• SloppyPuppy@lemmy.world
    link
    fedilink
    arrow-up
    0
    ·
    3 years ago

    I worked for an online payment company you all know. Many eployees have access to the main DB which holds all transactions and names and everything in clear text. You could basically find out all PII (personal identification information) of any celebrity you wanted given they had anaccount. Address, phone number, credit card and all. If you knew a bit of SQL you could basically find whoever person you wanted and get purchase history and all.

    Cant say I didnt use this to find stuff about my exes or various celebrities.

    • ramjambamalam@lemmy.ca
      link
      fedilink
      arrow-up
      0
      ·
      3 years ago

      Cant say I didnt use this to find stuff about my exes

      And I can’t say that doesn’t sound creepy at all…

    • _ak@lemmy.world
      link
      fedilink
      arrow-up
      0
      ·
      3 years ago

      Address, phone number, credit card and all.

      Oh wow. As someone who used to work in Fintech and who built a PCI-DSS compliant system got it successfully certified, it would be a shame if somebody reported that company for violations that could get them to lose their PCI-DSS certification. I mean, do they just bribe their PCI-DSS auditor to overlook this, or have they just managed to hide this blatant issue so far?

      • SloppyPuppy@lemmy.world
        link
        fedilink
        arrow-up
        0
        ·
        3 years ago

        Its been about 10 years ago I wasnt a pci expert then as i am now. My understanding today is that the db was probably pci compliant. But access to it was pretty promiscuous.

  • ChickenLadyLovesLife@lemmy.world
    link
    fedilink
    arrow-up
    0
    ·
    3 years ago

    I used to work for a cable company whose name rhymes with “bombast”. They offer a wifi service whose name is a derivation of the word “infinity”. Most of the hotspots for this wifi service are provided by the Bombast wireless routers that cable customers have in their homes. So if you’re a Bombast customer, you’re helping to pay the electrical bill and giving up bandwidth in order to provide Infinity wifi.

    Another fun Bombast story: the founder, a man who always wore a bowtie, died a few years ago. At a memorial service in his honor, a number of vice presidents and other executives (including my boss at the time) wore bowties. Everyone who wore a bowtie to the service was fired within a week.

          • ChickenLadyLovesLife@lemmy.world
            link
            fedilink
            arrow-up
            0
            ·
            3 years ago

            I have no idea why they were fired or who fired them - I just know that they were fired.

            Bombast had a lot of helplessly incompetent (and sometimes clinically insane) executives running things, but they never lasted that long. There seemed to be some sort of Avenging Angel of Death wandering the Bombast Center and culling the more useless examples of management. My bowtie-wearing boss was one of these and certainly deserved the axe, but I don’t know if this was true of the other members of the bowtie brigade.

    • SetheryVanDamn@lemmy.world
      link
      fedilink
      arrow-up
      0
      ·
      3 years ago

      The shared internet thing is a setting that comes turned on for Xfinity routers by default (aka the ones you rent from them). If you go into the settings of the router you can turn the wifi sharing setting off.

    • Shad0w@lemmy.world
      link
      fedilink
      arrow-up
      0
      ·
      3 years ago

      Once I realized this I turned it off on my modem/router. I turned the router function off completely to be able to use my own equipment rather than the crap they give you.

  • rtxn@lemmy.world
    link
    fedilink
    arrow-up
    0
    ·
    3 years ago

    Our business-critical internal software suite was written in Pascal as a temporary solution and has been unmaintained for almost 20 years. It transmits cleartext usernames and passwords as the URI components of GET requests. They also use a single decade-old Excel file to store vital statistics. A key part of the workflow involves an Excel file with a macro that processes an HTML document from the clipboard.

    I offered them a better solution, which was rejected because the downtime and the minimal training would be more costly than working around the current issues.

    • Tar_alcaran@lemmy.world
      link
      fedilink
      arrow-up
      0
      ·
      3 years ago

      The library I worked for as a teen used to process off-site reservations by writing them to a text file, which was automatically e-faxed to all locations every odd day.

      If you worked at not-the-main-location, you couldn’t do an off-site reservation, so on even days, you would print your list and fax it to the main site, who would re-enter it into the system.

