SECURITY TESTING IS NOT AN OPTION, BUT A WISE DECISION

Generally speaking, security testing is treated as an add-on to our testing coverage. Well, it is like this; if you want to function very well and you want your customers to love you for what you have given them? It becomes very important to care for their software needs. And people hate when their data is compromised. But, the fact remains the same. And that fact says, “No matter what your users want, you still continue only with functional testing and UX testing”, but you forgot that if users do not have secure experience then they shall still be satisfied with your User eXperience ingredients. However, this is a sloppy fact and a lie which many people consider as a fact.

Possible reasons why security testing is not given importance?

#1 Product owners/stakeholders are not aware of how security testing can help to safeguard their business in the long-run.

#2 Companies are doing great business and they are least bothered to spend on security testing activity

#3 Testers in testing companies do not have time to learn something else. Really?

#4 To do security testing, passion is required and most of us lack that.

#5 Most or some testers want straight-forward training with security/penetration testing tools, they do not want to practice the mindset of it. Mindset is always boring, we humans are impatient and we want have take-away very soon.

#6 Most or some testers do not like to spend on credible security testing workshops. They always love to receive but do not like to give (And here giving for the workshop will benefit themselves).

So what’s the solution?

Security testing is not an option, it’s a choice for those who want to build a cleaner and safer web. Those who perform security testing for their web apps or mobile apps or client-server stand-alone apps contribute to the world for the safe web. Others would continue to make money without caring for the data of users, that’s inevitable. You can do your bit if you like to. Having said that, some or most people may face a large loss due to breaches and also class-action lawsuits due to sloppy security practices in their organization. For instance, you don’t want to be fined for not being compliant towards GDPR (General Data Protection Regulation).

What can we do as testers to create awareness?

No worries if your area of interest is functional testing, but you can still learn something about security testing and help your customer understand the importance of it. But, its tricky as your customer may go to someone else who can do both functional testing and security testing. But, I personally would make the customer understand even though I cannot test for security. Like how a layman can be made understood about security hassles, even you can do it for a customer.

Why it’s a choice and not an option?

It is simple! You are dealing with sensitive data of your users. How can you consider it as an option? It’s surely a choice that you want to safeguard your users. Don’t you?

 

Santhosh Tuppad has played different roles in his life which include being an entrepreneur, liar, lover, boyfriend, husband,  thief, passionate software tester, blogger, reader, trainer, coach, black-hat hacker, white-hat hacker, grey-hat hacker and what not. In this amazing journey of life, he has experienced his salvation. Not to forget that, “Salvation comes at a price” and of course he has paid that price. Before he was known for being merciless, ruthless, unkind, evil etc. And today he is known for kindness, humbleness, and some people call him “Privacy Fighter”.

(Guest Blog Series) “Change Blindness” in UX

Source: Freepick illustration ’cause I got lazy

There is a strong discrepancy between the amount of information being transmitted and the amount of information our brains have the capacity to process.

I have always been fascinated by the way the human brain works and I also think that being familiar with cognitive science is a key skill of any designer. In the digital world, there is a huge number of websites, apps, articles, and advertisements trying to get our attention.

People are programmed to focus their attention on anything that is different or new.

As you are reading this article, there are numerous sensations, sights, and sounds going around you. The traffic sounds, other people talking around you, the warmth of the room or maybe the memory of a conversation you had earlier today.

So, depending on your ability to focus, the brain can induce a specific blindness that makes you miss the changes happening in your visual field.

In one experiment, participants were shown an image that was changed during a brief blank interval in the visual scene. The researchers found that when there is a brief break in the visual scene, people find it more difficult to detect changes. This is called Change Blindness.

Change Blindness is a common phenomenon in the digital world, where visual elements can appear and disappear or change their label almost instantaneously. For example, observers often fail to notice major differences introduced into an image while it flickers off and on again, like a page that refreshes. In many cases, the changes in the visual seem so big, that they seem impossible to miss. Yet when attention is directed elsewhere, people are capable of missing both minor and major changes that take place right in front of them.

Change Blindness is rooted in the human brain’s instinctual ability to filter out unnecessary information and stimuli. Basically, any time a new visual element is introduced to an existing display, it is at risk of being ignored.

Here is a popular example about how Change Blindness works, on the Vans.com mobile website. If a visitor selects a size that is not available, the label of the “Add to Cart” button changes to say “Out of Stock”. This slight, but important, change in the label doesn’t stand out, when the rest of the display stays the same.

Source: the Holy Google.

