Facilities built a vendor onboarding portal

“We're too small to get hacked.”— Chen, Facilities

Reason:

Mainly because the approval chain includes 5 people and one shared mailbox. With a roadmap in the README, last touched 88 days ago.

Built by:

Chen, someone from Procurement

Build time:

a long Thursday

Built with:

Excel macros, exposed over HTTP

Database:

Firebase with open read rules since May

Authentication:

the password hint contains the password

Deployment:

hosted on the demo environment, permanently

Responsible:

"the team", which is Chen

Documentation:

a README describing a version that no longer exists

Security situation:

the security review consisted of Nadia saying "looks fine"

Future disaster:

It will turn out to contain the only correct customer addresses.

Age: 79 days · originally expected to last 14 days · 2 owners so far · last meaningful change 79 days ago · original builder left 79 days ago

Rated common mostly because: 2 accidental connections, the builder has left, alive 6x longer than intended.