Welcome to the QA Tech-Tips blog!

Some see things as they are, and ask "Why?"   I dream things that never were, and ask "Why Not".  
Robert F. Kennedy

“Impossible” is only found in the dictionary of a fool.  
Old Chinese Proverb

Tuesday, February 22, 2011

The Only Feature Linux Needs
Concepts in usability


A few days ago while searching for something else, I found an interesting article about Ubuntu in general, and the 10.04 release in particular, which you can find right here.

Actually, to be perfectly honest with you, this guy has a rather extensive web site, (located here ), that I found most interesting.  This gentleman has a rather broad range of interests and opinions - and you could do far worse than exploring his site.

This particular article was titled: The Only Feature Ubuntu 10.04 Needs.  It was a discussion about what Canonical, (the enterprise supporting Ubuntu Linux), needed to do to make Ubuntu even better.

To make a long story even longer, (laughing!), I decided to toss my two centavos into the fray there.  And what a fray it was!

Apparently Tanner Helland, (the blog's author), touched a raw nerve with this article as there were more replies, covering a longer time-span, than any five articles I've seen just about anywhere else.

In reply to my posting, he sent a very interesting e-mail back to me:
My name is Tanner Helland (from www.tannerhelland.com).

First off, I apologize for contacting you via email. I almost never check email addresses used to submit comments to my site - but in this case, I felt it was okay to make an exception.
: )

I just wanted to let you know that your comment comparing Linux to appliances, tools, and toys was absolutely spot-on. Excellent assessment. Frankly, your comment was so good that I think it deserves an article of its own.

I see that you run your own blog - if you haven't already, might I suggest posting your comparison there? I worry that it won't get enough attention on my site's comment thread (there are a LOT of comments on that article...).

At any rate, excellent insight - thanks for sharing.
Ahhh!  Wonderful e-mail, except that I'm getting a sore shoulder from patting myself on the back. (grin!)

Re-reading the article convinced me that maybe he was right, so here it is.  Feel free to comment as you see fit.



This post is remarkably “after the fact” but I’ll put in my two kopecks.

First of all, I will say that I heartily endorse the basic premise of this thread – that, ideally, Ubuntu (or any other distro for that matter), should work “out of the box” without a herculean effort to get things to work with it.

My own basic premise about computers and the “mass market” is that they should become an “appliance” Like your toaster, microwave, or whatever; you should be able to turn them on, use them, and turn them off again without having to even think about the internals.

The problem with this premise is that computers are, by definition, incredibly complex pieces of equipment. And, unfortunately, what people expect of their computers represents a very broad spectrum of possible uses. If your microwave was expected to meet such a disparate range of uses, it too would be as error-prone as computers are today.

I divide computer users up into three very broad categories:
  • Those that want computers to be an appliance.
  • Those that use the computer as a tool.
  • Those that use the computer as a “toy”.
The appliance users want exactly that. You turn it on, click on a few icons, it does certain things, and you’re finished with it.

The tool users understand that – as a tool – the computer will have it’s moments. Everyone who has used any tool more complicated than a hammer is used to having to change the bit or blade now and then to fit the task at hand, They understand that, sometimes, the bit or blade breaks and that’s that. And, occasionally, they pick up a bit or blade that doesn’t fit the chuck or mandrel of their tool and they need to either adapt it some way, or get a different tool for that task.

However, the tool users don’t care if the motor has brushes, is a synchronous AC motor, or is a variable speed DC motor using pulse-width, (duty cycling), as a way to control the motor’s speed. They want to be able to chuck-up the right bit and get to work. In essence they want it to be an appliance, but one that is more powerful and configurable in exchange for increased risk.

The “toy” users are the ones who really want to “get under the hood” as it were – the 21st century equivalent of the ’60′s motor-heads who spent most of their time, and darn near all their pay, tinkering with their car to make it the baddest machine on the strip.

These are the ones who want to experiment with different things, perhaps they do some coding or engage in test cycles. Or they get on blogs like this one and relate how things occurred to them.

Windows – of whatever version – is primarily targeted to the first and second type of users. It’s like a ‘fridge. You can’t adapt it very well without using expensive tools that most people cannot afford or do not know how to use.

Linux, on the other hand, is trying to embrace the entire spectrum of user models ranging from the appliance users to the users that like to tinker with it and get their hands dirty.

And, I believe that this is a good thing. It’s kind-of like brainstorming, it appears chaotic but eventually becomes something really useful.

