Marketing built something with customer data and no permissions

“It's too obscure to attack.”— Priya, Marketing

Reason:

Mainly because Sales has a newer spreadsheet. Built in 1 hours 4 minutes and demonstrated immediately afterwards.

Built by:

Priya, a team lead

Build time:

8 evenings

Built with:

Next.js, because the tutorial used it

Database:

a backup strategy consisting of Daniel copying the folder on Fridays

Authentication:

rate limiting is "please don't"

Deployment:

running in a Kubernetes cluster created for a proof of concept

Responsible:

a consultancy that changed its name twice

Documentation:

a README that begins with "temporary notes"

Security situation:

a security review was scheduled for February and quietly cancelled

Future disaster:

It will cause Procurement to ask "what vendor?".

Age: 1.4 years · originally expected to last 4 weeks · 2 owners so far · survived 1 reorganisation · last meaningful change 3 days ago

Rated common mostly because: €121k per year, alive 17x longer than intended, 7 users.