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </span></span></div>
<div>
			&nbsp;</div>
<div>
			<em>Eusebiu Blindu:&nbsp;</em>Brno or Prague? <img src='http://www.testalways.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </span></span></div>
<div>
			<strong>Zuzana Sochova:&nbsp;</strong>Well, Prague is nice city, quite small I would say, but I really like it. However I could imagine living in any other bigger city, for example Singapore, New York, Bangkok, Hong Kong, London&hellip; But can&rsquo;t really imagine living in any small town or village. &nbsp;</span></span></div>
<div>
			&nbsp;</div>
<div>
			&nbsp;</div>
<div>
			<em>Eusebiu Blindu:&nbsp;</em>If you have to build and deliver a Rubik&#39;s Cube to a client what Agile approach would you apply?</span></span></div>
<div>
			<strong>Zuzana Sochova:&nbsp;</strong>Hard to say, I guess, I would still use Scrum to get fast feedback, and make sure, the customer likes the material and colors and get instead of normal Rubik&rsquo;s Cube the personalized one which would be awesome and very special to him. &nbsp;</span></span></div>
<div>
			&nbsp;</div>
<p></font></p>
]]></content:encoded>
			<wfw:commentRss>http://www.testalways.com/2012/05/03/agile-testing-days-prequel-with-zuzana-sochova/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Agile Testing Days prequel with Arie van Bennekum</title>
		<link>http://www.testalways.com/2012/05/02/agile-testing-days-prequel-with-arie-van-bennekum/</link>
		<comments>http://www.testalways.com/2012/05/02/agile-testing-days-prequel-with-arie-van-bennekum/#comments</comments>
		<pubDate>Wed, 02 May 2012 17:31:13 +0000</pubDate>
		<dc:creator>Eusebiu Blindu</dc:creator>
				<category><![CDATA[Agile Testing Days prequel]]></category>
		<category><![CDATA[Agile]]></category>
		<category><![CDATA[Agile Testing Days]]></category>
		<category><![CDATA[AgileTD]]></category>
		<category><![CDATA[Arie van Bennekum]]></category>
		<category><![CDATA[Arie van Bennekum interview]]></category>

		<guid isPermaLink="false">http://www.testalways.com/?p=1016</guid>
		<description><![CDATA[      
      &#160; As a prequel to&#160;Agile Testing Days&#160;where I will do my presentation, I am trying to interview the other speakers. Today we have&#160;Arie van Bennekum,&#160;(co-)author of the Agile Manifesto (www.agilemanifesto.org) , Chair of the Agile Consortium International (www.agileconsortium.net).&#160;He is a DSDM Practioner, Trainer, Examiner and Consultant. &#160; Eusebiu Blindu:&#160;How would Arie van Bennekum describe himself [...]]]></description>
			<content:encoded><![CDATA[      
      <p><font size="3" face="lucinda sans"></p>
<p>
			&nbsp;</p>
<p>
			<br />
			<span style="font-family:lucida sans unicode,lucida grande,sans-serif;"><img alt="http://www.testalways.com/wp-content/uploads/2012/04/animated_logo.gif" src="http://www.testalways.com/wp-content/uploads/2012/04/animated_logo.gif" style="float: left; width: 83px; height: 84px; " />As a prequel to&nbsp;<a href="http://www.agiletestingdays.com/">Agile Testing Days</a>&nbsp;where I will do my presentation, I am trying to interview the other speakers. Today we have&nbsp;<a href="http://med.hro.nl/benna/">Arie van Bennekum</a>,&nbsp;(co-)author of the Agile Manifesto (<a href="http://www.agilemanifesto.org/" target="_blank">www.agilemanifesto.org</a>) , Chair of the Agile Consortium International (<a href="http://www.agileconsortium.net/" target="_blank">www.agileconsortium.net</a>).&nbsp;He is a DSDM Practioner, Trainer, Examiner and Consultant.</span></span></p>
<p>
			&nbsp;</p>
<p>
			<em>Eusebiu Blindu:&nbsp;</em>How would Arie van Bennekum describe himself in the context of the testing community and as a person?</span></span></p>
<p>
			<strong>Arie van Bennekum:&nbsp;</strong>My contribution to the Agile Manifesto in February 2011 was DSDM (Atern). In DSDM testing is heavily covered in one of the 9 principles (now there are 8 <img src='http://www.testalways.com/wp-includes/images/smilies/icon_wink.gif' alt=';-)' class='wp-smiley' /> ) and also with 6 separate testing principles. Testing by (amongst others) the end-users gives real using-quality (they know what they need at their fingertips). On top of this is it creates acceptance because people get to know the system. Acceptance gives quality of use. This helps an organization to achieve their objectives. A perfect solution and bad use destroys any objective.</span></span></p>
<p>
			This I know, see and try to make people aware of, both inside and outside the community.</span></span></p>
<p>
			&nbsp;</p>
<p>
			<em>Eusebiu Blindu:&nbsp;</em>How would you shortly define &quot;Agile Testing&quot;?</span></span></p>
<p>
			<strong>Arie van Bennekum:&nbsp;</strong>Testing in an Agile environment should be integrated throughout the project cycle, independent, repeatable and focused both on bugs and achievement of business objectives.</span></span></p>
<p>
			&nbsp;</p>
<p>
			<em>Eusebiu Blindu:&nbsp;</em>Wow! &quot;DSDM&quot;, &quot;Atern&quot;, x number of principles&#8230;. In general we need some sort of guiding. But to do &quot;Agile&quot; do we need to learn every concept that is related to it, or we can manage just with what we think is agile and use no definition?</span></span></p>
<p>
			<strong>Arie van Bennekum:&nbsp;</strong>For me agile is not &#39;do what we like&#39;. The agility is in the flexibility we have to create functionality in the solution vs. a specification up front. To be able to do so agile is a very disciplined process, so yes, we need to know the method (whatever method we use) and work according to it.</span></span></p>
<p>
			&nbsp;</p>
<p>
			<em>Eusebiu Blindu:&nbsp;</em>I have noticed many speakers (at least in testing conferences) from Netherlands. They seem to have the highest number from Europe. Do you agree? Why do you think is that? Do you think they are more motivated?</span></span></p>
<p>
			<strong>Arie van Bennekum:&nbsp;</strong>Don&rsquo;t know numbers but NL is keen on (business) quality. Is requires testing for both bugs (does it work right) and business value (do we achieve to expected benefits)</span></span></p>
<p>
			&nbsp;</p>
<p>
			<em>Eusebiu Blindu:&nbsp;</em>Using wikipedia I see for principle &quot;4. Never compromise quality&quot; &#8211; &quot;test early and continuous&quot;. What does this mean? How early do we need to start testing?</span></span></p>
<p>
			<strong>Arie van Bennekum:&nbsp;</strong>Please check the manual. The basic is that every functionality will get the needed time in testing. When there is time pressure we leave out less important functionality, we do not test less, like most projects do.</span></span></p>
<p>
			&nbsp;</p>
<p>
			<em>Eusebiu Blindu:&nbsp;</em>I guess I just want to know what was the initial motivation for the creation of the manifesto and the events that preceded it. Is it because we need most of the time standards? I mean does we always need someone to officially say &quot;Individuals and interactions over processes and tools&quot;?&nbsp;</span></span></p>
<p>
			<strong>Arie van Bennekum:&nbsp;</strong>Good point, my view is you don&#39;t tie people but you make sure you understand each other and are synchronized. This is why I like frameworks instead of detailed predefined stuff.</span></span></p>
<p>
			&nbsp;</p>
<p>
			<em>Eusebiu Blindu:&nbsp;</em>Do you plan something like the Agile Manifesto in the future? <img src='http://www.testalways.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </span></span></p>
<p>
			<strong>Arie van Bennekum:&nbsp;</strong>Not really but the authors agreed to meet again in 3 years. Who knows what will come out of this <img src='http://www.testalways.com/wp-includes/images/smilies/icon_wink.gif' alt=';-)' class='wp-smiley' /> </span></span></p>
<p>
			&nbsp;</p>
<p>
			<em>Eusebiu Blindu:&nbsp;</em>Is the agile model inspired from something outside the software development world?</span></span></p>
<p>
			<strong>Arie van Bennekum:&nbsp;</strong>It has an origin that is diverse. DSDM has its origin in Rapid Application Development which means software. It has been applied in many since, also outside software development. On top of this, DSDM covers the whole project of the solution development, including processes, user acceptance, etc. I prefer to call for that reason DSDM a solution development framework.</span></span></p>
<p>
			&nbsp;</p>
<p>
			<em>Eusebiu Blindu:&nbsp;</em>Is the agile model currently inspiring areas that are not related to software development?&nbsp;</span></span></p>
<p>
			<strong>Arie van Bennekum:&nbsp;</strong>Yes, you can see all sorts of developments. There is the, maybe logical, connection with Lean. Also in total different areas like pharmacie (oktober Berlin).</span></span></p>
<p>
			&nbsp;</p>
<p>
			<em>Eusebiu Blindu:&nbsp;</em>Is there anything that you don&#39;t like about the way agile is understood/applied from what you have heard or see?</span></span></p>
<p>
			<strong>Arie van Bennekum:&nbsp;</strong>What i would like to see adapted a little is the strong focus on software. I would like to move it to &#39;solution&#39; which includes to whole thing including change, communication, etc. A successful project is the project that helps the organization to achieve business objectives. Software is part of the solution that creates this. We need to do a lot more, it should be done too. BTW, DSDM adds a lot here.</span></span></p>
<p>
			&nbsp;</p>
<p>
			<em>Eusebiu Blindu:&nbsp;</em>&quot;Rapid Application Development&quot; seems like &ldquo;Rapid Software Testing&quot;. I am not sure if the &quot;testing&quot; version was borrowed from it, but this gives me ideas. Do you think it&rsquo;s inspired to adopt other things that are related to &quot;Agile&quot; and insert it into testing?</span></span></p>
<p>