IMHO, were I Canonical, I would strive to meet these ideals by doing certain things:
  • Make the x.0 releases benchmark releases that focus on long-term stability at the expense of new whiz-bang features.  (These releases would be of primary use to those in the first two categories.)
  • Make the x.1 releases the more “experimental” releases where new features are introduced, (after, hopefully, enough beta time to make them reasonably usable).
  • Periodically release a “stop-and-catch-our-breath” x.0 release – one which is not about new features at all, but about polishing up the stuff they already have.
I would make similar suggestions about the repository organization. It is frightening to go into a “common” repository and see packages that have warnings saying that it can, and will, casually destroy your system unless you are used to Category-5 clean-room practices.

For each of the broad categories of repositories, I would divide them up into three sections:
  • Those packages that are virtually harmless – the standard utilities that people – even the appliance users – might need. Word processing, web browsing, e-mail, things like Skype (or an equivalent Open Source app), and so on. If you *REALLY* wanted to bork your box with one of these, you could, but you’d really have to work at it.
  • The packages that are more specific to a particular task and might carry an increased risk of danger – like a buzz-saw carries an increased risk – but if intelligently used won’t hurt you. These would be the more “tool” like packages. Virtually all of the system-administration packages would fall into this category. With these there is a risk, and if the tool is used carelessly, it will hurt you, possibly badly. These tools can bork-up your box rather nastily if you are careless, but you’d have to be pretty damn careless to do it.
  • The very specialized packages that are for a very particular need – or are possibly experimental releases carrying a vastly increased risk if not used very carefully – like a power-driver that uses .22 or .30 caliber loads to fire pins through solid steel or heavy concrete. These packages would be the kind that, if you really don’t know what you’re doing, you shouldn’t be here. These would be potentially powerful tools that, unless used *VERY CAREFULLY* and with a certain amount of forethought, will almost certainly bork your box.
But, by the very same token, the “appliance” level user should have trouble even finding these packages.

The tool and toy users would have, perhaps, a little less difficulty finding them. And anyone going into that section of the repository would be warned that – unless carefully used – these tools *will* cause harm.

Right now, it is much too easy for an inexperienced user to – not knowing any better – download the .30-0-6 (magnum load) tool by mistake and end up with a box borked beyond any reasonable attempt at repair.

The big issue with Linux, and why it generates so much controversy, is because of what it is, and the very broad spectrum of users that it tries to embrace without fault or favor.

Windows can be sharply focused to a particular end, whereas Linux, almost by definition, cannot be. And that creates issues and responsibilities that Linux will just have to face.

What say ye?

Jim

Sunday, February 6, 2011

The Sky is Falling! The Sky is Falling!

Today's post was inspired by the paranoia some people have about computers and the information they send.

The basic thrust of today's posting is this:

Unless you happen to be the Department of Defense, a Multi-National Bank with zillions of dollars in assets, or a company of some note that might be a target for Industrial Espionage, the chances of anyone giving a hoot about you, or your information, are slim to none.

Of course, you do need to take sensible precautions.  You would not go to the local super-mall, and leave your car unlocked; you lock your house when you leave and you don't leave expensive and valuable items just laying around to tempt fate.

To put this in perspective, if someone REALLY wants your butt, they're going to have it, no matter what you do.

In other words, if determined people can hack into sites like the Department of Defense, Citibank, or the New York Times - with their multi-layered defenses - there's not much you can do to make your computer more secure than that.

The other side of that statement is this:
These are high profile targets.  Hackers get a lot of "street-cred" by being able to hack a secure installation.  Crooks can use this to transfer millions of dollars to numbered off-shore bank accounts, or steal sensitive military secrets.

Think about it.  How much respect is a hacker going to get by saying "Oooh! I just hacked Mrs. Johnson's Linksys router!!"  It's virtually a lead-pipe cinch that Mrs. Johnson doesn't have millions of dollars laying around to wire to an off-shore bank either.  So, by and large, the hackers and script-kiddies really could care less about you.

What you should do is take reasonable and sane precautions, the same as you'd do with your home or car.
  • You don't connect a computer DIRECTLY to the Internet without a hardware firewall between you and it.
  • You don't send potentially sensitive information such as passwords, SSN's, credit card numbers, etc. in clear-text.  If you absolutely MUST send sensitive information by e-mail, you can exchange public keys with the recipient and send encrypted mail.
  • You make sure any wireless routers you have use strong encryption and a strong passphrase.
  • You make sure your computer is up-to-date with the latest security updates.
  • If you have a laptop, and you use it in public places, you make sure you have a good software firewall installed.
  • And you make sure your anti-virus and anti-slimeware software automatically update themselves so they remain up-to-date..
If you are the typical  computer user, this should be enough and more than enough to keep you and your sensitive information safe.