      This was 2005. And yes, it broke every month with an odd number of days.

  • shittymorph@lemmy.world
    link
    fedilink
    arrow-up
    0
    ·
    3 years ago

    I used to work for a popular wrestling company, billionaire owner, very profitable, would write off any OSHA penalties as the ‘cost of doing business’ just as they did in 1998, when The Undertaker threw Mankind off Hell In A Cell, and plummeted 16 ft through an announcer’s table

  • Whitebrow@lemmy.world
    link
    fedilink
    arrow-up
    0
    ·
    3 years ago

    The programming team that is working hard on your project is just one dude and he smells funny. The programming team you’ve met in your introductory meeting are just the two unpaid interns that will be fired or will quit within the next two months and don’t know what’s happening. We don’t do agile despite advertising it. Also your project being a priority means it’ll be slapped together from start to finish 24 hours prior to the deadline. Oh and there will be extra charges to fix anything that doesn’t work as it should.

    • what@lemmy.world
      link
      fedilink
      arrow-up
      0
      ·
      3 years ago

      Programming teams I’ve worked with are a joke.

      Company A: We got hacked and the lead dev argued for days it wasn’t a hack. Malware was actively being served to customers during this time period because she refused to deal with it and there was no security team.

      Company B: programming team was the IT guys nephew and some random UI designer who hadn’t finished college and was never able to be employed after finishing college…

      Company C: We interviewed a candidate who was way over qualified and would make our life so easy because he was eager and hungry. Instead we hired a bootcamper who had never heard of docker (half our infra is docker), react, or anything other than vanilla JavaScript. She failed our practical but still got hired because the hiring manager wanted and assistant. She has become a glorified project manager, but still has the title software engineer.

    • herrvogel@lemmy.world
      link
      fedilink
      arrow-up
      0
      ·
      3 years ago

      In my company we have a very modern agile workflow where QA is top priority.

      At least that what we advertise. In reality it’s all an unorganized clusterfuck where I’m pretty sure I am the only one who bothers to write automated tests. Who’s got time to write tests bro just push that shit out ASAP we’ll deal with it when the client calls us in the middle of the night to complain about previously-working shit being broken now.

    • Punkie@lemmy.world
      link
      fedilink
      arrow-up
      0
      ·
      3 years ago

      A lot of outsourcers do this. Here’s my experience with a few companies.

      • The “team” you meet are competent, English speaking fronts. They are the demo models of the people who will work on your projects.
      • After the contract is signed, these people are swapped out with randos of varying competence.
      • In some cases, some of these randos are further hidden behind aliases: people with names that are actually more than one person sharing logins and passwords.
      • They will string you along, trying to charge maximum hours worked without regards to product or services delivered.
      • Most of these companies have a “bucket of crabs” mentality: the managers are horrible, the staff incompetent, and once the gain some skill, they leave for better companies. They backstab one another, hijack projects to fuck over coworkers, and lie and cover their tracks. Some of this is cultural, like a caste system, while some are just racist.

      At one time, these people were pretty good, but they realized they had skills and left for other countries for better pay and better working conditions. The bids got more and more competitive, cutting costs until they were literally filled with low-skilled labor who can’t be promoted or leave for economic or competence reasons.

      • Mikina@programming.dev
        link
        fedilink
        arrow-up
        0
        ·
        3 years ago

        Now that I read this, I’m kinda glad that our company doesn’t do anything like that. But it’s just a small indie team porting games to consoles, so I guess what you’re mentioning is the bigger corp problem.

    • gjoel@lemmy.ml
      link
      fedilink
      arrow-up
      0
      ·
      3 years ago

      When you have a great programmer working on your project he will be cycled to a new project in 2-3 months. Your new senior developer who silently takes over the project is part time because he’s working on finishing his education.

      No one knows how anything works, except that one guy, who left the company half a year ago. That’s how all software development is.

  • MrBodyMassage@lemmy.world
    link
    fedilink
    arrow-up
    0
    ·
    3 years ago

    There is a million times more counterfeit/fake items at amazon than you think, and they dont care one bit to fix the problem

    • Paradox@lemdro.id
      link
      fedilink
      English
      arrow-up
      0
      ·
      3 years ago

      I bought a pepper grinder called the Pepper Cannon. Yes, its wonderfully overengineered and costs a fortune. But it’s made in the USA, and they’ve been pretty open with their startup process for making it.