			<strong>Arie van Bennekum:&nbsp;</strong>No, I don&rsquo;t think so. RAD was very poor on testing but had a lot improving actual methods at the time. It brought thinks like user participation, sessions, real prioritizing, prototyping, etc. DSDM structured this, including increasing insight, which RAD was blocking. DSDM also was and is strong on the testing parts i mentioned earlier.</span></span></p>
<p>
			&nbsp;</p>
<p>
			<em>Eusebiu Blindu:&nbsp;</em>And a final question related to your talk at the conference, called &ldquo;Get them in(volved)&rdquo;: can you tell us what to expect from it?</span></span></p>
<p>
			<strong>Arie van Bennekum:&nbsp;</strong>Gehgehgeh, come and watch! It is all about acceptance and quality for business <img src='http://www.testalways.com/wp-includes/images/smilies/icon_smile.gif' alt=':-)' class='wp-smiley' /> </span></span></p>
<p>
			&nbsp;</p>
<p>
			<em>Eusebiu Blindu:&nbsp;</em>Arie, thanks for the time given to answer my (questionable : ) ) questions. Looking forward to meeting you there!</span></span></p>
<p>
			&nbsp;</p>
<p></font></p>
]]></content:encoded>
			<wfw:commentRss>http://www.testalways.com/2012/05/02/agile-testing-days-prequel-with-arie-van-bennekum/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Agile Testing Days prequel with Matt Heusser</title>
		<link>http://www.testalways.com/2012/04/30/agile-testing-days-prequel-with-matt-heusser/</link>
		<comments>http://www.testalways.com/2012/04/30/agile-testing-days-prequel-with-matt-heusser/#comments</comments>
		<pubDate>Mon, 30 Apr 2012 22:44:39 +0000</pubDate>
		<dc:creator>Eusebiu Blindu</dc:creator>
				<category><![CDATA[Agile Testing Days prequel]]></category>
		<category><![CDATA[Agile Testing Days]]></category>
		<category><![CDATA[AgileTD]]></category>
		<category><![CDATA[Matt Heusser]]></category>
		<category><![CDATA[Matt Heusser interview]]></category>

		<guid isPermaLink="false">http://www.testalways.com/?p=1007</guid>
		<description><![CDATA[      
      &#160; &#160; &#160;&#160;As a prequel to Agile Testing Days&#160;where I will do my presentation, I am trying to interview the other speakers. Today we have &#160;Matt &#160;Heusser&#160;, a passionate tester that, among others, does&#160;&#34;This Week in Software Testing&#34; podcast, he is a member and part of Board of Directors at Association for Software Testing&#160;, a&#160;Contributing [...]]]></description>
			<content:encoded><![CDATA[      
      <p><font size="3" face="lucinda sans"></p>
<p>
			<span style="font-size:14px;"><span style="font-family:lucida sans unicode,lucida grande,sans-serif;"><b><img align="left" alt="" src="http://www.testalways.com/wp-content/uploads/2012/04/animated_logo.gif" /></b>&nbsp; &nbsp; &nbsp;&nbsp;As a prequel to <a href="http://www.agiletestingdays.com/">Agile Testing Days</a>&nbsp;where I will do my presentation, I am trying to interview the other speakers. Today we have &nbsp;<a href="http://itknowledgeexchange.techtarget.com/unchartered-waters/">Matt &nbsp;Heusser</a>&nbsp;, a passionate tester that, among others, does&nbsp;&quot;This Week in Software Testing&quot; podcast, he is a member and part of Board of Directors at <a href="http://www.associationforsoftwaretesting.org/">Association for Software Testing</a>&nbsp;, a&nbsp;Contributing Editor at STPCollaborative and he also gave a talk at&nbsp;Google Test Automation Conference&nbsp;in 2007.</p>
<p>
			<em>Eusebiu Blindu</em>:&nbsp;How would Matt Heusser describe himself in the context of the testing community and as a person?</p>
<p>			<strong>Matt Heusser:&nbsp; </strong>Wow, Eusebiu, that&#39;s a tough one.&nbsp; Within the test community, I&#39;m sort of a holistic quality person &#8212; I have done stints as a programmer, project manager, and in test/QA.&nbsp; As a consultant, I tend to focus on the whole delivery process.&nbsp; Within the test community itself I tend to advocate for the tester as a specialized role, with a skills set that is different than the programmer or business analyst, not that they can&#39;t overlap a bit.&nbsp; As a person, I am a writer, husband and father; a great deal of my success in the software community comes from sharing ideas through writing.</p>
<p>			<em>Eusebiu Blindu</em>: Since the conference is called &quot;Agile Testing Days&quot;, can you tell us how would you shortly define &quot;Agile Testing&quot;?</p>
<p>			<strong style="font-family: 'lucida sans unicode', 'lucida grande', sans-serif; font-size: 14px; ">Matt Heusser:&nbsp; </strong>I am not going to get any soft-ball qustions today am I, Eusebiu?&nbsp; (Laughs).&nbsp; Look, the question of What is Agile Testing is challenging on multiple levels.&nbsp; Most importantly, if we write it down, people will tend to canonize the definition, to hold it up as the one right/true process to do testing, and that runs contrary to the spirit of the Agile Manifesto.&nbsp; Of course, that presupposes that there is one right/true definition, and that we can all talk about it without inserting our own experiences and watering down the definition a bit. So it&#39;s a challenge.&nbsp; I mean, how deep do you go?&nbsp; Your one-sentence description is going to have information loss, and your five page description isn&#39;t going to be read by anyone.</p>
<p>			But to answer your question, personally, if I had to give a couple-sentence description of &quot;Agile Testing&quot;, I would say it is a test process designed to plug into an Agile Process as defined by the Agile Manifesto.&nbsp; That means we want to be able to deploy to production much more often than in traditional models and we want to respond to change &#8212; so we have to get very good at risk analysis, at getting a great deal of confidence in the system in a compressed period of time, and we probably want to focus on actually getting things done instead of heavily, over-specialized role definitions.&nbsp; Will that suffice as an answer for now?</p>
<p>			<em>Eusebiu Blindu</em>:&nbsp;Do you apply &quot;Agile Testing&quot; currently and if so, how exactly?</p>
<p>			<strong>Matt Heusser:&nbsp;</strong> As I write this I am currently engaged on-site with a &#39;classic&#39; agile team.&nbsp; The entire team fits in one room, the code is written with 100% pair programming and Test Driven Development, stories are defined up front in a kickoff meeting and generally have an executable acceptance test element, and so on.&nbsp; What my clients might be like in November, of course, is anybody&#39;s guess!&nbsp;</p>
<p>			To answer your question specifically, a lot of my advice and consulting is in the area of dealing with risk, with shrinking the time it takes to get an assessment of the software, with shrinking the &quot;regression test window&quot; (for lack of a better term), with helping teams to adapt to change.&nbsp; So yes, I like to think that what I do is basically Agile-Testing, in the best sense of the term, sure. &nbsp;&nbsp;</p>
<p>			<em>Eusebiu Blindu</em>: Ok, so you say you can&#39;t really put a definition on &quot;Agile&quot; and that has be avoided. But can you make a parallel between &quot;Context Driven&quot; and &quot;Agile&quot;? Its the same, similar or different?</p>
<p>			<strong style="font-family: 'lucida sans unicode', 'lucida grande', sans-serif; font-size: 14px; ">Matt Heusser: &nbsp;</strong>I hope I&#39;ve given you a working definition that is &quot;good enough&quot;, at least. &nbsp;Another definition might be preference for a certain style of working environment, combined with the belief that that preference leads to better outcomes. &nbsp;So when &quot;Agile&quot;-infested people come into a new environment, they have a whole set of prescriptions: Pair Programming! &nbsp;Test Driven Development! &nbsp;Automate the Acceptance Tests &#8211; up front! &nbsp;Story Driven Development! &nbsp;Tear down the cube walls! &nbsp;And so on.</p>
<p>			I identify myself publicly with the&nbsp;<a href="http://context-driven-testing.com/">Context-Driven School of Software Testing</a>, which as a philosophy, is a little different. &nbsp;I would go so far as to say that the first sin of methodology is make a claim like &quot;This worked for me once! &nbsp;Therefore, it should always work for everyone, all the time!&quot; &#8212; that offering a prescription without first examining the patient is not best practice, but instead<em> malpractice</em>.</p>
<p>			So while Agile Testing is a tool in my toolkit, one I am personally fond of, and one use often, there are some circumstances where it may not be appropriate. &nbsp;Before I offer suggestions to an organization, I want to know a great deal about them.</p>
<p>			As you can probably guess, offering training in context-driven testing is a real challenge, because you can&#39;t just tell people what to do. There are several ways around this, including workshops, simulations, and exercises designed to provide people with examples and skills training. &nbsp;With enough data points under your belt, you start of say &quot;oh, this reminds me of project foo. &nbsp;How did that turn out? &nbsp;Would that be acceptable to me on this project?&quot; &#8211; you start to model the dynamics on the project and plan, instead of pulling out a plan from someone else.</p>
<p>			Because it allows different approaches to be valid in different environments, context-driven is sort of a meta-school &#8212; it can swallow up specific methods, as long as they have a &quot;place.&quot; &nbsp;So, for example, I prefer Agile methods for projects done under changing conditions and time pressure, which happens to be the majority of my clients. &nbsp;So I need to know a thing or two about Agile Testing, and Agile Software Development, in order to be effective.</p>
<p>			<em style="font-family: 'lucida sans unicode', 'lucida grande', sans-serif; font-size: 14px; ">Eusebiu Blindu</em>: Liked your answer and the &quot;meta-school&quot; label. You have a tutorial with Pete Wallen and a closing keynote, both with very interesting titles. What should the audience expect from these? Can you give a preview?</p>