Remember; you need to view all these recommendations as just that, recommendations and you should apply them to your specific situation.

You don't have wireless?  Then that part doesn't apply to you.

You don't use public WiFi hotspots?  Then you don't have to worry about a rogue hotspot trashing your computer.

Just like the automobile advertisements say - Your Mileage May Vary.  Adopt what you need to adopt and don't worry about the rest.

If you really want a belt-and-suspenders security plan, you don't store sensitive information, (such as electronic copies of your tax returns), on your local computer - you write them to disk and file them away.

Of course, there are other things you can do as well.  You can virus-check incoming e-mail.  You can check for attacks from rogue web-sites and you can check for suspected spyware.

Bottom line:  Take reasonable and sensible precautions.  Don't be stupid, but don't get hyper about every little thing either.

Above all, enjoy the technology that lets you see and talk to your darling kids/grandkids who are 8,000 miles away, in real time.

What say ye?

Jim

Friday, December 10, 2010

This is *NOT* a drill - Repeat, this is *NOT* a drill.

You've seen 'em.  E-mails that claim things like: "If you don't send this to 20 people in the next 10 minutes, a big hairy monster will crawl out of your monitor and STICK HIS TONGUE OUT AT YOU!!!!!!!!!!!"

And yes, if that happens, you can honestly claim a Real Bigfoot Sighting.  Be sure to let the Enquirer know too. . . .

If I had $20 for each of these idiot messages I received, I would be a Gazillionaire, and would be sending you this Tech Tip while seated in my chaise-lounge, sipping margaritas, on my private island in the Mediterranean.

However, this one is different.

My wife got an e-mail today from her boss - which contained a link to a news story.  Having worked with RFID technology for years, I would believe this so fast it would make your head spin.

The gist of it is this:

First:  Do you have any credit-cards with this symbol on them?





Here is an example of a credit card with that symbol on it. . . .




(I just received this to replace my Midwest Airlines credit card.  I like it because it has a cat. . . a BIG cat. . . on it!)

Note the RFID symbol circled in red

Second:  Do you carry them with you?

If so, than there are ways that people with simple, inexpensive scanners in something as small as a fanny-pack can grab your credit card info without you even knowing that they grabbed it.  It's a new technique called "Electronic Pick-Pockets"

If you carry a newly issued passport, they can grab more than just your credit card number too. . . .

WOW!

Go visit this link if you don't believe me.

http://www.wreg.com/videobeta/8ba6f8fc-90a2-4711-90ea-1884ec348310/News/

I normally don't go for stuff like this, but THIS one scares me.
Solution:
  1. Wrap your card(s) in aluminum foil
  2. Slip them into a small metalized anti-static sleeve.
  3. Leave them at home, and ask your credit card company for one that's NOT RFID.
Please?

I really don't want to see you get ripped off for Christmas

Jim

Sunday, November 21, 2010

Is it Time to Reinvent the Wheel?

Note:  The following article originally appeared in the November 18th issue of the uTest Newsletter.
If you're curious, you can find it HERE.
___________________________________________

Our latest guest post comes from Jim “JR” Harris, Principal Engineer and Owner of Arrowhead Computer Consulting, and one of the most entertaining tester bloggers out there (you’ll see what I mean shortly). You can find more of his writings at qatechtips.blogspot.com. In this post, he addresses why the value created by testers is not always fully recognized in the world of business. Enjoy!
____________________________________________
 
In the October issue of the uTest newsletter, Matt Johnston led off with the title “Are Testers the next Endangered Species” – and I blew my stack!  Now don’t get me wrong; it’s not like I was furious or anything like that, but I will admit that I did bite the heads off of about a dozen or so thick framing nails before I could compose a coherent reply.

And I let him have it – with both guns blazing! – eager to defend the honor and integrity of those of us in the Software QA community.

“Oh, it’s the idiots in Management who don’t recognize the need for quality software!”

“Those idiots in Marketing ALWAYS leave us with too much to do and too short a time-line to do it!”

“If the developers would send us software releases that were at least testable; we wouldn’t be in this bind all the time!”

