http://smartbearsoftware.com/code-review-articles.php Articles and blog entries from the Internet about peer code review Copyright 2001-2012 Smart Bear Inc Smart Bear RSS Feeder en-us webmaster@smartbearsoftware.com Notice: Undefined variable: newsItems in /usr/local/htdocs/newsite/rss-code-review-articles.php on line 23 Wed, 31 Dec 1969 17:00:00 -0700 http://blogs.law.harvard.edu/tech/rss 1440 8106de6268ed2f4c2da3ed858bf306c9 http://www.wabysabi.com/blog/2010/09/15/peer-code-review-tool-code-collaborator/ 2010-09-15 Daniel Wabyick talks about how Code Collaborator helps his team at Adobe increase code quality and consistency. dfc2d1a06cf639af3165587ab680d6cb http://ianlotinsky.wordpress.com/2010/07/13/best-kept-secrets-of-peer-code-review-by-jason-cohen/ 2010-07-13 Ian Lotinsky shares his thoughts on why Jason Cohen's 'Best Kept Secrets of Peer Code Review' book presents compelling arguments and practices for effective code review. a5a6017e0af133e52b4efc23cabbfa1e http://www.redmonk.com/cote/2010/06/04/makeall005/ 2010-06-25 Redmonk's Michael Coté interviews our very own Gregg Sporar about current code review practices, tools available, and a few other development trends Gregg has been seeing, such as version control system use. afbf9057c80e6f033bec1966cdd4ccf4 http://www.embedded.com/design/225600471 2010-06-06 Jack Ganssle is a big believer in code review and describes how root cause analysis can be used to keep the code review process on track. And Smart Bear's Code Collaborator gets a shoutout! e03380fe05f239f41a77c2437a6b24f4 http://peerreviewprocessroi.com/video-how-peer-reviews-sw-inspections-actually-work/ 2010-06-03 Joe Lindley describes a measurement process used at Raytheon that clearly shows how peer code reviews have a predictable, positive impact on cost and quality. 9892cea4091bc3fd90de44dfa0bc5517 http://gnstudio.wordpress.com/2010/05/16/code-review-user-stories-and-sustainable-software/ 2010-05-17 The team at GNstudio shares their philosophy on code review and shows how a successful code review process is achieved in their organization. In this informative blog post, they describe their own experiences in trying out different code review practices to find what works for them and the knowledge they've gained throughout their story. 229a4a2e3676951d89e4baf154fa1360 http://www.sdtimes.com/MAKING_THE_CASE_FOR_CODE_REVIEW/By_David_Rubinstein/About_CODEREVIEW/34294 2010-04-20 David Rubinstein argues for code reviews in this SD Times article with advice and info from our own Gregg Sporar and Klocwork's Gwyn Fisher. f375247b590fec22f9a62412e9d87582 http://napkin.highgroove.com/articles/2010/03/20/the-4-things-we-look-for-in-a-code-review 2010-03-20 Highgroove Studios shares a list of the things in their code review toolbelt. 20df4c29dd898221e9eb6de21f89e866 http://www.chadpluspl.us/?p=265 2010-03-16 Chad Stewart hits another home run with his useful blog post describing his thought process and rationale when reviewing code. The blog includes an excellent checklist of areas to focus on. e84112f5e665cf985a246c0204bc32c1 http://www.thepursuitofquality.com/post/37/review-best-kept-secrets-of-peer-code-review.html 2010-03-11 'In the book Jason writes about the benefits of Code Review - common practices, pitfalls and benefits. He's concise, easy to follow and the book is an enjoyable read. There are a ton of golden nuggets [read the blog for a list]. If you like what you read in this blog post, go order the book! Seriously who doesn't like a free book? You don't even have to pay for shipping! Why haven't you ordered yet?' Gavin Miller summarizes the code review benefits, principles, management tips, and best practices described in 'Best Kept Secrets'. 8c38e93962cd95603e31e8ab12c2a050 http://www.chadpluspl.us/?p=225 2010-02-16 'You can doubt the power of a code review. You could argue that it costs more time than it saves. You would also be wrong! That's right, I'll go ahead and say it. Code reviews are an amazing way to catch potential bugs before they are born...' Chad Stewart expounds on the merits of code review. 