<p>			<strong style="font-family: 'lucida sans unicode', 'lucida grande', sans-serif; font-size: 14px; ">Matt Heusser: </strong>The tutorial is going to be about testing.&nbsp; Not management, metrics, templates or automation:&nbsp; <em>Actual</em> testing.&nbsp; That is to say, given a new build, which tests should you run?&nbsp; What are the most powerful tests &#8212; the tests that tell you about the system?&nbsp; Once you have run them, what can you say about the software?&nbsp; What tests should you run next?&nbsp; If you learn something about the software that might impact which tests to run next, how do you adjust?&nbsp; How can you learn those things earlier?</p>
<p>			In order to get the most benefit from our tutorial, we won&#39;t just lecture.&nbsp; Instead, we&#39;ll air-drop the students into a software test environement, actually doing testing, sharing what we learned, covering the next topic, and testing again.</p>
<p>			Yes, you heard right:&nbsp; A test conference session where you actually get out a keyboard and do testing.&nbsp; I know.&nbsp; Who ever heard of a CRAZY idea like that?&nbsp;</p>
<p>			As for the keynote, that one will be about the dynamics on software projects &#8212; how we can structure them to encourage a successful outcome.&nbsp; Or we could structure them so that everyone is competing and encourage to hide information.&nbsp; I&#39;ll be covering this from within the general framework of Game Theory, that mostly came out of mathematics, where I did my undergraduate work.</p>
<p>			<em style="font-family: 'lucida sans unicode', 'lucida grande', sans-serif; font-size: 14px; ">Eusebiu Blindu</em>: What is your current focus related to testing besides work? What is your plan for the next period?</p>
<p>			<strong style="font-family: 'lucida sans unicode', 'lucida grande', sans-serif; font-size: 14px; ">Matt Heusser:</strong> My main focus is on how organizations deliver software, and how to do it well &#8211; how to make better decisions in the moment, throw away the stuff that slows us down, and do more of the stuff that speeds us up.&nbsp; Along those lines, I have a preference towards exploratory methods, so I&#39;m curious who is using how much exploratory testing to do what.&nbsp; By exploratory, I mean a lot more than exploratory testing; I&#39;m talking about how the teams are organized, how the work flows, how people are spending their time.</p>
<p>			Toward the test side, I&#39;ve spent about nine months working with a group where the whole team creates examples, that the&nbsp; programmers automate as part of the development effort, using a tool like Fitnesse or RSpec.&nbsp; Once those examples are automated, you have a very powerful domain specific language (DSL).&nbsp; In some cases, I have seen testers reproduce defects from the field by modifying those old executable specifications &#8212; when this happens, they can turn a failing automated check over to the programmers to fix.&nbsp; I think that&#39;s a good thing.&nbsp; I am interested in what kinds of envrionments are fertile for that kind of approach, and the idea often falls down as it is transferred from person to person.</p>
<p>			I am also using more tools to blend human, exploratory approaches with more traditional automation approaches &#8212; both things like the kind of model-driven approach that Harry Robinson recommends, and building better stubs, drives, and hooks into the software so testers can explore (or randomize input).&nbsp; Testing complex GUIs, and just plain complex and high-volume systems, continues to be on my radar.</p>
<p>			As I implied before, my focus seems to be shifting toward the entire delivery process and how to do it better.&nbsp; Some folks call that work &quot;Organizational Transformation&quot;, and I haven&#39;t found a better term yet.&nbsp; Basically, I think most software teams can get better performance by restructuring the way they take in and do work.&nbsp; My test work is probably the most visible, but you can apply the same thing to all aspects of software delivery, including the results, the real thing the customers are buying.&nbsp; To put that another way, if the customer could get the same results without buying your software, of course they would.&nbsp; So I care about the value delivery process, not just software.</p>
<p>			<em style="font-family: 'lucida sans unicode', 'lucida grande', sans-serif; font-size: 14px; ">Eusebiu Blindu</em>: By the way, how did you get into testing?</p>
<p>			<strong style="font-family: 'lucida sans unicode', 'lucida grande', sans-serif; font-size: 14px; ">Matt Heusser:</strong>&nbsp; That&#39;s a long story, Eusebiu.&nbsp; I&#39;ll try to answer it quickly.&nbsp; When I started my career, I was a programmer, at a company with thirty employees; perhaps twenty-five of us were programmers.&nbsp; We had no testers, no business analysts, just a bunch of programmers, a couple managers, two guys in sales, and a receptionist.&nbsp; In other words, I had no safety net.&nbsp; I had to learn about testing, to deliver high-quality code to the customer.&nbsp; I was scared.</p>
<p>			So I learned.</p>
<p>			I went to school at night for my masters, and studied testing.&nbsp; I read books, I went to conferences.&nbsp; Half-way through my career, I moved to a larger company with a few specialities, but still no testers. People noticed that I had an interest in testing, and I started to help out on projects that were not my own.&nbsp; My business card still said &quot;programmer&quot; (and later &quot;project manager&quot;), but, by 2005 or so, I self-identified myself as a tester.</p>
<p>			When I left to go work for Socialtext, they had an HR change during the interview process.&nbsp; The CEO told me that they no longer had the test manager position open, but would I like to be a programmer?&nbsp; I remember replying &quot;Why would I want that?&nbsp; I can be a programmer right now.&quot;</p>
<p>			They ended up making an opening for me in test anyway.&nbsp; The rest, as they say, is history.</p>
<p>			That&#39;s the short version.&nbsp; I&#39;ll be happy to tell a longer story at the conference. <img src='http://www.testalways.com/wp-includes/images/smilies/icon_smile.gif' alt=':-)' class='wp-smiley' /> </p>
<p>
			<em style="font-family: 'lucida sans unicode', 'lucida grande', sans-serif; font-size: 14px; ">Eusebiu Blindu</em>: Oh, thanks for the interview. I can&#39;t wait to meet you at the conference and get that story! <img src='http://www.testalways.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </span></span></p>
<p>
			&nbsp;</p>
<p></font></p>
]]></content:encoded>
			<wfw:commentRss>http://www.testalways.com/2012/04/30/agile-testing-days-prequel-with-matt-heusser/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Benford&#8217;s law</title>
		<link>http://www.testalways.com/2012/04/13/benfords-law/</link>
		<comments>http://www.testalways.com/2012/04/13/benfords-law/#comments</comments>
		<pubDate>Fri, 13 Apr 2012 13:40:09 +0000</pubDate>
		<dc:creator>Eusebiu Blindu</dc:creator>
				<category><![CDATA[General]]></category>
		<category><![CDATA[Benford's law]]></category>

		<guid isPermaLink="false">http://www.testalways.com/?p=866</guid>
		<description><![CDATA[      
      I am trying to find some use of the Benford&#8217;s law in testing. “Benford&#8217;s law, also called the first-digit law, states that in lists of numbers from many (but not all) real-life sources of data, the leading digit is distributed in a specific, non-uniform way. According to this law, the first digit is 1 about 30% of the [...]]]></description>
			<content:encoded><![CDATA[      
      <p>I am trying to find some use of the <a href="http://en.wikipedia.org/wiki/Benford_law">Benford&#8217;s law</a> in testing.</p>
<p>“Benford&#8217;s law, also called the first-digit law, states that in lists of numbers from many (but not all) real-life sources of <a href="http://data/">data</a>, the leading digit is distributed in a specific, non-uniform way. According to this law, the first digit is 1 about 30% of the time, and larger digits occur as the leading digit with lower and lower frequency, to the point where 9 as a first digit occurs less than 5% of the time. This distribution of first digits is the same as the widths of gridlines on the <a href="http://scale/">logarithmic scale</a>. Benford&#8217;s law also gives the expected distribution for digits beyond the first, which approach a uniform distribution as the digit place goes to the right.” –wikipedia</p>
<p>I thought I found a solution when googling by “1”,”2”,”3” or “one”, “two”, “three” or using even quotes for the same searches to be the exact match. But then I realized that I can hit a search result containing “two hundred and twenty one” when searching for “one” so I am very far from applying the principle in a relevant way.</p>
<p><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1J312BHwLAahTy4Nn4IwXMjuIsBTySZ0" alt="" width="624" height="468" /></p>
<p>Well it seems to make some sense though based on the graph, so maybe it’s some sort of applicable variation.</p>
<p>But let’s try something more relevant:</p>
<p>List of countries by number of mobile phones in use</p>
<p><a href="http://en.wikipedia.org/wiki/List_of_countries_by_number_of_mobile_phones_in_use">http://en.wikipedia.org/wiki/List_of_countries_by_number_of_mobile_phones_in_use</a></p>
<p><a href="http://en.wikipedia.org/wiki/List_of_countries_by_number_of_mobile_phones_in_use"></a></p>
<table border="1" cellspacing="1" cellpadding="1">
<tbody>
<tr>
<td>1</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1znGj2vJe49CA0X0NabrPJGrEvSDWiAo" alt="" width="22" height="15" /> <a href="http://china/">China</a></td>
<td>1,010,000,000</td>
</tr>
<tr>
<td>2</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=19O7Zam5hPuiBeDy_yjNPUgYEi9iiEnM" alt="" width="22" height="15" /> <a href="http://india/">India</a></td>
<td>911,168,193</td>
</tr>
<tr>
<td>3</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1XHr5AEnr2mFivb6-vYTiB9BOPasGOqw" alt="" width="22" height="12" /> <a href="http://states/">United States</a></td>
