All posts by Mindful tester

Things which were not on my 2022 bingo card

  • In the first half of this year, I wrote a serie of blog posts about accessibility. Is it possible to integrate it into Agile development? I did a thought experiment with Planning Poker.
  • There is a lot of talk about using multiple ways to identify yourself. For certain services is the use of multi factor authentication needed to prevent problems. It is not about technology, but about process.
  • In the spring I went with my family to an in person juggling convention. My kids enjoyed the juggling. Not bad for a dad for showing instead of teaching.
  • After a lot of performances, I did some acts for blind and visually impaired people. Body language and sizes are difficult to show to this audience. I really put a lot of effort to tell how things look like. How big is a duck, if I cannot pass a bird around?
  • As a free time juggler, I could not resist to give some lessons about juggling to blind and visually impaired people. This took me some effort to adjust it to their capabilities. I focused on feeling.For the interested people: I did contact juggling with balls, plate handling, and tricks with rings, pois, or devilstick.
  • I also gave some workshops in balloon modelling to blind and visually impaired people.For me, balloon modelling is twisting and folding balloons into a nice object. The first time I showed a white dog above a white table. This was a bad contrast for some visually impaired attendees.
  • I learned braille.
  • In September I got the “Gives back” badge on the Club of Ministry of Testing. I gave more than 100 likes to other posts and got more than 100 likes on my posts. At the moment of blogging, I am one of the 32 people who got this badge.
  • This year I took piano lessons in piano. The focus was on improvisation.
  • In 2016 I wrote a blog post about a privacy issue on LinkedIn. 6 years later I discovered that this problem was solved.
  • The hardest lesson I learned was to give people the help they asked for. In the past, I gave too much information.Of course, there is a chance that these 2 facts are unrelated.
  • The last months, I started to micro blog again. Once in a few days I extended a blog post with a few lines. This keeps me blogging.
  • At the end of the year, I published a blog post about speaking on tech conferences. Looking at my own experiences, I noticed some specific patterns. 
  • A day before Christmas, the Dutch version of “Condensed Agile Testing” by Lias Crispin and Janet Gregory became available. I translated 1 chapter. I am the Chinese looking guy, who made one of the contributions or bijdragen in Dutch.

Speaking of Privilege Dynamics

The story is that a good proposal for a talk and some preparation is a sure way to speak on a conference. There are other factors involved.

Privilege dynamics

For this article I made up the term privilege dynamics. With privilege I am not writing about the honour to speak for a group of peers and their managers. It is about having enough resources to speak. According to me, dynamics is the way it forms the
world.

Permission to speak

The first thing about privilege is asking for permission to go to the conference. My wife had mixed feeling about this. At the one hand she knows my love for speaking and at the other hand she wanted to know that I am in good hands.

The next in line for permission is my employer. My absence will lead to a drop in revenue. In some cases, I had to ask my customers to speak. This could have consequences for the results of the whole team.

There were employers who were really happy to send me as a speaker to a conference. In most cases they provide services and this benefits their companies. A lot of other companies are not eager to have a speaker at a conference. The benefits must be measurable in some way.

Confidential information

What is more appealing than to talk about than a real story? I can grab the attention of the public with a project or a sprint with some really insightful moments. There is a big chance that my employer or customer would not be pleased that some stories would be told afterwards.

For one talk I asked explicitly to use the graphs showing the results of a performance test. This added a lot of reality to my talk. For a workshop I created a website with an imaginary company based on real life experiences. This way no company or organisation was impacted by my stories.

Righteous owner

Copyrights are a difficult thing to handle for a beginning speaker. When I was a consultant, the rights of almost all my talks went to my employer. This applies for a lot of things. I read a story about someone who used a private laptop to retain the rights of a book.

An argument would be that the employer pays me, so this might be a fair trade. I can speak at a conference and my company will own the results. The drawback for me is, that I cannot use these talks after switching employer. This happened once.

Then there are conferences which obtain the copyrights of the talks. Even if the conferences pay me very well, then I will no longer be able to use this talk for other conferences or occasions.

