Procurement built an on-call rota in a shared doc with a UI

“It's too obscure to attack.”— Tobias, Procurement

Reason:

Mainly because nobody had tested it on an iPad. Built in 8 evenings and demonstrated immediately afterwards.

Built by:

Tobias, a field technician

Build time:

an afternoon, mostly

Built with:

a no-code builder on a personal account

Database:

Notion, with one row per customer

Authentication:

the encryption key is in the source code

Deployment:

deployed through a GitHub Action that only Marco understands

Responsible:

Sarah, who only knows the database

Documentation:

a screenshot of a photographed whiteboard

Security situation:

the admin page is protected by not linking to it

Future disaster:

It will discover its own timezone policy in production.

Age: 142 days · originally expected to last 14 days · 1 owner so far · last meaningful change 142 days ago

Rated common mostly because: 2 accidental connections, alive 10x longer than intended, €19k per year.