<td>327,577,529</td>
</tr>
<tr>
<td>4</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1kVT7jkUVPORQ8KyjpYnR-PeW7l6WlXs" alt="" width="22" height="15" /> <a href="http://indonesia/">Indonesia</a></td>
<td>250,100,000</td>
</tr>
<tr>
<td>5</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1Z6HkCwQS--a5QCSpP3Qm58AYLQ6xZHo" alt="" width="22" height="15" /> <a href="http://brazil/">Brazil</a></td>
<td>245,200,000</td>
</tr>
<tr>
<td>6</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1OxacijwdvdicLwSQ75RLsepAymR7uIE" alt="" width="22" height="15" /> <a href="http://russia/">Russia</a></td>
<td>224,260,000</td>
</tr>
<tr>
<td>7</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=12jFjHX0uKs8eRlZSuVhlNZmaGd8-f6A" alt="" width="22" height="15" /> <a href="http://japan/">Japan</a></td>
<td>121,246,700</td>
</tr>
<tr>
<td>8</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=13bGMYm2sDFfRxaKEyg-HdGOPpaoeFSE" alt="" width="22" height="15" /> <a href="http://pakistan/">Pakistan</a></td>
<td>114,610,000</td>
</tr>
<tr>
<td>9</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1_r73hi2h0rU-Sabhukdo93tEDqDmYRU" alt="" width="22" height="13" /> <a href="http://germany/">Germany</a></td>
<td>107,000,000</td>
</tr>
<tr>
<td>10</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1dQZjqVK4OewS9FhVFeMI3HxTsyZ_dWY" alt="" width="22" height="11" /> <a href="http://nigeria/">Nigeria</a></td>
<td>90,583,306</td>
</tr>
<tr>
<td>11</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=18ieYSPMwm96SMRp0f-c5XbNB837817A" alt="" width="22" height="13" /> <a href="http://mexico/">Mexico</a></td>
<td>88,797,186</td>
</tr>
<tr>
<td>12</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1kkqRTdvELSzCInSZc6MFuYdJxLuiR3w" alt="" width="22" height="15" /> <a href="http://italy/">Italy</a></td>
<td>88,580,000</td>
</tr>
<tr>
<td>13</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1mdkjp4uAR9EnQUvINSZJy4NQUJ5xsEI" alt="" width="22" height="13" /> <a href="http://bangladesh/">Bangladesh</a></td>
<td>86,550,000</td>
</tr>
<tr>
<td>14</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1Si-nQQHXt3CYLPFNMQ6PNNYsYJ4XhDM" alt="" width="22" height="11" /> <a href="http://philippines/">Philippines</a></td>
<td>86,000,000</td>
</tr>
<tr>
<td>15</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1tIMIgIKgzP0ibp3DWmagc9gQqVgQG-o" alt="" width="22" height="11" /> <a href="http://kingdom/">United Kingdom</a></td>
<td>75,750,000</td>
</tr>
<tr>
<td>16</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=10QsHrhGG6wwG9TF0SA1A59AatfEhoxY" alt="" width="22" height="15" /> <a href="http://vietnam/">Vietnam</a></td>
<td>72,300,000</td>
</tr>
<tr>
<td>17</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1ypFBIkrWnUemydGsF8og1LQxqRwI6ww" alt="" width="22" height="15" /> <a href="http://egypt/">Egypt</a></td>
<td>71,460,000</td>
</tr>
<tr>
<td>18</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1ziEq2Oq4apE00PNp3GKTgm03gguUh8M" alt="" width="22" height="15" /> <a href="http://turkey/">Turkey</a></td>
<td>66,000,000</td>
</tr>
<tr>
<td>19</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1SSDAqpKsnQm7DS-03aVZVc1dE6548Hc" alt="" width="22" height="15" /> <a href="http://france/">France</a></td>
<td>58,730,000</td>
</tr>
<tr>
<td>20</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1C8GUFjJoAqX_kIsC1B815gqt-qMflxs" alt="" width="22" height="15" /> <a href="http://thailand/">Thailand</a></td>
<td>69,000,000</td>
</tr>
<tr>
<td>21</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1O2zhKDCjOuDx2wp28bTv2dBXiOMCND4" alt="" width="22" height="13" /> <a href="http://iran/">Iran</a></td>
<td>68,000,000</td>
</tr>
<tr>
<td>22</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1jg9kb8PMzpAYdOwmQDXt3lSQb3eqK48" alt="" width="22" height="15" /> <a href="http://ukraine/">Ukraine</a></td>
<td>54,377,000</td>
</tr>
<tr>
<td>23</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1qIQCRoC_zT_du4feo0g8Kbf2spjvEzI" alt="" width="22" height="15" /> <a href="http://korea/">South Korea</a></td>
<td>52,510,000</td>
</tr>
<tr>
<td>23</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1NjRoHdPcyrAdKNHi7m3FVqwboKDdSI8" alt="" width="22" height="15" /> <a href="http://spain/">Spain</a></td>
<td>50,890,000</td>
</tr>
<tr>
<td>25</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1c0NPqNXghdRgjLoJLohDWvHFt3Y3zTc" alt="" width="22" height="14" /> <a href="http://argentina/">Argentina</a></td>
<td>50,409,800</td>
</tr>
<tr>
<td>26</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1NLo5XO6dvtALm-wzyyNd9W_QOL8QupA" alt="" width="22" height="14" /> <a href="http://poland/">Poland</a></td>
<td>47,153,200</td>
</tr>
<tr>
<td>27</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1l1IB91A3H88nFpCZ7pL1qI9LbXNNL04" alt="" width="22" height="15" /> <a href="http://colombia/">Colombia</a></td>
<td>46,147,937</td>
</tr>
<tr>
<td>28</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1ztAgYggNRGnMzLSzBCZLOI3LPLcvKEM" alt="" width="22" height="15" /> <a href="http://africa/">South Africa</a></td>
<td>42,300,000</td>
</tr>
<tr>
<td>29</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1Bj0mHnKmL_EtbTVpLWwTytrAe0hwht0" alt="" width="22" height="15" /> <a href="http://algeria/">Algeria</a></td>
<td>33,000,000</td>
</tr>
<tr>
<td>30</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1K4zWp2HnUPz-QFNwfEqoFTsvgjt_tiw" alt="" width="22" height="15" /> <a href="http://venezuela/">Venezuela</a></td>
<td>27,400,000</td>
</tr>
<tr>
<td>31</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1GGMldwXoI8skp4t68ETqyroCq9UwSDY" alt="" width="22" height="15" /> <a href="http://peru/">Peru</a></td>
<td>27,100,000</td>
</tr>
<tr>
<td>32</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1Yt94Jhry3-hlGPeeSe4FeRQxzjt-ES8" alt="" width="22" height="15" /> <a href="http://taiwan/">Taiwan</a></td>
<td>25,412,000</td>
</tr>
<tr>
<td>33</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=16xhvHLMneW0byMi1VKdmMDpMA5hU77o" alt="" width="22" height="15" /> <a href="http://romania/">Romania</a></td>
<td>22,800,000</td>
</tr>
<tr>
<td>34</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1QtF0CIGpzrLgP35JfnTaGorQLMYPopI" alt="" width="22" height="11" /> <a href="http://canada/">Canada</a></td>
<td>25,543,862</td>
</tr>
<tr>
<td>35</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1NncktbsXjaWNp81C-JhXOzGheocx2Nw" alt="" width="22" height="15" /> <a href="http://morocco/">Morocco</a></td>
<td>27,050,000</td>
</tr>
<tr>
<td>36</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1er4ImQx5bE0T5rBMbYmkIkw6O2_U12c" alt="" width="22" height="15" /> <a href="http://netherlands/">Netherlands</a></td>
<td>20,000,000</td>
</tr>
<tr>
<td>37</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1wmfHW1IlyTF719-YnoMdHMtE5_gTbnk" alt="" width="22" height="11" /> <a href="http://australia/">Australia</a></td>
<td>21,260,000</td>
</tr>
<tr>
<td>38</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1xj5nl-MSVIqC2HaZ4ikQYx1Dy63_THc" alt="" width="22" height="15" /> <a href="http://arabia/">Saudi Arabia</a></td>
<td>46,000,000</td>
</tr>
<tr>
<td>39</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1rBBFDc-X_pRyU5qtWCyd755a_WEuq7s" alt="" width="22" height="11" /> <a href="http://malaysia/">Malaysia</a></td>
<td>30,379,000</td>
</tr>
<tr>
<td>40</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1SyPz9_R0DHrrZvWDPSPPsxKpojOQq7c" alt="" width="22" height="15" /> <a href="http://chile/">Chile</a></td>
<td>21,000,000</td>
</tr>
<tr>
<td>41</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1q6A3V1AS2bBX1RU5EvgihtiuDsYWzbY" alt="" width="22" height="14" /> <a href="http://guatemala/">Guatemala</a></td>
<td>17,571,895</td>
</tr>
<tr>
<td>42</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1vBV6WkD4n5SrLaJPCThD4aEc0SrlID8" alt="" width="22" height="11" /> <a href="http://lanka/">Sri Lanka</a></td>
<td>17,359,312</td>
</tr>
<tr>
<td>43</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=18P0C98xGft-euM6GIalkOuVJeHDacNw" alt="" width="22" height="15" /> <a href="http://ecuador/">Ecuador</a></td>
<td>15,900,000</td>
</tr>
<tr>
<td>44</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1gtAH99MvifeaA3X4JoXafK6maal4cwU" alt="" width="22" height="15" /> <a href="http://portugal/">Portugal</a></td>
<td>14,500,000</td>
</tr>
<tr>
<td>45</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1hpqI48EW7cQ8G6I0I8gs79ID8ArmAWk" alt="" width="16" height="20" /> <a href="http://nepal/">Nepal</a></td>
<td>14,240,670</td>
</tr>
<tr>
<td>46</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1aSztXHouUQsmrFJa05PP5H2fiFAZmf4" alt="" width="22" height="15" /> <a href="http://kong/">Hong Kong</a></td>
<td>13,264,896</td>
</tr>
<tr>
<td>47</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1KyecMHGaS2edEv-fNdfWV2n4Hz0EO8A" alt="" width="22" height="15" /> <a href="http://belgium/">Belgium</a></td>
<td>11,822,000</td>
</tr>
<tr>
<td>48</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1mzHzhzXaDW9j4NoV2LoHvfAiEPoMJvY" alt="" width="22" height="11" /> <a href="http://hungary/">Hungary</a></td>
<td>11,833,000</td>
</tr>
<tr>
<td>49</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1exLMJCbdrl4jWgiG6ut9oOO7uRyqc0w" alt="" width="22" height="11" /> <a href="http://emirates/">United Arab Emirates</a></td>
<td>11,540,040</td>
</tr>
<tr>
<td>50</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1PMsxlk6SdQi3qPIMDzzgutc6CaHe4b0" alt="" width="22" height="13" /> <a href="http://bulgaria/">Bulgaria</a></td>
<td>10,655,000</td>
</tr>
<tr>
<td>51</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1KqNz9--jd2DFD0PhiMxUIDLj8j5HMpU" alt="" width="22" height="16" /> <a href="http://israel/">Israel</a></td>
<td>9,319,000</td>
</tr>
<tr>
<td>52</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1OjBElQ2cfQgSTqDBcHUIOPepU9VxFDk" alt="" width="22" height="17" /> <a href="http://denmark/">Denmark</a></td>
<td>7,000,000</td>
</tr>
<tr>
<td>53</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1RemSvTsmzU4OiARgx8e2km1V9IqKXWY" alt="" width="22" height="11" /> <a href="http://azerbaijan/">Azerbaijan</a></td>
