3 ms·
You could grep production logs and other data stores for commonly used passwords like "password123".
by human20190310 8y ago
You could grep production logs and other data stores for commonly used passwords like "password123".
- UncleMeat 8y agoBetter hope data isn't encoded in some other format. Better hope you have na exhaustive list of all the production logs.
- kevin_thibedeau 8y agoMore dependable would be tests that inject unique privileged information and then check for that appearing anywhere it shouldn't.
- londons_explore 8y agoYou need to do both. Real users will find routes through your app that automated tests never consider. For example, what if the users 1-year login cookie expires as they're on step 3 of a 4 step "change your avatar" process. That's highly unlikely, and probably not even tested. Yet it might well work (due to good modular design), but also log inappropriate data.