8421942580c4f41d84e66efc0499bab7 http://talkaboutquality.wordpress.com/2010/02/11/code-review-for-people/ 2010-02-11 Try this: put aside the image of code review as a meeting, or even code review as an independent activity. Limit your description of code review to: someone else is reading your code, you're discussing it together, and there's effective writing as a result. If you see those three things happening, you're seeing code review... and it's everywhere... cc2b8c33ec5e0f99d1e830b7d11f6a58 http://blog.scottbellware.com/2010/02/qa-missed-something.html 2010-02-03 'There's nothing that QA has ever missed that developers didn't miss first.' Scott Belware talks about how finding problems in software is the responsibility of both development and QA. 8b28415bc607333f9480ac01b9a21bef http://www.conkerjo.com/?p=232 2010-01-16 In this insightful blog post, Conkerjo reviews 'Best Kept Secrets of Peer Code Review' and shares his thoughts on Code Collaborator and code review in general. ecd2298eb39d1cf7ec02f2ec0d63da4b http://www.perforce.com/newsletters/2009/fall/reviewing_code.html 2009-10-30 The latest Perforce newsletter features Part 1 of an article by Smart Bear founder Jason Cohen, imparting tips to optimize code review using Perforce. Look for Part 2 later this winter. 826a99dc0a916fd40fa766b8ac8bba27 http://cubeantics.com/2009/10/devdays-austin-jason-cohen-on-why-code-reviews-dont-have-to-suck/ 2009-10-16 Robert Greiner at Cube Antics reviews Jason's talk at the Austin StackOverflow DevDay on October 14 - and he includes slides and audio too! 471023ce8790986a4cb30ff86e0e50f2 http://www.sdtimes.com/link/33767 2009-09-17 In this SD Times article, Andrew Binstock describes the vast improvement you can make to your code just by letting others read it, and by reading it yourself. 5c6e8add98dcbb135bcb033765fb6ef3 http://www.coderanch.com/t/461515/Book-Reviews/Code-Collaborator-Software-Code-Reviews 2009-09-07 Mark Spritzler, Sheriff at JavaRanch, tried out Code Collaborator and shares his experiences. We're happy, but not at all surprised, that he had good things to say! f29071ba5d5a5229d826bb665d221994 http://www.darinpope.com/ar/78 2009-08-14 Darin Pope blogs about our book, 'Best Kept Secrets of Peer Code Review,' and the importance of 'writing the book' to show expertise on a given technology. f507344a97df9adb4a927c73a80959f1 http://www.spreetree.net/blog/?p=145 2009-05-03 Another great entry from Lee Winder on the pros and cons of different code review techniques. e7c5fa88392ae71cf515cc25dbd31393 http://www.spreetree.net/blog/?p=133 2009-04-13 A great experience report from Lee Winder about what code review can bring to a project. 7843d93020b4ba96fc64906e855ff9cf http://vaughnspurlin.wordpress.com/2009/03/12/how-open-source-isnt-open-and-what-to-do-about-it/ 2009-03-12 Vaughn Spurlin's insightful blog on using code review to improve open source projects and disseminate knowledge throughout the community. 10879d0b094e305fa08e6bc488328e6b http://www.linkedin.com/answers/technology/software-development/TCH_SFT/429473-32036089 2009-03-02 Prasanta Mohanty kicked off an interesting discussion on LinkedIn by asking about the necessity of peer code review. 75498f8c5febfdc1a8735a6983ad220f http://www.dbta.com/Articles/Editorial/News-Flashes/AccuRev-and-Smart-Bear-Team-Up-to-Provide-Advance-Code-Review-54167.aspx 2009-02-23 AccuRev CTO Damon Poole discusses how the AccuRev SCM and Code Collaboration integration improves software development and code review in the Database Trends and Applications 5-Min Briefing Center. 5e038fae81618057a787869ce18c505e http://www.perlmonks.org/?node_id=744932 2009-02-19 A treasure trove of information from the PerlMonks bd3c615d74b4f77fff9f33a915d0327d http://www.codecapers.com/2009/01/significance-of-code-reviews.html 2009-01-27 Michael Ceranski describes the importance of doing code reviews, and specifically of doing them with the right attitude. 