<td>7,000,000</td>
</tr>
<tr>
<td>54</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1HJ5FAGhl_EeeaZk7Xd6XJUtN1AhztV0" alt="" width="22" height="11" /> <a href="http://jordan/">Jordan</a></td>
<td>6,010,000</td>
</tr>
<tr>
<td>55</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=12Lg75UelvD-p-5jkvkq61r5NVBshcl0" alt="" width="22" height="15" /> <a href="http://singapore/">Singapore</a></td>
<td>7,289,000</td>
</tr>
<tr>
<td>56</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1gW2gTFUEBKfEY7kVlw88HYiqTS4Wpc8" alt="" width="22" height="11" /> <a href="http://zealand/">New Zealand</a></td>
<td>4,620,000</td>
</tr>
<tr>
<td>57</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1ho3jz6FgiX8TclwKWszi5hrTe6I7Xy4" alt="" width="22" height="14" /> <a href="http://estonia/">Estonia</a></td>
<td>1,982,000</td>
</tr>
<tr>
<td>58</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=13nKY_C9r3OgD3VqqMFzCEl7Os-TlkDc" alt="" width="22" height="15" /> <a href="http://lebanon/">Lebanon</a></td>
<td>2,720,000</td>
</tr>
<tr>
<td>59</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1wA56vx4Ab7Jx1kewPZQ5fkzoQBxSn6g" alt="" width="22" height="13" /> <a href="http://lithuania/">Lithuania</a></td>
<td>4,960,000</td>
</tr>
<tr>
<td>60</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1DXkBAb9CdvC4MBxF8d3HEPanHvqRmhk" alt="" width="22" height="11" /> <a href="http://montenegro/">Montenegro</a></td>
<td>1,294,167</td>
</tr>
<tr>
<td>61</td>
<td><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1IfM082jWFsgtl1wKTeJOo7MmW92WhoY" alt="" width="22" height="11" /> <a href="http://korea/">North Korea</a></td>
<td>1,000,000</td>
</tr>
</tbody>
</table>
<p>Starting digits for the number of mobile phones in this list:</p>
<table border="1" cellspacing="1" cellpadding="1">
<tbody>
<tr>
<td>Starting digit</td>
<td>Occurrences</td>
<td>Percent</td>
</tr>
<tr>
<td>1</td>
<td>17</td>
<td>27</td>
</tr>
<tr>
<td>2</td>
<td>13</td>
<td>21</td>
</tr>
<tr>
<td>3</td>
<td>3</td>
<td>4</td>
</tr>
<tr>
<td>4</td>
<td>6</td>
<td>9</td>
</tr>
<tr>
<td>5</td>
<td>5</td>
<td>8</td>
</tr>
<tr>
<td>6</td>
<td>4</td>
<td>6</td>
</tr>
<tr>
<td>7</td>
<td>6</td>
<td>9</td>
</tr>
<tr>
<td>8</td>
<td>4</td>
<td>6</td>
</tr>
<tr>
<td>9</td>
<td>3</td>
<td>4</td>
</tr>
</tbody>
</table>
<p><img src="https://docs.google.com/a/testalways.com/document/pubimage?id=1b1mRsF0TEc91K_Qyz_RP-y7wT9gt16y7D0ODSuf89Wg&amp;image_id=1eqxqFbRph_AO8iQ2rq_LsoU3st9IRh4" alt="" width="624" height="468" /></p>
<p>Considering that the data sample has only 61 records and for the first digits we have a success, I think its “relevant enough” and the example is “acceptable”.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.testalways.com/2012/04/13/benfords-law/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>13 tips for testing web upload</title>
		<link>http://www.testalways.com/2012/03/25/100-tips-for-testing-web-upload/</link>
		<comments>http://www.testalways.com/2012/03/25/100-tips-for-testing-web-upload/#comments</comments>
		<pubDate>Sun, 25 Mar 2012 10:47:12 +0000</pubDate>
		<dc:creator>Eusebiu Blindu</dc:creator>
				<category><![CDATA[General]]></category>

		<guid isPermaLink="false">http://www.testalways.com/?p=832</guid>
		<description><![CDATA[      
      body { font-family: arial, sans, sans-serif; margin: 0; } iframe { border: 0; frameborder: 0; height: 100%; width: 100%; } #header, #footer { background: #f0f0f0; padding: 10px 10px; } #header { border-bottom: 1px #ccc solid; } #footer { border-top: 1px #ccc solid; border-bottom: 1px #ccc solid; font-size: 13; } #contents { margin: 6px; } .dash [...]]]></description>
			<content:encoded><![CDATA[      
      <style type="text/css">
      body {
        font-family: arial, sans, sans-serif;
        margin: 0;
      }</p>
<p>      iframe {
        border: 0;
        frameborder: 0;
        height: 100%;
        width: 100%;
      }</p>
<p>      #header, #footer {
        background: #f0f0f0;
        padding: 10px 10px;
      }</p>
<p>      #header {
        border-bottom: 1px #ccc solid;
      }</p>
<p>      #footer {
        border-top: 1px #ccc solid;
        border-bottom: 1px #ccc solid;
        font-size: 13;
      }</p>
<p>      #contents {
        margin: 6px;
      }</p>
<p>      .dash {
        padding: 0 6px;
      }
    </style>
<div id="contents">
<style type="text/css">@import url('https://themes.googleusercontent.com/fonts/css?kit=wAPX1HepqA24RkYW1AuHYA');ol{margin:0;padding:0}p{margin:0}.c15{vertical-align:top;width:648pt;border-style:solid;border-color:#000000;border-width:1pt;padding:5pt 5pt 5pt 5pt}.c10{vertical-align:top;width:655.5pt;border-style:solid;border-color:#000000;border-width:1pt}.c0{vertical-align:top;width:658.8pt;border-style:solid;border-color:#000000;border-width:1pt}.c18{vertical-align:top;width:657pt;border-style:solid;border-color:#000000;border-width:1pt}.c12{vertical-align:top;width:654pt;border-style:solid;border-color:#000000;border-width:1pt}.c19{max-width:648pt;background-color:#ffffff;padding:72pt 72pt 72pt 72pt}.c1{font-size:14pt;font-family:Verdana;font-weight:bold}.c3{line-height:1.0;direction:ltr;padding-bottom:0pt}.c17{color:#555555;font-size:9pt;font-family:Verdana}.c20{color:#009933;font-weight:bold}.c2{font-size:14pt;font-family:Verdana}.c7{color:inherit;text-decoration:inherit}.c16{font-family:Arial}.c8{height:11pt}.c5{height:0pt}.c6{border-collapse:collapse}.c4{text-decoration:underline}.c11{font-style:italic}.c9{direction:ltr}.c14{height:36pt}.c13{color:#0000ff}.title{padding-top:12pt;line-height:1.15;text-align:center;color:#000000;font-size:16pt;font-family:Arial;font-weight:bold;padding-bottom:3pt}.subtitle{padding-top:0pt;line-height:1.15;text-align:center;color:#000000;font-size:11pt;font-family:Arial;padding-bottom:3pt}body{color:#000000;font-size:11pt;font-family:Calibri}h1{padding-top:12pt;line-height:1.15;text-align:left;color:#000000;font-size:16pt;font-family:Arial;font-weight:bold;padding-bottom:3pt}h2{padding-top:12pt;line-height:1.15;text-align:left;color:#000000;font-style:italic;font-size:14pt;font-family:Arial;font-weight:bold;padding-bottom:3pt}h3{padding-top:12pt;line-height:1.15;text-align:left;color:#000000;font-size:13pt;font-family:Arial;font-weight:bold;padding-bottom:3pt}h4{padding-top:12pt;line-height:1.15;text-align:left;color:#000000;font-size:14pt;font-family:Calibri;font-weight:bold;padding-bottom:3pt}h5{padding-top:12pt;line-height:1.15;text-align:left;color:#000000;font-style:italic;font-size:13pt;font-family:Calibri;font-weight:bold;padding-bottom:3pt}h6{padding-top:12pt;line-height:1.15;text-align:left;color:#000000;font-size:11pt;font-family:Calibri;font-weight:bold;padding-bottom:3pt}</style>
<p class="c9"><span class="c2">      I thought of sharing some general tips for when testing the upload functionality of a web application. It’s focused on security issues, because upload is one of the inputs into the system and it’s used by hackers quite often. Now of course every application it’s different and not all are applicable every time and everywhere, but it can give useful ideas.</span></p>
<p class="c9"><span class="c2">      </span><span class="c2 c11">Please add your comments with other tips and I will add it to the list.</span></p>
<p class="c8 c9"><span class="c2 c11"></span></p>
<p class="c8 c9"><span class="c16"></span></p>
<table cellpadding="0" cellspacing="0" class="c6">
<tbody>
<tr class="c5">
<td class="c12">
<p class="c3"><span class="c1">Tip1</span><span class="c2">: </span><span class="c2 c4">Php injection – use “Knull shell”</span></p>
<p class="c3"><span class="c2">   It’s a php script, you can get it here </span><span class="c2 c4 c13"><a class="c7" href="https://code.google.com/p/knull-shell">https://code.google.com/p/</a></span><span class="c1 c4 c13"><a class="c7" href="https://code.google.com/p/knull-shell">knull</a></span><span class="c2 c4 c13"><a class="c7" href="https://code.google.com/p/knull-shell">-</a></span><span class="c1 c4 c13"><a class="c7" href="https://code.google.com/p/knull-shell">shell</a></span><span class="c16 c20">  </span><span class="c2">or you can unzip it from </span><span class="c2 c4 c13"><a class="c7" href="http://www.testalways.com/wp-content/uploads/2012/03/knull-shellv1-beta.zip">here</a></span><span class="c2">. The idea is to try to upload this script and check if you can execute it once it’s on the web app to hack.</span></p>
</td>
</tr>
</tbody>
</table>
<p class="c9"><span class="c2">      </span></p>
<table cellpadding="0" cellspacing="0" class="c6">
<tbody>
<tr class="c5">
<td class="c10">
<p class="c3"><span class="c1">Tip2</span><span class="c2">: </span><span class="c2 c4">Upload large amount of content</span></p>
<p class="c3"><span class="c2">    If there is no validation to the file size or to the number of files to be uploaded and there is not captcha, you can fill the server that handles the web app much more easily. This can be problematic to a hack with continuous upload or just when dealing with a large amount or users.</span></p>
</td>
</tr>
</tbody>
</table>
<p class="c8 c9"><span class="c2"></span></p>
<table cellpadding="0" cellspacing="0" class="c6">
<tbody>
<tr class="c5">
<td class="c18">
<p class="c3"><span class="c1">Tip3</span><span class="c2">: </span><span class="c2 c4">What happens after the upload</span></p>
<p class="c3"><span class="c2">    Once uploaded a file, you can see the new location of its storage. You can use that URL to guide you to find other stored files that normally you should not be authorized to see.</span></p>
</td>
</tr>
</tbody>
</table>
<p class="c8 c9"><span class="c2"></span></p>
<table cellpadding="0" cellspacing="0" class="c6">
<tbody>
<tr class="c5">
<td class="c0">
<p class="c3"><span class="c1">Tip4</span><span class="c2">: </span><span class="c2 c4">Different type of injection using the filename</span></p>
