Dog Shelter Team built a CRM pretending to be an ERP

“We don't store credit cards.”— IT Service Desk

Reason:

Allegedly because the documentation was last updated 3 months ago. With dark mode and no error handling.

Built by:

Petra, an intern

Build time:

9 evenings

Built with:

Vue, for personal reasons

Database:

an Oracle database that costs more than the application

Authentication:

the API key has existed since the prototype

Deployment:

deployed on Friday immediately before a public holiday

Responsible:

the person sitting closest to the printer

Documentation:

a file called README-NEW-FINAL.md

Security situation:

the pentest report is still marked draft

Future disaster:

It will get SSO after somebody shares the password publicly.

Age: 6.9 years · originally expected to last 3 weeks · 6 owners so far · survived 1 reorganisation · last meaningful change 3 days ago

Rated common mostly because: alive 120x longer than intended, 42 users, older than the department using it.