3 ms·
Agile is not good for security, which requires up-front design if you're going to get it right. TDD isn't good enough for security testing, and doing thorough s
by Spearchucker 12y ago
Agile is not good for security, which requires up-front design if you're going to get it right. TDD isn't good enough for security testing, and doing thorough security testing at the end of each sprint that changed security-enforcing code is neither practical nor cheap.
- angry_octet 12y agoAgile is totally orthogonal to security. Its more about tailoring the work done to what is actually needed and effective teamwork. In no sense does agile dispense with up front design. Similarly TDD still has to start with a specification. Designing tests on the requirements frequently cause them to be tightened significantly. If you mean 'TDD tests will never protect you from random chaos monkey coders' you are right, but it never claimed to.
- Spearchucker 12y agoYou're absolutely right. The great unwashed doesn't view agile that way though.
- angry_octet 12y agoSad but true.