Sales built a customer portal

“We'll add monitoring later.”— Lukas, Sales

Reason:

Officially because the shared password was last changed 141 days ago. With 3 tests, all skipped.

Built by:

Lukas, a recruiter

Build time:

an afternoon, mostly

Built with:

Excel macros, exposed over HTTP

Database:

a backup called backup-final-May.zip

Authentication:

Basic Auth over plain HTTP

Deployment:

deployed on Tuesday immediately before a public holiday

Responsible:

Finance, according to IT

Documentation:

one README with 10 TODOs

Security situation:

the webhook secret is "secret"

Future disaster:

It will get monitoring after the first outage.

Age: 3.3 years · originally expected to last 7 days · 1 owner so far · survived 3 reorganisations · last meaningful change 420 days ago

Rated rare mostly because: 511 users, alive 170x longer than intended, 2 departments depend on it.