News for hackers. Stuff that matters.

A comment on The security hole in sudo.

Re:The security hole in sudo by rmoriz on Wednesday May 23, 2012 @12:50PM (#4013902)
I still wonder why they don't do ATDD. Even when you use a statically typed language there is plenty of room for failure.

I recommend using:

- vagrant http://vagrantup.com/

- toft https://github.com/exceedhl/toft/

- cucumber http://cukes.info/

- aruba https://github.com/cucumber/aruba

to write/reverse engineer examples/user stories.

[ Parent | on HN ]
Re:The security hole in sudo by raverbashing on Wednesday May 23, 2012 @01:23PM (#4014115)
No

Enough with the nonsense. TDD is great for some tools, in some situations. It's not a "solve all". And now comes "ATDD", people should start working instead on inventing acronyms.

vagrant? really, REALLY?

Try QEMU. Try chroot

News flash, sudo is not a RoR application. Especially sudo with all the magic that goes behind executing a process as another user.

[ Parent | on HN ]
Re:The security hole in sudo by rmoriz on Wednesday May 23, 2012 @02:25PM (#4014522)
"Especially sudo with all the magic that goes behind executing a process as another user."

Your last sentence kills your standpoint totally.

Please check out the mentioned "toft". It's lxc inside vagrant and designed to test complex infrastructure code from the outside in. Nothing web related.

[ Parent | on HN ]
Re:The security hole in sudo by dredmorbius on Wednesday May 23, 2012 @01:30PM (#4014164)
Acronym expansion: ATDD - acceptance test driven development.
[ Parent | on HN ]