3 ms·
Their development velocity might have been due to their management or internal culture. You can get most of those results faster and on a budget. The best evide
by nickpsecurity 7y ago
Their development velocity might have been due to their management or internal culture. You can get most of those results faster and on a budget. The best evidence was the startup behind FoundationDB continually improving their product in highly-competitive space while doing QA like this:
https://www.youtube.com/watch?v=4fFDFbi3toc https://www.youtube.com/watch?v=4fFDFbi3toc
Generally, on top of code reviews, one can get high return with minimal labor and hardware with a combo of Design-by-Contract, contract/spec/property-based testing, low-F.P. static analysis, and fuzzing with contracts in as runtime checks. That's my default recommendation.
In Github's case, they also might have access to both closed and open tools that Microsoft Research makes. MSR is awesome if you've never checked them out. Two examples applicable to system reliability and security:
https://www.microsoft.com/en-us/research/project/ironclad/ https://www.microsoft.com/en-us/research/project/ironclad/
https://www.microsoft.com/en-us/research/publication/p-safe-asynchronous-event-driven-programming/ https://www.microsoft.com/en-us/research/publication/p-safe-...
Plus some of their other tools in various states of usability:
https://rise4fun.com/ https://rise4fun.com/