Marketing built a GDPR request tracker, ironically unsecured

“It's only temporary.”— Marketing Manager

Reason:

Honestly? Because the fax machine is still somehow involved. With dark mode and no error handling.

Built by:

Petra, an analyst

Build time:

1 hours 18 minutes

Built with:

React, Vite and enthusiasm

Database:

a SQL Server instance called app_db-final that nobody is allowed to restart

Authentication:

CSRF protection was disabled during debugging

Deployment:

running behind nginx config copied from Stack Overflow

Responsible:

a team that has since been reorganised

Documentation:

three different architecture diagrams

Security situation:

the session never expires

Future disaster:

It will cause Finance to ask "what is this charge?".

Age: 4.1 years · originally expected to last 4 weeks · 6 owners so far · survived 3 reorganisations · last meaningful change 74 days ago · original builder left 871 days ago

Rated legendary mostly because: 5 accidental connections, alive 50x longer than intended, the builder has left.