Now Matt has a sick and twisted sense of humor, not unlike my own.  So instead of getting offended, he offered me the chance to express MY views on his bully pulpit.  “Ok Einstein, you’re so smart?  YOU write the next one!”  No he really didn’t say that, but his invitation was clear:  Put up or shut up.

I got ready.  Cleaned both pistols, checked all my ammo and was ready to sit down here and burn a hole in his newsletter servers.  Pistols cocked, take careful aim and. . . . .

Then I started thinking.  (Always a good idea, that – thinking, that is.)

What was I aiming at?  Management?  Marketing?  Developers?  Or maybe, just maybe, it was at my own two feet.

Then I started thinking some more.

What is management’s mandate?
Their job is – first and foremost – to make money for the company.  You know, Money.  Moola.  Cash.  As in “to pay your salary”, or to be able to afford that nice new Blade Server you need for the next round of testing.

What about marketing?
Nope.  “Make QA happy” does not appear anywhere in Marketing’s job description.  It reads more like “Make past, (and future), customers drool over the thought of shelling out huge dollars to buy our next release.”

Development?
Who are YOU kidding!  They get it as bad as we do – six months’ worth of coding due in six weeks.  Then pray to the Blessed Virgin that it doesn’t fall into a million pieces when QA gets it.

So where does that leave us?
Let’s look at it from upper management’s perspective:

To them the world is black-and-white.  Things either cost money, or they make money.
  • Of course, Management is always important.
  • Marketing drives sales.  Sales = Cash.
  • Development actually creates the product that the company sells.  Product = Cash.
Then, there are the expenses:
  • Housekeeping.
  • Electric, gas and water.
  • Rent.
  • Capital equipment.
  • Maintenance.
And waaaay down at the bottom of the heap:
  • Tech Support.  (They gripe too, but not as bad as QA.)
  • QA:  The guys that are never satisfied and always gripe about SOMETHING!
And you wonder why we’re not popular in the corporate world?  Puh-leeeze!

So there you have it.  It really does make sense when you look at it this way

Our problem is this:  We have never really presented ourselves as an asset to the company.  Rather we’re seen as being more like “going to the dentist”; you gotta do it, but you aren’t expected to be overjoyed about it.  We’re not only viewed as a “sunk cost” – we’re a “sunk cost” that complains all the time!

So why are testers expendable?  Because we’re not perceived as driving value to the company.  And that’s the problem.

Next question:  How do we go about fixing this?

Answer:  Change. Grow. Demonstrate to the rest of the company that we’re assets that drive value, not just “the gripe-and-moan department.” It won’t be easy, but it’s something we have to do if we want to survive.

First:  Lose the whining and complaining.  The next time you get riled up at something and want to start complaining, put your hand in your mouth and bite. Hard. Then remember that the pain you’re feeling is just a small sampling of the pain you are causing others.

Second:  Trim your claws and fangs.  If YOU had spent three or four sleepless nights getting that code segment finished on time, would YOU want some “idiot from QA” coming to you and telling you it’s a piece of junk?

Next:  Try to become a pleasure to work with, not a pain in the butt.  Think of how you can present your issues as something other than a gripe-session.
  • Can you offer the developer some positive feedback too?
  • Can you offer a constructive suggestion to improve it?
At your next team/department meeting:
  • Ask if there is something QA can do to actually HELP the development process.
  • Maybe participating in early stage code reviews would help?
  • Maybe participating in early stage design or requirements reviews would help?
By doing this you may be in a position to recognize a mistaken assumption, or a misunderstood requirement. When we solve these problems early on, we help reduce the pain felt in both Development and QA later. More efficient and accurate work = More Money.  More Money = We drive value.

We need to be vigilant in reminding our boss, (and our boss’s boss), how critically important a firm commitment to quality is in today’s litigious world.  (i.e. Toyota, etc.)  By reinforcing that commitment we reduce legal risk and expense.  Reducing expenses = More Money.  More Money = We drive value.

We need to be vigilant in reminding ourselves, as well as others, that we’re not the only fish in the pond. If we produce shoddy products, we drive our customers to our competition.  Likewise, excellent products drive the competition’s customers to us. More Customers = More Money.  More Money = We drive value.

Maybe, just maybe, we need to take a good hard look in the mirror. Maybe the reason that “testers” are becoming “endangered” is because we’re driving ourselves to extinction by not changing to keep up with the needs of the companies that hire us.

Maybe it IS time to get out that stone axe and re-invent the wheel.


What say ye?

Jim