I just read an excellent post by Mark Curphey on “The types of testing,” part 2 in his 5 part series on “The Art of Scoping Application Security Reviews.” Dre responded with some good commentary almost as long as the original post. One quote towards the end got to me:
It ceases to amaze me that […]