<p class="c3"><span class="c2">    Use file names that can cause a malfunction. Even if the upload it’s ok with it, maybe after another processing action (renaming of the file) it can show problems. Example: “ </span><span class="c1">&#39; or &#39;1&#39;=&#39;1&#39; &#8212; &#39;;.jpg</span><span class="c2">  “  </span></p>
</td>
</tr>
</tbody>
</table>
<p class="c8 c9"><span class="c2"></span></p>
<table cellpadding="0" cellspacing="0" class="c6">
<tbody>
<tr class="c5">
<td class="c0">
<p class="c3"><span class="c1">Tip5</span><span class="c2">: </span><span class="c2 c4">Upload files with long names</span></p>
</td>
</tr>
</tbody>
</table>
<p class="c8 c9"><span class="c2 c4"></span></p>
<table cellpadding="0" cellspacing="0" class="c6">
<tbody>
<tr class="c5">
<td class="c0">
<p class="c3"><span class="c1">Tip6</span><span class="c2">: </span><span class="c2 c4">Upload files with special chars</span></p>
</td>
</tr>
</tbody>
</table>
<p class="c8 c9"><span class="c2 c4"></span></p>
<table cellpadding="0" cellspacing="0" class="c6">
<tbody>
<tr class="c5">
<td class="c0">
<p class="c3"><span class="c1">Tip7</span><span class="c2">: </span><span class="c2 c4">Upload files to test the boundaries of size limits</span></p>
</td>
</tr>
</tbody>
</table>
<p class="c8 c9"><span class="c2 c4"></span></p>
<table cellpadding="0" cellspacing="0" class="c6">
<tbody>
<tr class="c5">
<td class="c0">
<p class="c3"><span class="c1">Tip8</span><span class="c2">: </span><span class="c2 c4">Test the format validation</span></p>
<p class="c3"><span class="c2">  In some cases there is no validation for the file format validation. In other there is only a validation based on file extension. In other the uploaded files are analyzed.</span></p>
</td>
</tr>
</tbody>
</table>
<p class="c8 c9"><span class="c2"></span></p>
<table cellpadding="0" cellspacing="0" class="c6">
<tbody>
<tr class="c5">
<td class="c0">
<p class="c3"><span class="c1">Tip9</span><span class="c2">: </span><span class="c2 c4">Upload the same file multiple times</span></p>
<p class="c3"><span class="c2">   What happens then? What happens to new file? What happens to old files?</span></p>
</td>
</tr>
</tbody>
</table>
<p class="c8 c9"><span class="c2"></span></p>
<table cellpadding="0" cellspacing="0" class="c6">
<tbody>
<tr class="c5">
<td class="c0">
<p class="c3"><span class="c1">Tip10</span><span class="c2">: </span><span class="c2 c4">Test upload performance</span></p>
<p class="c3"><span class="c2">  Check the speed of the upload</span></p>
</td>
</tr>
</tbody>
</table>
<p class="c8 c9"><span class="c2"></span></p>
<table cellpadding="0" cellspacing="0" class="c6">
<tbody>
<tr class="c5">
<td class="c0">
<p class="c3"><span class="c1">Tip11</span><span class="c2">: </span><span class="c2 c4">Upload files like “index.php&quot; or “.htaccess”</span></p>
</td>
</tr>
</tbody>
</table>
<p class="c8 c9"><span class="c2 c4"></span></p>
<table cellpadding="0" cellspacing="0" class="c6">
<tbody>
<tr class="c14">
<td class="c0">
<p class="c3"><span class="c1">Tip12</span><span class="c2">: </span><span class="c2 c4">Try to upload if you are logged out or upload for a different user/role</span></p>
<p class="c3 c8"><span class="c2 c4"></span></p>
<p class="c3 c8"><span class="c2 c4"></span></p>
</td>
</tr>
</tbody>
</table>
<p class="c8 c9"><span class="c2"></span></p>
<table cellpadding="0" cellspacing="0" class="c6">
<tbody>
<tr>
<td class="c15">
<p class="c3"><span class="c1">Tip13</span><span class="c2">: </span><span class="c2 c4">Use the Null Byte in the upload</span></p>
<p class="c3"><span class="c2">  Use it in file name “</span><span class="c17">test.php%00.jpg</span><span class="c2">” but also in the content or any variation that might seem relevant.</span></p>
</td>
</tr>
</tbody>
</table>
<p class="c8 c9"><span class="c2"></span></p>
<p class="c8 c9"><span class="c2"></span></p>
<table cellpadding="0" cellspacing="0" class="c6">
<tbody></tbody>
</table>
<p class="c8 c9"><span class="c2"></span></p>
<p class="c8 c9"><span class="c2"></span></p>
</div>
<div id="footer"><span class="dash">&ndash;</span></div>
]]></content:encoded>
			<wfw:commentRss>http://www.testalways.com/2012/03/25/100-tips-for-testing-web-upload/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>Czech Test in Prague</title>
		<link>http://www.testalways.com/2012/03/03/czech-test-in-prague/</link>
		<comments>http://www.testalways.com/2012/03/03/czech-test-in-prague/#comments</comments>
		<pubDate>Sat, 03 Mar 2012 11:51:31 +0000</pubDate>
		<dc:creator>Eusebiu Blindu</dc:creator>
				<category><![CDATA[conferences]]></category>

		<guid isPermaLink="false">http://www.testalways.com/?p=749</guid>
		<description><![CDATA[      
      This is a  walk-through on the presentation I had at  Czech Test. I wanted to make a parallel between testing and solving puzzles.  Reason for this is because I think there should be more room for creative thinking in testing and also the analytic and logical thinking should have higher priority. I started with a non-testing [...]]]></description>
			<content:encoded><![CDATA[      
      <p>This is a  walk-through on the presentation I had at <a title="http://www.czechtest.com/programme#day2" href="http://www.czechtest.com/programme#day2"> Czech Test</a>.</p>
<p>I wanted to make a parallel between testing and solving puzzles.  Reason for this is because I think there should be more room for creative thinking in testing and also the analytic and logical thinking should have higher priority.</p>
<p style="text-align: center;"><a href="http://www.testalways.com/wp-content/uploads/2012/03/img02.jpg"><img class="aligncenter size-full wp-image-754" title="img0" src="http://www.testalways.com/wp-content/uploads/2012/03/img02.jpg" alt="" width="480" height="360" /></a></p>
<p>I started with a non-testing related puzzle.</p>
<p style="text-align: center;"><a href="http://www.testalways.com/wp-content/uploads/2012/03/img1.jpg"><img class="aligncenter size-full wp-image-756" title="img1" src="http://www.testalways.com/wp-content/uploads/2012/03/img1.jpg" alt="" width="480" height="360" /></a></p>
<p style="text-align: center;">The shown equation above is incorrect, but by changing the position of only one digit in can be improved and become correct (like in the example in the bottom of the slide). <a title="http://www.testalways.com/wp-content/uploads/2012/03/img2.jpg" href="http://www.testalways.com/wp-content/uploads/2012/03/img2.jpg">Click here to see the solution</a></p>
<p style="text-align: center;">
<p style="text-align: center;">Usually when someone says the word &#8220;puzzle&#8221; we think at something like this</p>
<p style="text-align: center;"><a href="http://www.testalways.com/wp-content/uploads/2012/03/img3.jpg"><img class="aligncenter size-full wp-image-761" title="img3" src="http://www.testalways.com/wp-content/uploads/2012/03/img3.jpg" alt="" width="480" height="360" /></a></p>
<p style="text-align: center;">
<p style="text-align: center;">But there are of course other types of popular puzzles</p>
<p style="text-align: center;"><a href="http://www.testalways.com/wp-content/uploads/2012/03/img4.jpg"><img class="aligncenter size-full wp-image-762" title="img4" src="http://www.testalways.com/wp-content/uploads/2012/03/img4.jpg" alt="" width="480" height="360" /></a></p>
<p style="text-align: center;">Introducing main theme &#8220;<strong>Testing is like solving puzzles</strong>&#8220;</p>
<p style="text-align: center;"><a href="http://www.testalways.com/wp-content/uploads/2012/03/img5.jpg"><img class="aligncenter size-full wp-image-764" title="img5" src="http://www.testalways.com/wp-content/uploads/2012/03/img5.jpg" alt="" width="480" height="360" /></a></p>
<p style="text-align: center;">
<p style="text-align: center;">Then I tried to link the concepts of &#8220;testing&#8221; and &#8220;puzzles&#8221; by the definitions</p>
<p style="text-align: center;"><a href="http://www.testalways.com/wp-content/uploads/2012/03/img6.jpg"><img class="aligncenter size-full wp-image-767" title="img6" src="http://www.testalways.com/wp-content/uploads/2012/03/img6.jpg" alt="" width="480" height="360" /></a></p>
<p style="text-align: center;">Examples of &#8220;testing puzzles&#8221;:</p>
<p style="text-align: center;"><a href="http://www.testalways.com/wp-content/uploads/2012/03/img72.jpg"><img class="aligncenter size-full wp-image-768" title="img7" src="http://www.testalways.com/wp-content/uploads/2012/03/img72.jpg" alt="" width="480" height="360" /></a><a href="http://www.testalways.com/wp-content/uploads/2012/03/img81.jpg"><img class="aligncenter size-full wp-image-773" title="img8" src="http://www.testalways.com/wp-content/uploads/2012/03/img81.jpg" alt="" width="480" height="360" /></a><a href="http://www.testalways.com/wp-content/uploads/2012/03/img91.jpg"><img class="aligncenter size-full wp-image-774" title="img9" src="http://www.testalways.com/wp-content/uploads/2012/03/img91.jpg" alt="" width="480" height="360" /></a><a href="http://www.testalways.com/wp-content/uploads/2012/03/img101.jpg"><img class="aligncenter size-full wp-image-775" title="img10" src="http://www.testalways.com/wp-content/uploads/2012/03/img101.jpg" alt="" width="480" height="360" /></a><a href="http://www.testalways.com/wp-content/uploads/2012/03/img111.jpg"><img class="aligncenter size-full wp-image-776" title="img11" src="http://www.testalways.com/wp-content/uploads/2012/03/img111.jpg" alt="" width="480" height="360" /></a></p>
<p style="text-align: center;">I see testing puzzles split in two categories: <strong>micro-puzzles</strong> and <strong>macro-puzzles</strong>. Micro-puzzles and the simple situations , where you know the mission immediately (ex: test some input validation functionality). Macro-puzzles are the situations where you have to deal with an entire project and you have to take care of many components: time, coverage, risk, resources, information.</p>
<p style="text-align: center;"><a href="http://www.testalways.com/wp-content/uploads/2012/03/img12.jpg"><img class="aligncenter size-full wp-image-779" title="img12" src="http://www.testalways.com/wp-content/uploads/2012/03/img12.jpg" alt="" width="480" height="360" /></a></p>
