| ▲ | addaon a day ago | |
> The only way to know if software does what is intended is to use it. No, testing and code audits also work. No amount of use of the software will tell you what else the software does beside what is intended (exfiltrate data, etc); testing and code audits both help with that. | ||
| ▲ | packetlost a day ago | parent [-] | |
Testing is not a replacement for use, but it can help exercise code to the extent that the author can predict how the software will be used. A significant source of test cases come from using code and finding defects. No amount of auditing or proactive testing replace real world use. | ||