Employee benefit

Another way to get permission is to ask for budget. Most of the time there is enough money to attend an international conference once in the three years. The costs of attending can be reduced by being a speaker. Things like a ticker for the whole conference, accommodation and travel might be covered. So, the costs can be reduced significantly.

Status quo

There are several tech conferences to whom I sent my proposals for talks. I noticed that there were 2 categories. I would label the most conferences as mainstream. All subjects are welcome so long they support the general view. Things like old standards and proven practices are highly in demand, The only exceptions are talks about new trends by known consultancy firms.

A small group of conferences are exploring the space of different topics outside the comfort zone of the delegates. Somehow, they create a safe place to experience or share experiences about experiments and team culture.

My last workshop at a mainstream conference was about blogging. A few years later I gave a workshop about privacy laws and Exploratory Testing on a conference focused on new ways for testing.

Stereotyping

Of course, not all talks are selected based on scores like content and speaker experience. Keynote speakers are chosen directly. This led to obvious choices on mainstream conferences. Men are chosen to talk about things like car racing and technology trends. Ladies are supposed to talk about subjects like research on human interaction.

There are still tech conferences with only male speakers. A certain gender can be huge advantage to get an invitation for a talk.

Best in class

The usual argument of the conference is that the men are the best for certain topics. I was amused about a conference in Amsterdam with only female keynote speakers talking about testing. Several men protested. The female organiser just replied, that they were the best. Privilege can differ for each conference,

Restrictions apply

Minority speakers should be helped in any way. These people face all kinds of obstacles. Things like Code of Conduct can help a lot. Years ago, I wrote about a Balanced Conference Card.

Even then, a conference venue manager denied a service dog of a disabled speaker. It was like banning wheelchairs.

Time spent

After a talk is accepted for a conference, then the most difficult phase starts. It is called preparation. And it is not all about the talk.  It is about spending time.

When I was a consultant and I had no projects for customers, then I could work on the talk during office hours.

The last years I made these choices based on permission to speak and copyrights. I had to reserve time for the conference. This was normally Paid Time Off or holidays. I was supposed to work during office hours. For a talk at a multi-day conference, I had to take a week off.  Also, my preparations were done in my free time.

Travel limitations

Then there were conferences which did not cover the costs of travelling. When I was a consultant, then I would have no problems. My company would happily pay for the exposure.

For a talk as a free time speaker, I avoided most of the conferences which only offered me conference ticket. Then there were conferences with limits for the travel costs, which I could understand. No firm would like to pay for a first-class flight and taxis.

In one case I saved costs by taking the train instead of a plane. Once I read s story of speaker who got a ticket for a flight in the middle of the night. This was offered by the conference,

Additional basic needs

As a speaker I got the same benefits as attendees. All drinks, snacks, and meals are included. For a multi-day conference some extra things are needed like a bed and breakfast. Luckily, there are conferences which offer these things to speakers.  I got used to ask for stays and breakfast, if it was not offered right away.

My times for speaking as a consultant were more pleasant than the times for speaking as a private person.

In advance

Even when costs were covered by the conference, I had to collect bills. I could not let the conference pay for them at the moment of purchase. The biggest costs are for traveling. As a free time, speaker, I restricted my talks to Europe. Intercontinental flights tickets could be quite expensive.

In many cases I had to spend money from my saving accounts to be able to speak at a conference abroad. I had no business credit card like known consultants.

Commercial activities

No companies were harmed, when I announced that I would speak at a conference. My employer and my customer were informed. I had had to ask permission in earlier stage of my talk preparation.

Some conferences encourage speakers to convince other people to come to the conferences. If I would refer people, then I could get a small reward. This could reduce the unfunded costs of travel, accommodation, and certain meals. However, in the Netherlands there are certain clauses in job contracts which forbid extra sources of income.

So, only speakers with a good job contract or an own company can benefit from this referral program.

On site

After my appearance as a speaker in Sweden, my wife asked whether I had explored the surroundings. My answer was “No. I came for the conference.” And I wanted to meet people.

