HR built a secret Santa allocator

“Nobody would want this data.”— Group Controller

Reason:

Mainly because the shared password was last changed 411 days ago. Started as Customers_final_FINAL_use-this-one.csv with a script attached.

Built by:

Tobias, a working student

Build time:

5 evenings

Built with:

Streamlit, somehow now in production

Database:

a database view called new-old_FINAL_FINAL

Authentication:

the guest account can see more than expected

Deployment:

behind a domain that still contains the word demo

Responsible:

an intern's old manager's manager

Documentation:

a Jira ticket with 45 comments

Security situation:

CSRF protection was temporarily disabled

Future disaster:

It will eventually process €799 per month.

Age: 5.5 years · originally expected to last 3 months · 5 owners so far · survived 1 reorganisation · last meaningful change 3 days ago · original builder left 774 days ago

Rated common mostly because: 84 users, alive 22x longer than intended, the builder has left.