This is happening because:

  • One: the user’s attention is focused here on the Size and Quantity fields;
  • Two: The “Out of Stock” label was overlooked because it looked too much like the “Add to Cart” label, and was too far from the user’s attention was focused;

Although the design is perceived by our senses (vision, touch, hearing), it is immediately processed by our brain. As designers, we have the power to guide the human mind during and even beyond the interaction with the product by using some key steps in our design process:

  1. Make your page easy to scan

Remove clutter and make the page as easy as possible for your user to achieve their desired outcome, rather than trying to find actions or buttons. An important part of the design is making it highly usable for the targeted users and allowing for extra functionality to be discovered as it is needed. This will help you fight the change blindness and will help you increase the conversion rate.

2. Minimize visual interruptions

Avoid page refreshes whenever possible. This will cause an Interruption in the user’s visual perception and lead to an unnecessary shift in their attention.

3. Provide smooth, continuous feedback

Keep the users informed about what is going on within reasonable time, without leaving them wondering and waiting. You can do this through: loading bars, spinners, active state of a button, scroll flag, feedback sounds etc. Also, make sure the feedback is delivered in a natural place, where the user expects it, so it can be followed and understood.

4Use appropriate visual emphasis for significant new elements (such as contrast, size, and padding) to ensure they are noticeable. Use data from multiple sources to get a more accurate picture; combining the insights you gain from your experience and knowledge, your quantitative web analytics, and qualitative sources (like surveys, heat maps, sessions replays, or usability tests).

5. Rely more on Recognition rather than Recall

Minimize the user’s memory load by making actions, elements, and options visible. Therefore, the users won’t need to remember information from one part of the dialogue to another. Instructions for use of the system should be visible or easily regained.

6Focus on Aesthetic and minimalist design

The less elements on the screen, the more potent the remaining ones are. Focus on using only relevant information and avoid every extra details or element that could be irrelevant and that will cause an unnecessary shift in user’s attention.

7Build products with Consistency and Standards

Make sure that the users won’t have to wonder whether different words, labels, colours, or actions mean the same thing.

8. Prevent errors

Try to either eliminate error-prone conditions or check for them and provide users with a confirmation option before they commit to the action. Even better than good error messages is a product that prevents a problem occurring in the first place. This will help you keep the users focused.

9. Use good contrast

Use tools to measure the contrast you are using. Low color contrast creates legibility problems. The basics of color contrast are easy to understand: a higher contrast between text color and the background color is better for legibility.

10. Mind the Typography and build a visual hierarchy

Typography has a huge effect on the Mood and attention of users and also, by using the right typography, we can improve the user engagement.

This is more than selecting fonts. It is the study of how humans read, perceive, how they recognise words and how the brain processes the information.

So why should anybody care about Change Blindness?

Change blindness is a one of the psychological phenomenon that affects user perception in this digital Universe. As designers, we have the power to control the human mind during and even beyond the interaction with the product and bring more value to the digital world by using our knowledge on the cognitive science and start improving the digital world.

Change blindness plays an important role in the way users understand and look at websites. It’s important to notice that people often fail to detect changes to a visual scene and why users don’t see what you think they actually should see. By being aware of this cognitive phenomenon and understanding how can avoid it can aid you creating your strategy in your design process.

(Guest Blog Series) This is why vulnerability helps you improve as a professional

“Vulnerability is the birthplace of innovation, creativity and change” — Brené Brown

Each person has a different perception of what vulnerability means. Most of us associate it with weakness. This is mostly due to our upbringing, social background (race, education, lifestyle, gender, creed etc) or due to not knowing too much about this subject in general.

While indeed vulnerability involves a lot of exposure and risk, it is in no way the same thing as weakness. Now, we will explore what vulnerability means and showcase why being vulnerable can be beneficial for your career and personal growth.

The textbook definition of the term is: ‘vulnerability is the quality of being easily hurt or attacked’. The term is derived from the latin work ‘vulnus’ which means ‘wound’. This literal definition can be extended to the emotional area as well and imply a certain openness — if you are vulnerable, you might suffer.

But what if you can cultivate this emotion? What if this kind of exposure or being vulnerable is an untapped source of growth and learning?

Where would the world be if innovators shut down all vulnerability?

Thomas Edison

If Thomas Edison got discouraged after his many failed attempts to build the lightbulb (and many other patents) and after people telling him it’s pointless, we would have probably gotten this invention at a later time.

If Henry Ford quit after his first 2 car companies failed and he lost credibility from his investors and the public, the automobile industry would not be the same today.