150718c2b2b7c8412a4abcb7abd1a95a http://www.embedded.com/design/testissue/212700467 2009-01-04 Jack Ganssle tells us how "inspecting code is an important group exercise that's painless if you follow etiquette and stay within its narrow scope." f5eebc10d26c8394b983dde8f34cb5a6 http://blog.bstpierre.org/2008/12/i-tweeted-this-article-on-five-reasons.html 2008-12-30 Brian St. Pierre lists practical reasons for performing code reviews. dd6b1ccead568bb82bf1c3f3fa306b57 http://code.mumak.net/2008/12/your-code-sucks-and-i-hate-you.html 2008-12-24 Jonathan Lange's paper from OSDC 2008 on the social effects of code review. 12f46e3162fe7ea642a1a07a74218535 http://www.cio.com/article/472378/Doing_Spot_On_Code_Reviews_with_Remote_Teams 2008-12-22 The seventh article in Esther Schindler's comprehensive CIO.com series on Code Review. 7056d12a79ed62ab5561f2769d11b45f http://www.cio.com/article/472380/How_NOT_to_Run_a_Code_Review 2008-12-22 The sixth article in Esther Schindler's comprehensive CIO.com series on Code Review. 7f554a86cf1ccce0f94dfee00904a341 http://www.cio.com/article/472382/How_to_Lead_a_Code_Review 2008-12-22 The fifth article in Esther Schindler's comprehensive CIO.com series on Code Review. bdca3bf734861e4627f145629087f0b6 http://www.cio.com/article/472383/Making_Code_Review_Software_Tools_Help_Not_Hinder 2008-12-22 The fourth article in Esther Schindler's comprehensive CIO.com series on Code Review. b5e87b26bf1a926c5e08e265e259f86e http://www.cio.com/article/472379/What_to_Look_for_in_a_Code_Review 2008-12-22 The third article in Esther Schindler's comprehensive CIO.com series on Code Review. 47b7fbf8a3cd6608bfe45033e6df6d06 http://www.cio.com/article/472377/_Reasons_for_Software_Developers_to_Do_Code_Reviews_Even_If_You_Think_They_re_a_Waste_of_Time_ 2008-12-22 The second article in Esther Schindler's comprehensive CIO.com series on Code Review. 906ec620bcbf9f5510104f6bee367960 http://www.cio.com/article/472372/Running_an_Effective_Code_Review 2008-12-22 The first article in Esther Schindler's comprehensive CIO.com series on Code Review. Includes a wide spectrum of opinions about best practices for code review. cb716b5bad9b62979b78ea61b1a4aed6 http://nomorehacks.wordpress.com/2008/12/11/code-review-checklist/ 2009-12-11 Guidelines for creating code review checklists and a great sample checklist for C#. 90aff47fade1f65d784632e14c020d48 http://assets.en.oreilly.com/1/event/12/Code%20Reviews%20for%20Fun%20and%20Profit%20Paper.pdf 2008-11-10 Alex Marelli from Google gives a presentation (PDF format) about why code reviews are good and how to avoid the common pitfalls. Comes from the perspective inside Google where code reviews are mandatory. 365e36bff63fd2e821546f2153ee9f1f http://smsohan.blogspot.com/2008/11/iterative-and-incremental.html 2008-11-03 S.M. Sohan explains how iterative and incremental code reviews can acheive much of the benefit of Extreme Programming (XP) while taking less time. Although not disparaging of XP techniques, this code review technique might be more acceptable to the powers-at-be who refuse to invest in full-scale pair-programming. f82cacd5551b16ad2cea37970075fb58 http://www.bennorthrop.com/Essays/2008/code_review_potluck.php 2008-10-20 A fun way to do code review over lunch by Ben Northrop. He brings up the idea that each reviewer should be looking for one class of bug, rather than everyone trying to do everything. 2c74e301b5dbf498263c6117ff087ef5 http://stackoverflow.com/questions/206286/how-do-you-tell-someone-theyre-writing-bad-code 2008-10-15 An on-going Q & A session over at Stackoverflow about how to tell someone their code needs improvement. This happens all the time in peer code review; you need ways of helping people improve without hurting feelings or becoming defensive. 3901a7a9c084d95d13684263b187b2bf http://developer.mozilla.org/en/Code_Review_FAQ 2008-09-29 The Mozilla foundation is known for the high quality of their software including Firefox and Thunderbird. Read their FAQ about why every change is code-reviewed, what they look for in a review, and their process that successfully allows thousands of developers to contribute code while retaining high quality and a maintainable code base. 26751d4606fc23e1f5c01bc12d7e473b http://stackoverflow.com/questions/140476/what-do-your-code-reviews-involve-and-what-patterns-are-successful 2008-09-26 The vibrant community over at Stack Overflow has been discussing patterns for successful peer reviews. It's nice to see Code Collaborator as the (currently) most-voted answer, but many other responses have great information. 