Marketing built a status page for internal systems

“The data isn't that sensitive.”— Jens, Marketing

Reason:

Because the workaround has been in production for 11 months. Started as Customers_new2.xlsm with a script attached.

Built by:

Jens, a recruiter

Build time:

a long Thursday

Built with:

Power Apps, licensed to one employee

Database:

a global JavaScript variable

Authentication:

the session cookie expires in 10 years

Deployment:

deployed to staging, which customers are now using

Responsible:

Nadia, who insists they are not the owner

Documentation:

a Miro board that takes 5 minutes to load

Security situation:

no security review, no plans for one

Future disaster:

It will get SSO after somebody shares the password publicly.

Age: 2.7 years · originally expected to last 7 days · 1 owner so far · survived 1 reorganisation · last meaningful change 210 days ago

Rated common mostly because: alive 143x longer than intended, 2 accidental connections, €49k per year.