For sightseeing I had to leave the conference venue and go off site. I could have enjoyed the nature or some old buildings. My preference is to enjoy this before or after the conference. Then I would need permission for a longer stay.

In that case I need to ask my family for less family time and check my saving account for an extended stay. Even, if my company would sponsor my talk, then money is not available for a paid small holiday. I know at least one company which forbids to extend a stay even with personal budget.

Choosing my stays for the conference is not that simple. Some conferences offer only as many nights to stay as many days of the conference, Either I miss a part of the first day or a part of the last day. This part can be quite large, if I used public traffic or a car to go to an international conference, then my day of arrival or departure would cost me several hours,

Of course, my family had a big say about the date and time I had to be home again.

Pro deo

Being a speaker at some tech conferences is like being a consultant hoping to play even, If the costs would be compensated enough, then this would be great for me. At some conferences I gave free advice to the audience, who had paid the conference.

It was not done to send bills afterwards. This saved me the hassle of hourly rates or percentages of saved money on the short term. With fines over the million Euros for trespassing privacy laws I could make my workshop worthwhile.

In court, people with not enough money can use advocates for free, they are paid in other way. This is called pro deo. After such case advocates can pick more advantageous case.

Ad hoc

A lot of conferences will say, that speaking is good for business. This might apply for consultants. When I only focused on the activities of my employer, there was the known problem of commercial activities. I could not monetise this knowledge.

After one conference, I could only small bits of free advice. This saved me a talk with a manager about job contracts.

TIL or This I Learned

In order to give a talk I had to make some sacrifices. Privilege made a lot of difference for me.

Minimal Viable Authentication: usability versus security

Trigger warning: stalking.

For the following stories I am using the imaginary VIP Cinema again instead of the real app. This way I can freely write about my experiences without naming the actual app.

Usability is king

The VIP Cinema app offered his clients a discount for parking. This service appealed to me. So, I contacted the customer service and got a power of attorney number. On request I had to mention the number to get my promised discount of 50 percent on parking.

After a while I wanted to reserve my parking without calling the customer service. There was a simple solution: a parking app. I installed the app and had to register. The first thing I did, was to have my power of attorney number ready.

The next step was to enter my email address and a password. Then I had to verify it by clicking on a link in an email. A dialog asked for my membership number of the Cinema VIP App. Then I opened the app and found the number.

I received an email to verify my email address for the parking app. After clicking a link, I had to enter my VIP Cinema membership number. The next moment I could reserve a parking place for my car without entering my power of attorney number.

The registration was smoothless and it saved me an extra step of entering another number. I really liked this experience.

Security is pauper

”I want to show something to you.”, I told another computer software professional.
“Here is my mobile. The Cinema VIP app is open and shows my membership number.”
I got a nod.

“Now I am going to the website to register a new user id and password for the parking website.”
Another nod followed.

This looks familiar

Then I entered a new email address and password. After clicking the link in the mail to verify my email address I asked him for my membership number. While he was citing the number, I entered it in the requested text field in the dialog,

 “Let us see what kind of information we can get based on this single number.
You can see where I live. This information is needed for billing.“

Worth noting

“Let’s have a look at my parking history. This is the parking I used every other week. This is an interesting pattern. Last week I parked there. So next Friday I will probably park the car there at 7 pm.”

Let me guess

“There is a high chance, that I visit a cinema close to this parking. The discount is offered by the Cinema VIP app. Notice that no power of attorney number was asked. This would improve the security.”

All that being said

“Even worse: I did not get an email that another account was coupled to my parking account. I refreshed my inbox: no mail was found about the double registration.

Certain social media apps inform me directly, if my account is accessed from an unknown device. But this was not the case for this app.”

This time I did not get a nod, but an astonished face.

Signals of poverty

When I phoned the customer service of the parking service, no power of attorney number was requested.

During this phone call there was a check of my birthday, my zip code, and my house number. These can be obtained using social engineering or extracting private information without getting attention.

This I Learned

Authentication is about making sure that the right person gets access. Some shortcuts can have severe drawbacks.