If Elon Musk was afraid of public view and being exposed, he would not openly reveal his projects, only his successes. For example, he publicly announced when his Model X Tesla would start being manufactured. That term was delayed for 18 months. This is just one of the hits the magnate has taken, a full list is presented here. How much do all these failures affect him? Well, he’s worth 20 billion USD so I’d say they haven’t killed him yet.

But what does this have to do with vulnerability?

I’m sure that they did not necessarily think about vulnerability when they decided to keep going despite all the things they’ve been through, but this emotion is the core to understand why they did it.

The researcher Brené Brown says that tapping into the emotion of vulnerability opens up some new experiences which otherwise are not lived at their fullest. These experiences are love, trust, joy, and creativity. Vulnerability also means being engaged, being all in, and this is exactly what the people mentioned above were/are. They showed dedication and a strong belief in their work even when the circumstances were not encouraging.

When Musk was asked during an interview how he felt about his role models not supporting his ideas, he gave an emotional and genuine answer. This is what vulnerability is all about:

Despite the fact that people he admires most, don’t share the same vision, Musk is nowhere near giving up. His natural response is that he wishes to show them what he is doing and what he’s hoping to achieve and hopefully bring them to his side. That’s how strong his resolve is.

Examples of vulnerability which encourage growth

1. Creating and showcasing your creations: An example could be when you create a presentation or workshop about something you are passionate about (or anything for that matter) then deliver it without any guarantee of acceptance or appreciation or even that anyone would show up to see it.

2. Asking questions: Being afraid or ashamed to ask questions revolves around the sphere of vulnerability. If you do ask, you might be perceived as stupid or it means admitting that you don’t know anything about the subject at hand. If you don’t you’ll probably play along, act like everything is crystal clear and in fact leave with bigger gaps than the ones you started with. But, under no circumstance is asking a question a bad thing or something we should avoid.

3. Showing genuine appreciation: Vulnerability is to tell your colleague how much you appreciate his work and that he did a good job because you really feel that way and you mean it.

4. Giving/Receiving feedback: Vulnerability to put yourself out there and openly give someone feedback even if it’s not necessarily something good. Then being open to receiving the same kind of feedback.

5. Saying no: Many people have a problem with saying no at work or their personal lives. This is because we fear that by doing so, people will stop liking us and we lose part of our utility. Instead, saying yes all the time to all insignificant requests can disrupt our flow and render us less useful or productive at work. When the request is not necessarily beneficial for your growth, some alternatives to saying no could be openly explaining why you are not going to do it or offering them another solution.

6. Asking for help: By doing this, you openly admit that you were not able to solve an issue by yourself. Certain thoughts can arise that we might seem weak or that we are not as resourceful as we have people believe. The truth is that, by asking for help, besides getting a new perspective from others, you also save up time to invest in other activities. And people are generally really eager to help when they can. When you seek or offer help, a deeper level of appreciation and trust is created.

7. Accountability for your work: This means that you are responsible for all the work you do, successes and failures alike. It’s being able to take a compliment when it’s due but also owning up to your mistakes and being able to say ‘it is my fault‘ or ‘I’m partly to blame for this so let’s see what we can do so that it doesn’t happen again or how can we improve our process’.

8. Nurturing connection: Vulnerability encourages connection. The connection is starting to be more and more valued in the age of technology where we tend to only focus on our 9 to 5 where we do our part then go home. By allowing yourself to be vulnerable you open up to a greater level of connection which ultimately results in gaining trust.

9. Being adaptable: Adaptability to change is all about vulnerability. It implies that you let go of some beliefs and truths which you already know and adopt new truths. It’s taking into account that confirmation bias is real and it can affect every aspect of learning something new, especially in a field where we already have some kind of expertise. Adaptability also implies having the courage to take up learning a new thing, even if it’s hard and you might fail at first, but believing you will get it done.

10. Showing authenticity: This means being able to express who you really are, not who you think you should be depending on a certain situation. Authenticity generally leads to people’s appreciation, and with that, to gain their trust.

The bottom line is…

Whatever your conception was regarding vulnerability, it should not be seen as a weak spot.
Shutting this emotion down will not make you a better or a stronger version of yourself. It will only lead to a more limited and close-minded you.
So start with baby steps and gradually do some of the stuff I’ve mentioned above or something you’ve been putting off until now and see where it takes you professionally and personally.

Please let me know if you liked this article and more importantly what you didn’t like about it, and if it helped you in any way shape a new/ different perspective on the subject of vulnerability.

Thanks for reading!