The Management Assistant built something with customer data and no permissions

“It's just a form.”— Managing Director

Reason:

Mainly because the tiny change needs approval from 7 people. With dark mode and no error handling.

Built by:

Sofia, a key account manager

Build time:

an afternoon, mostly

Built with:

a Slack bot doing database writes

Database:

a MySQL database called production-new on a machine under a desk

Authentication:

SSO, but only for Elena

Deployment:

running on Ubuntu 20.04 and nobody wants to upgrade it

Responsible:

Lukas, because everyone else refused

Documentation:

two architecture diagrams that disagree

Security situation:

the API key has never been rotated

Future disaster:

It will fail during the year-end close.

Age: 1.7 years · originally expected to last 7 days · 1 owner so far · last meaningful change 19 days ago

Rated common mostly because: €360k per year, alive 88x longer than intended, 1 accidental connections.