5f5a9b155ba50fb3c49d5bc6cf4a5107 http://geekaustin.org/2008/09/24/smart-bear-jason-cohen-code-review/ 2008-09-24 Lynn Bender of GeekAustin.org interviewed Jason Cohen, founder of Smart Bear about why peer code review is useful, where it fits in the development process, and how to get started doing it. daf864139fa636ffcb7e4a4199c56229 http://solambda.blogspot.com/2008/08/offline-code-reviews-are-more-effecient.html 2008-08-01 Joshua Segall reacts to recent conversations by Joel Spolsky and Jeff Atwood about whether code reviews are better done off-line with a tool or together in a meeting room. 77c1ed9cd3a296d83bcb7c1d43ac1207 http://www.ai-blog.net/archives/000151.html 2008-07-13 Paul Tozour writes from his own experience with code reviews as a game developer, explaining how everyone improves from review, not just junior developers, and about why on-line, no-meetings review is better than other traditional forms of review and pair-programming. c64581249c0a8955da2bba075a6e1a65 http://embedded.com/columns/guest/208803162 2008-07-08 Jason Cohen from Smart Bear is the guest editor this month over at embedded.com. This article describes how to build effective peer code review checklists for software projects. bf6ee84cafe6c0b9de1a0cbb0dbbda0a http://jollyblogger.typepad.com/jollyblogger/2008/07/jolly-good-link.html 2008-07-05 The Jolly Blogger presents a list of five commandments that make code reviews go more smoothly. 22edb536cd11d00d415ec8bbc7df8d6f http://www.thetechherald.com/article.php/200825/1246/PCI-DSS-Section-6-6-gets-teeth-%E2%80%93-finally 2008-06-16 The Payment Card Industry Data Security Standards, PCI DSS, is something that by now, even consumers are well aware of. Those six letters can mean the difference between millions in sales for some companies, or millions in losses and fines. On June 30, there is a new revision in the PCI DSS specs, and finally there are some teeth when it comes to web security. No longer will web application security testing be an afterthought, it will become a requirement. 9d0b295b0a944212d8b7d4ed5f888812 http://blog.totoshi.com/2008/06/15/inside-exoweb-agile-tweaking/ 2008-06-15 As part of a quality, agile process, all code at Exoweb goes through two layers of peer code review. 39536c862a32c944685713f60f70aabf http://nitesting.blogspot.com/2008/05/peer-reviews.html 2008-05-28 One developer's point of view on why peer code review is so valuable, and how typical excuses for not doing code review are faulty. 4bcf65680a9a5b5d055cd1dad74bc540 http://www.codinghorror.com/blog/archives/000999.html 2007-11-18 Jeff Atwood compares pair programming with lightweight code review techniques, giving pros and cons of each and concluding that you've got to do one or the other. 35378de35168714f9e6bd5da1da4112a http://www.developer.com/java/other/article.php/3579756 2006-01-25 Microsoft MVP Robert Bogue writes about how to deal with the potentially devistating social problems that can arise from peer code review. He describes the approach and mindset for both authors and reviewers that keeps reviews positive and useful without hurting feelings. 27fce0767ab804c52630886faa76ce2d http://www.codinghorror.com/blog/archives/000495.html 2006-01-21 Jeff Atwood explains why you just have to do code reviews, backing it up with comments from Steve McConnell and Karl Wiegers. 910d03ddc716cc8b9b8abe41bf4d4874 http://msdn.microsoft.com/en-us/library/aa302437.aspx 2003-06-05 This lengthy MSDN document gives Microsoft's advice on how to do security audits on ASP.NET applications. Most of the advice is appliable to any web-based application. d08ea356216efda0b8a1e70230ac43e7 http://www.stevemcconnell.com/articles/art04.htm 1996-09-09 Steve McConnell describes how technical code reviews affect not only software quality but how quickly you can get software to a minimum of defects.