Shulou(Shulou.com)06/03 Report--

Everyone should know about the pinduoduo incident a few days ago, but it doesn't matter if you don't know. Search for the keyword "pinduoduo incident" and review it first.

There have been many people on the Internet to analyze this incident from their own point of view, and some people ask if they have really lost so much. Someone asked why the coupon was gone. Some people wonder if this is bug marketing? Of course, there are a lot of people summing up the right approach.

As a tester, I don't want to join the fun, because many people say that this is not a testing pot, but considering that there are similar risks in our business all the time, so let's talk about my thoughts based on our current business.

one

Empiricism must be avoided.

Empiricism mainly refers to doing things on the basis of experience, and the conclusions are based on personal experience (if it is a dragon uncle-level god, please make a detour).

For example, when I was a product role, I designed the display format of time as 20190122-0101 in the design of a system. On the one hand, it can shorten the length of time display, on the other hand, it can avoid special characters such as spaces. As a result, in the process of using the system, many students feel unaccustomed, because this is just a design based on my own experience. The lesson is, for some formats that we are already used to. It is best to get real research information from actual users and then make adjustments to avoid personal empiricism.

For example, when I was a developer, I would provide some gadgets to others. Once, because of a change in requirements, I had to modify a logic that had not changed for a long time. I was very familiar with the code of this tool, and it was fully self-tested after the initial implementation, so I was so sure that I sent it to others without self-test after the revision. Awkwardly, I failed to take it and smoke it. At that time, I really wanted to slap myself and make the same mistake as a tester in the development role, which was all empirical.

For example, when I am in the testing role of my job, when I return frequently or the system is covered, I need to keep suppressing the idea that "I have already run this use case, no problem". Because these use cases have indeed run through in other environments, I am especially afraid that one day I will accidentally release the devil of empiricism in my heart. So I will often consider using tools instead of manual repetition.

Summarize several points that personal empiricism needs to pay attention to:

Just because there's never been a problem before doesn't mean it's okay.

Just because someone is willing to take responsibility doesn't mean he can afford it.

Try not to make overall judgments based on personal experience.

When there is uncertainty, it must be verified step by step under controllable conditions.

two

Any issue involving money should be extremely cautious.

Someone said a long time ago that "money is the root of all evil", so when it comes to money, only you can't think of it, and no one else can't do it.

For example, I once did the activity of Alipay password red packets. 50 password red packets with a total of 50 yuan were robbed in less than 5 minutes. Only 2 people received the expected target users, and all the others were peed. After I added 100 password red packets with a total of 20 yuan, they were also carved up in 30 minutes. I checked back the data of red packets and found that several batches were received in the same second. There is no doubt that they were all taken away by the wool. I admire them.

For example, I have a friend's business that gives cash red envelopes for tasks. because the target group is large, the amount of red envelopes is usually a few cents, and it is said that econnoisseur is very powerful, so the background has made some anti-wool settings, such as limiting the number of times, limiting the time interval, limiting the source of operation, etc., and finally made a foolproof setting-- the amount is more than 10 yuan before you can withdraw cash. Because everyone calculated that it would take several years to save 10 yuan, and guess what, some people actually saved 10 yuan in less than a year. Alas, it seems that there are loopholes in the proper rules.

So, where there is money, there are people who care about it. What I said above is only 10 yuan, and anyone can come to buy it. If it is 100 yuan, or even 20 billion yuan, you can imagine.

With regard to the risk control of money, this article is very clear, you can click to learn:

"the things behind pinduoduo's year-end bonus to econnoisseur."

three

The necessary process is essential.

For the pinduoduo incident, everyone also found problems in his process when reviewing, so some people proposed that key nodes should rely on automation for assurance, while others said, "how efficient the automation is, how fast the accident is." well, that's an interesting point of view.

Before the accident, everyone's understanding is to use automation to improve efficiency, because automation can execute instructions accurately and quickly, so the question now is, what if this is a wrong instruction?

By analogy to our means of transportation, the plane flies fast, and the probability of accident is very low, but once something happens, it is a big deal.

In the analogy of Skynet in the Terminator, humans want to replace not only the part of human instructions, but also humans completely in order to avoid human weaknesses and let machines replace them.

So automation should be an auxiliary role, and some key operations should still rely on people, such as those involving money, such as those involving personal and property safety, and those that have a significant impact on most other people, and so on.

As a matter of fact, I have been promoting the automation of our business process. On one occasion, when I was discussing whether we could optimize an examination and approval link, I encountered a resistance. They gave me the reason that "one more audit would still have a certain deterrent effect". I was so confused that I had nothing to say at that time.

Now that I think about it, it seems to make some sense.

Compared to the security check of our subway station, with so many security stations and so much equipment and manpower invested, how many dangerous goods can be detected every day? In fact, the fact that he can't be detected means that he works.

By analogy, our fire-fighting facilities are available at key locations on each floor, and there are irregular drills. With such a large investment, as a result, many buildings have never had a disaster. Yes, once it happens, these equipment can be used to save lives.

Going back to the "necessary process" mentioned earlier, it is obvious that these are necessary, and under the premise of considering efficiency and cost, we must ensure that disaster recovery can be dealt with before it happens. then the investment is worth it.

Above, I hope it will be helpful to you. If you have any questions, please feel free to leave a message and communicate with me.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.