<p style="text-align: center;">Starting with presenting the micro-puzzles</p>
<p style="text-align: center;"><a href="http://www.testalways.com/wp-content/uploads/2012/03/img13.jpg"><img class="aligncenter size-full wp-image-780" title="img13" src="http://www.testalways.com/wp-content/uploads/2012/03/img13.jpg" alt="" width="480" height="360" /></a></p>
<p style="text-align: center;">To create a better image you can try this exercise</p>
<p style="text-align: center;"><a href="http://www.testalways.com/wp-content/uploads/2012/03/img14.jpg"><img class="aligncenter size-full wp-image-781" title="img14" src="http://www.testalways.com/wp-content/uploads/2012/03/img14.jpg" alt="" width="480" height="360" /></a></p>
<p style="text-align: center;">for <a title="http://www.testalways.com/1/" href="http://www.testalways.com/1/">this application</a></p>
<p style="text-align: center;">The video demo for it:</p>
<p style="text-align: center;"><object classid="clsid:d27cdb6e-ae6d-11cf-96b8-444553540000" width="480" height="360" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6,0,40,0"><param name="src" value="http://www.youtube.com/v/kmD_uQrpG-4" /><embed type="application/x-shockwave-flash" width="480" height="360" src="http://www.youtube.com/v/kmD_uQrpG-4"></embed></object></p>
<p style="text-align: center;">Trying to solve that would give a better idea on the fusing situations between testing and solving puzzles.</p>
<p style="text-align: center;"><a href="http://www.testalways.com/wp-content/uploads/2012/03/img16.jpg"><img class="aligncenter size-full wp-image-801" title="img16" src="http://www.testalways.com/wp-content/uploads/2012/03/img16.jpg" alt="" width="480" height="360" /></a></p>
<p style="text-align: center;">Sometimes we ship the product after we test it, and we get a &#8220;crazy&#8221; customer that finds some unexpected state and demands explanations. In the next slide I have a screenshot of the application at <a href="http://testalways.com/1/">http://testalways.com/1/</a> . You can try two puzzles here: 1) Reproduce the screenshot 2) Find the pattern</p>
<p style="text-align: center;"><a href="http://www.testalways.com/wp-content/uploads/2012/03/img17.jpg"><img class="aligncenter size-full wp-image-802" title="img17" src="http://www.testalways.com/wp-content/uploads/2012/03/img17.jpg" alt="" width="480" height="360" /></a></p>
<p style="text-align: center;">Some description about an important element in many puzzles: Patterns</p>
<p style="text-align: center;"><a href="http://www.testalways.com/wp-content/uploads/2012/03/img18.jpg"><img class="aligncenter size-full wp-image-803" title="img18" src="http://www.testalways.com/wp-content/uploads/2012/03/img18.jpg" alt="" width="480" height="360" /></a></p>
<p style="text-align: center;"><a title="http://testalways.com/3/" href="http://testalways.com/3/">This</a> is actually an older application I posted 1 and a half years ago to show as example:</p>
<p style="text-align: center;"><a href="http://www.testalways.com/wp-content/uploads/2012/03/img19.jpg"><img class="aligncenter size-full wp-image-804" title="img19" src="http://www.testalways.com/wp-content/uploads/2012/03/img19.jpg" alt="" width="480" height="360" /></a></p>
<p style="text-align: center;">There were many answers to that puzzle back then. One way that was solved was using an excel file where all the data was put and analysed.</p>
<p style="text-align: center;">Other solution came with the help of using automated scripts to get the images for a large number of inputs</p>
<p style="text-align: center;"><object classid="clsid:d27cdb6e-ae6d-11cf-96b8-444553540000" width="480" height="360" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6,0,40,0"><param name="src" value="http://www.youtube.com/v/Y-_HSzdPrMI" /><embed type="application/x-shockwave-flash" width="480" height="360" src="http://www.youtube.com/v/Y-_HSzdPrMI"></embed></object></p>
<p style="text-align: center;"><object classid="clsid:d27cdb6e-ae6d-11cf-96b8-444553540000" width="480" height="360" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6,0,40,0"><param name="src" value="http://www.youtube.com/v/k-nxAAcuFKY" /><embed type="application/x-shockwave-flash" width="480" height="360" src="http://www.youtube.com/v/k-nxAAcuFKY"></embed></object></p>
<p style="text-align: center;">Going through macro-puzzles</p>
<p style="text-align: center;"><a href="http://www.testalways.com/wp-content/uploads/2012/03/img22.jpg"><img class="aligncenter size-full wp-image-806" title="img22" src="http://www.testalways.com/wp-content/uploads/2012/03/img22.jpg" alt="" width="480" height="360" /></a></p>
<p style="text-align: center;">Macro puzzles are the one where we have to deal with managing our testing process</p>
<p style="text-align: center;"><a href="http://www.testalways.com/wp-content/uploads/2012/03/img23.jpg"><img class="aligncenter size-full wp-image-807" title="img23" src="http://www.testalways.com/wp-content/uploads/2012/03/img23.jpg" alt="" width="480" height="360" /></a></p>
<p style="text-align: center;">I have used <a title="http://testalways.com/2/" href="http://testalways.com/2/">this application</a> to represent the ideas of macro puzzles</p>
<p style="text-align: center;"><object classid="clsid:d27cdb6e-ae6d-11cf-96b8-444553540000" width="480" height="360" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6,0,40,0"><param name="src" value="http://www.youtube.com/v/II6-iwrKM2k" /><embed type="application/x-shockwave-flash" width="480" height="360" src="http://www.youtube.com/v/II6-iwrKM2k"></embed></object></p>
<p style="text-align: center;">Let&#8217;s say you have to test a web application that provides some statistical data and has an export functionality. You want to focus on the export from the file type and browser perspective.</p>
<p style="text-align: center;">If you would try to test each browser paired with each file, a representation in the <a title="http://testalways.com/2/" href="http://testalways.com/2/">hidden image application</a> would look like that:</p>
<p style="text-align: center;"><a href="http://www.testalways.com/wp-content/uploads/2012/03/Picture3.jpg"><img class="aligncenter size-full wp-image-812" title="Picture3" src="http://www.testalways.com/wp-content/uploads/2012/03/Picture3.jpg" alt="" width="400" height="300" /></a>But you might not have the time to test all those combinations.  Another approach where you can say you tried each browser once and each file type once, is to pair each time one browser with one file type that has not been tested.</p>
<p style="text-align: center;">In this case it will look more like this</p>
<p style="text-align: center;"><a href="http://www.testalways.com/wp-content/uploads/2012/03/img261.jpg"><img class="aligncenter size-full wp-image-813" title="img26" src="http://www.testalways.com/wp-content/uploads/2012/03/img261.jpg" alt="" width="480" height="360" /></a></p>
<p style="text-align: center;">Or in some cases you find something suspicious and you insist in some areas, temporally neglecting other parts:</p>
<p style="text-align: center;"><a href="http://www.testalways.com/wp-content/uploads/2012/03/img27.jpg"><img class="aligncenter size-full wp-image-814" title="img27" src="http://www.testalways.com/wp-content/uploads/2012/03/img27.jpg" alt="" width="480" height="360" /></a></p>
<p style="text-align: center;">Other more general reviews:</p>
<p style="text-align: center;"><a href="http://www.testalways.com/wp-content/uploads/2012/03/img28.jpg"><img class="aligncenter size-full wp-image-815" title="img28" src="http://www.testalways.com/wp-content/uploads/2012/03/img28.jpg" alt="" width="480" height="360" /></a></p>
<p style="text-align: center;"><a href="http://www.testalways.com/wp-content/uploads/2012/03/img29.jpg"><img class="aligncenter size-full wp-image-816" title="img29" src="http://www.testalways.com/wp-content/uploads/2012/03/img29.jpg" alt="" width="480" height="360" /></a><a href="http://www.testalways.com/wp-content/uploads/2012/03/img30.jpg"><img class="aligncenter size-full wp-image-817" title="img30" src="http://www.testalways.com/wp-content/uploads/2012/03/img30.jpg" alt="" width="480" height="360" /></a></p>
<p style="text-align: center;">Recapitulating the idea and re-making the points that testing is like solving puzzles and that we need more room for creative work and analytic thinking.</p>
<p style="text-align: center;"><a href="http://www.testalways.com/wp-content/uploads/2012/03/img31.jpg"><img class="aligncenter size-full wp-image-818" title="img31" src="http://www.testalways.com/wp-content/uploads/2012/03/img31.jpg" alt="" width="480" height="360" /></a><a href="http://www.testalways.com/wp-content/uploads/2012/03/img32.jpg"><img class="aligncenter size-full wp-image-819" title="img32" src="http://www.testalways.com/wp-content/uploads/2012/03/img32.jpg" alt="" width="480" height="360" /></a><a href="http://www.testalways.com/wp-content/uploads/2012/03/img33.jpg"><img class="aligncenter size-full wp-image-820" title="img33" src="http://www.testalways.com/wp-content/uploads/2012/03/img33.jpg" alt="" width="480" height="360" /></a><a href="http://www.testalways.com/wp-content/uploads/2012/03/img34.jpg"><img class="aligncenter size-full wp-image-822" title="img34" src="http://www.testalways.com/wp-content/uploads/2012/03/img34.jpg" alt="" width="480" height="360" /></a></p>
<p style="text-align: center;">
<p>So those were the slides used. The main idea was to show testing more like a fun activity and full of creativity. In the same time it wants to give ideas to others to come up with something interesting, even if its not testing related</p>
]]></content:encoded>
			<wfw:commentRss>http://www.testalways.com/2012/03/03/czech-test-in-prague/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Testing, Automation, Test Automation, Automated Checking</title>
		<link>http://www.testalways.com/2012/02/19/testing-automation-test-automation-automated-checking/</link>
