The CFO built a vulnerability tracker

“We're too small to get hacked.”— Thomas, The CFO

Reason:

Officially because the optional field breaks everything if left empty. Renamed three times to avoid attention.

Built by:

Thomas, someone from Procurement

Build time:

5 hours 24 minutes

Built with:

a REST API generated by something nobody can regenerate

Database:

a CSV that gets overwritten every Tuesday

Authentication:

Olivier knows the password

Deployment:

on a VM created for a workshop in 2020

Responsible:

Katrin, because their credit card pays for it

Documentation:

a Confluence page owned by Miriam, who left

Security situation:

debug mode is enabled in production

Future disaster:

It will be reported to the data protection officer by a customer.

Age: 309 days · originally expected to last 14 days · 1 owner so far · last meaningful change 74 days ago

Rated rare mostly because: 713 users, alive 22x longer than intended, €36k per year.