Jesper Ottosen
Jesper Ottosen
Principal Consultant
him/his
Jesper has been around the MoT community from the start, frequently passing by the Club and Slack. For more than 10 years he has provided 300+ blogposts on all things testing. 🌻
🎂 MoTaBirthday | December 4, 2014
Open To
Teach
Mentor
Speak
Write
Podcasting
So you been around the company block enough times to recognize the seasons of the place. Summer, Crunch, Performance-review, Financial Year.You have probably seen P-1 incidents and P-I planning co...
15 Jul
On the 15th of January 2026 myself and Ujjwal Kumar Singh joined a call and pressed record. We were curious to see what would happen. A few weeks later I’d done the same with Neil Taylor and Clare ...
6 Jul
On Wednesday, the 30th of September, people will come together in Brighton for a day of honest conversations about what it means to lead with quality right now. The event is sold out, but you can j...
29 Jun
Where would your company (or country) be if all SaaS and Cloud services where to be turned off for political reasons. Or switches off if the owner of your technology simply don't like you or your k...
17 Jun
How is friction helping and not helping software engineering and testing teams?
20 Feb
AI can transform our love for curiousity, documentation and knowledge management
26 Nov
Explore ways to use imagination to move past bottlenecks and grow new quality leaders
4 Dec
Shift your mindset from documenting testing to influencing quality with meaningful conversations.
7 Nov
Ilities
The 'ilities is the informal name for all the system quality attributes, that usually end in 'ility.Accessability, scalability, functionality, reliability....For a full list see the reference
Nemawashi
Slowly and indirectly building support and alignment.A way to approach to delivering value more reliably and sustainably look like https://www.ministryoftesting.com/moments/what-does-delivering-value-more-reliably-and-sustainably-look-like From Wikipedia:Nemawashi (根回し) is an informal Japanese business process of laying the foundation for some proposed change or project by talking to the people concerned and gathering support and feedback before a formal announcement.
Injection Flaws
Injections are about maliciously putting things where they’re not supposed to go. Originally, for input fields, like text boxes or forms, where someone could inject malicious code. One of the most famous examples is from the classic XKCD comic “Exploits of a Mom”, where a child is registered at school with a name that includes a bit of code, and it accidentally causes the school’s database to break. But it's not just about forms anymore. Prompt injections are similar in nature. Anywhere a user can put stuff is prone to injection flaws.Tip: Always validate and sanitize anything users can send.
Supply Chain Attack
Your web app will depend on libraries and third-party components outside your control. For example, Social media (SoMe) trackers and CSS or similar plugins. Over time, they might be insecure or outdated. This is known as a supply chain attack, when something you already trust becomes the way attackers get in. Tip: Keep a list of them and the last working version on your end. Examples: One famous example was log4j and another was SolarWinds.
Comments
(17)
I've Configured Things You Wouldn't Believe
awwh. <3
I've Configured Things You Wouldn't Believe
that reminds me: I’ve seen things you people wouldn’t believe. Browser wars off the shoulders of the millennium, mainframes glitter black-green and management shooting for delivery gates. All those moments are not lost in time, but curated and internalized.
...
https://www.ministryoftesting.com/satellites/keeping-track
A tester is... (Throwback Wednesday)
I remember when we put this together. Thank you for resurfacing ❤️
Security is shifting left into the coding session itself
mostly on the side of dev, while test often is more integrated. Yet struggling with the same issues as us, how to fit into the development flow, tooling and automation and the challenge between what is pragmatic and what would be best.
Google your name
.. or any other search service really. Qwant (F), Ecosia (D), Mojeek (UK)