		<comments>http://www.testalways.com/2012/02/19/testing-automation-test-automation-automated-checking/#comments</comments>
		<pubDate>Sun, 19 Feb 2012 09:59:36 +0000</pubDate>
		<dc:creator>Eusebiu Blindu</dc:creator>
				<category><![CDATA[General]]></category>
		<category><![CDATA[automated checking]]></category>
		<category><![CDATA[automation]]></category>
		<category><![CDATA[test automation]]></category>
		<category><![CDATA[testing]]></category>

		<guid isPermaLink="false">http://www.testalways.com/?p=744</guid>
		<description><![CDATA[      
      All companies want &#8220;test automation&#8221;. Managers that never tested think they need &#8220;test automation&#8221;. Test managers who don&#8217;t like to code want someone with &#8220;test automation&#8221;. Fresh students who were just hired know &#8220;test automation&#8221;. Because of that recruiters want &#8220;test automation&#8221; for &#8220;QA&#8221;. Testers are encouraged to know &#8220;test automation&#8221;. But when asked to [...]]]></description>
			<content:encoded><![CDATA[      
      <p>   All companies want &#8220;test automation&#8221;. Managers that never tested think they need &#8220;test automation&#8221;. Test managers who don&#8217;t like to code want someone with &#8220;test automation&#8221;. Fresh students who were just hired know &#8220;test automation&#8221;. Because of that recruiters want &#8220;test automation&#8221; for &#8220;QA&#8221;. Testers are encouraged to know &#8220;test automation&#8221;.</p>
<p>   But when asked to think about it or describe what is that, no one wants to answer, either because it doesn&#8217;t need any explication or its like those concepts like &#8220;life&#8221;.</p>
<p>   When people do &#8220;test automation&#8221; the following happens:<br />
- time is spend in creating some scripts and maintaining it and eventually is not as &#8220;faster&#8221; as was ideally though it would be<br />
- people are bored and unmotivated because the job just becomes a sub developer position at every level, especially payment; they eventually might choose to be totally change their lives and become tourist guides <img src='http://www.testalways.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /><br />
- people quickly want to change their task and want to advance so they won&#8217;t do that anymore, but tell others how useful is &#8220;test automation&#8221; to do all day<br />
- because there is not too much time to investigate the purposes and needs of some functionality, simple checks are done under the cover up of &#8220;test automation&#8221; or mocking assertions where everything passes.<br />
- fake data is generated for managers who don&#8217;t care anyway except their own job<br />
- parts of application code is just copied and adjusted a little bit to work as test automation<br />
- if bugs to customer appear often, of course &#8220;we need to hire more test automation guys&#8221;</p>
<p>Here is how I see those concepts:</p>
<p>Testing is the activity performed by the person, not by the tool, including decisions, use of skills.<br />
If I do scripts that&#8217;s not testing. That&#8217;s scripting. Testing is when I make the decision of creating a tool that will help me.<br />
      Automation can be the process of using scripts to help with testing. Populating a database with data every week/day for me to test that is automation. A script to install the application every day on my computer, that&#8217;s automation.<br />
     Occasionally the automation might check an expected result: like when I use selenium to do some web application steps and check if some data is present and that data is as expected. I call that automated checking. Its not testing. Its just while I was doing testing I though of the need of expanding my reach by using a tool.<br />
     And because of that the term &#8220;test automation&#8221; or similar associations between testing and automation doesn&#8217;t make sense. It is used improperly most of the time and its referring at some low level development. </p>
]]></content:encoded>
			<wfw:commentRss>http://www.testalways.com/2012/02/19/testing-automation-test-automation-automated-checking/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Playing with Paypal</title>
		<link>http://www.testalways.com/2012/01/24/playing-with-paypal/</link>
		<comments>http://www.testalways.com/2012/01/24/playing-with-paypal/#comments</comments>
		<pubDate>Tue, 24 Jan 2012 23:21:49 +0000</pubDate>
		<dc:creator>Eusebiu Blindu</dc:creator>
				<category><![CDATA[Bugs]]></category>
		<category><![CDATA[Paypal]]></category>
		<category><![CDATA[Paypal issues]]></category>

		<guid isPermaLink="false">http://www.testalways.com/?p=721</guid>
		<description><![CDATA[Possible Paypal issues]]></description>
			<content:encoded><![CDATA[      
      <p>I didn&#8217;t want to try something risky, but I noticed at least two suspicious things. By that I mean there could be some open opportunities for hacking:</p>
<p>1)  &#8221;<span style="color: #ff0000;"><strong>http://www.paypal.com/en/cgi-bin/webscr?cmd=_logout</strong></span>&#8221; &#8211; it you go to this url while logged in, your session is terminated.</p>
<p>Possible exploit: you can create a repeating (hidden) script (maybe on some webpage) &#8211; so that the user will believe he/she cannot login at all.</p>
<p>2) I am able to send money and create accounts for emails starting with &#8220;%&#8221;</p>
<p>Example &#8220;<span style="color: #ff0000;"><strong>%john@testxcvdf.com</strong></span>&#8221; (You can check it for yourself &#8211; Password is &#8220;!QAZ2wsx&#8221;)</p>
<p>Possible exploit: the fact the char is not validated, might be considered a weak spot for hackers, by trying different alternatives.</p>
<p>Even if both issues are not exactly a problem, it shows that they didn&#8217;t do some type of needed testing.</p>
<p>(I am going to send this to their support)</p>
<p><span style="color: #0000ff;"><strong>Edit</strong></span>: Ok, I got a simple script as example for the logout issue</p>
<p>Steps:</p>
<p>1) Open this url <a href="http://www.testalways.com/exploits/1.html">http://www.testalways.com/exploits/1.html</a> (reloads an iframe with the link)</p>
<p>2) In another tab/window of the same browser login into the Paypal account (you can create one just to test it &#8211; you don&#8217;t have to enter any private data)</p>
<p>Behavior:  User is disconnected quite fast without realizing what is going on</p>
<p>Conclusion: <strong>The value of a bug might depend on possible exploits.</strong></p>
<p>This is an example of a behavior that is known, but maybe not much thinking was done in relation to security.</p>
<p>Another thing is the usage of same libraries for developing web applications. These bugs are identical to issues I found for a previous client.</p>
]]></content:encoded>
			<wfw:commentRss>http://www.testalways.com/2012/01/24/playing-with-paypal/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Hacking</title>
		<link>http://www.testalways.com/2012/01/19/hacking/</link>
		<comments>http://www.testalways.com/2012/01/19/hacking/#comments</comments>
		<pubDate>Thu, 19 Jan 2012 07:30:17 +0000</pubDate>
		<dc:creator>Eusebiu Blindu</dc:creator>
				<category><![CDATA[Tools]]></category>
		<category><![CDATA[hacking]]></category>
		<category><![CDATA[knull-shellv1-beta.php]]></category>
		<category><![CDATA[testhacking]]></category>
		<category><![CDATA[testing]]></category>

		<guid isPermaLink="false">http://www.testalways.com/?p=711</guid>
		<description><![CDATA[knull-shellv1-beta.php ]]></description>
			<content:encoded><![CDATA[      
      <p>I want to recommend this tool <a href="http://code.google.com/p/knull-shell/downloads/detail?name=knull-shellv1-beta.php">http://code.google.com/p/knull-shell/downloads/detail?name=knull-shellv1-beta.php</a> for testing security issues.</p>
<p>With it I was able to hack into one of my client&#8217;s web server (literally the server that hosted the web application) and was able to create folders and  delete files.</p>
<p>The script can be used for hacking a web application in places where you can upload images or any other files.</p>
<p>Example of a scenario:</p>
<p>1) Check if the web app has a section to upload an image (usually user profile)</p>
<p>2)Use an image with a specific name that you can recognize and upload it</p>
<p>3) Check after upload and storage where is the image now located (check if the name is intact ; check if the size is the same )</p>
<p>4) If the image is stored with the same name or is not altered, you can try uploading the <a href="http://code.google.com/p/knull-shell/">knull-shell</a> script and the check the url</p>
<p>5) if the url of the stored file ends in &#8230;/some_location/knull-shellv1-beta.php and permissions are set badly, you can try to execute that script by opening that url</p>
<p>6) If you are successful you should have something like this:</p>
<p style="text-align: center;"><a href="http://www.testalways.com/wp-content/uploads/2012/01/knull1.jpg"><img class="aligncenter size-full wp-image-712" title="knull1" src="http://www.testalways.com/wp-content/uploads/2012/01/knull1.jpg" alt="" width="758" height="455" /></a></p>
<p style="text-align: center;">
<p style="text-align: center;">
<p>Username: root</p>
<p>Password  :toor</p>
<p>and you should have something like this</p>
<p style="text-align: center;"><a href="http://www.testalways.com/wp-content/uploads/2012/01/knull2.jpg"><img class="aligncenter size-full wp-image-713" title="knull2" src="http://www.testalways.com/wp-content/uploads/2012/01/knull2.jpg" alt="" width="758" height="426" /></a></p>
<p>Now you can try to see how far you can go! <img src='http://www.testalways.com/wp-includes/images/smilies/icon_smile.gif' alt=':)' class='wp-smiley' /> </p>
]]></content:encoded>
			<wfw:commentRss>http://www.testalways.com/2012/01/19/hacking/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