      Few months ago I was browsing across amazon and lo and behold, some pepper grinders that look identical to the pepper cannon came up. They were all cheaper knockoffs, selling for a fraction of the cost, and outright stealing PCs industrial design. I didn’t buy one, as I don’t need one and didn’t really care enough to test if the mechanism was the same as the one I bought, but I did drop a line to the pepper cannon guys so they can try to get em delisted

      • Mikina@programming.dev
        link
        fedilink
        English
        arrow-up
        0
        ·
        3 years ago

        Now I want a Pepper Cannon. Would you recommend getting it, before I ruin my hype by looking up the price or what is actually is? :D

        • Paradox@lemdro.id
          link
          fedilink
          English
          arrow-up
          0
          ·
          3 years ago

          Its really great if you like pepper. It puts out an absolute ton of it, and you’ll find yourself going through way more black pepper than you thought you ever could. And the grind settings are unrivaled; you can get tiny little faerie dusts of pepper, all the way up to big honkin flakes that work great on a steak. Whenever I’m doing a brisket or similar on the smoker, its great to have on hand

          Its milled out of a single billet of aluminum, the grinding mechanism js custom built, and the whole thing just screams quality.

          And you pay for it. They’re around $200

          There’s also a salt cannon, if you want the same sort of thing but built for salt. I got it because I like the matching pair, but you don’t strictly need it; salt is salt, regardless of where it was ground.

    • Sharkwellington@lemmy.one
      link
      fedilink
      arrow-up
      0
      ·
      3 years ago

      I recall watching a video about the nature of how things are stored at Amazon warehouses - basically if there are multiple sellers offering the same item it all goes in the same bin. Even if you are providing a genuine product, there’s a very good chance one of the other sellers is not, and that counterfeit gets sent out attached to your seller ID. Then you get a complaint for selling a counterfeit item someone else provided.

      Then when that seller is caught and booted, they just register another trademark with 5-10 random characters and do it again. This is causing a massive headache for the US Trademark Office as well.

  • pureness@lemmy.world
    link
    fedilink
    arrow-up
    0
    ·
    3 years ago

    Geek Squad, We were flying under the radar upgrading Macbook RAM, until one day we became officially Apple Authorized to fix iPhones, which means we were no longer allowed to upgrade Macbook RAM since the Macbooks were older and considered “obsolete” by apple, meaning we were unable to repair or upgrade the hardware the customer paid for, simply because apple said it was “too old”. it was at this point in my customer interaction, that we recommend a repair shop down the road that isn’t held at gunpoint by apple ;)

    • Another Person @lemmy.world
      link
      fedilink
      arrow-up
      0
      ·
      edit-2
      3 years ago

      I worked at a 3rd party Apple retailer (they had a legacy contract from the 90s that only expired about 5-10 years ago) and they bought the cheapest RAM they could find to upgrade the Macs. They made hand over fist on RAM upgrades and still came in under what Apple charged for the same upgrade.

  • FireRetardant@lemmy.world
    link
    fedilink
    arrow-up
    0
    ·
    edit-2
    3 years ago

    1-800-got-junk? doesn’t care at all about its environmental impact. No sorting what so ever happens to what goes on their trucks it all goes to landfills. All the ads will say they recycle and that they repurpose old furniture but I was threatened with being fired when I recommended donating antiques instead of dumping a load of furniture.

    More jobs and more profits comes before anything else in that company, including employee health and safety. Several times I was told to enter spaces we werent trained for (attics and crawl spaces) and carry waste I legally couldn’t transport (human/organic wastes and the laws states the driver is fined, not the company). One guy injured his shoulder during an attic job and was told to finish the shift or lose his job. Absoulte scum of a company with very sleazy management and possibly the labour board in their pocket as they kept “losing the files” when I tried to file a report with buddy’s shoulder (he was hesistant to report for fear of losing his job).

    • Mugmoor@lemmy.dbzer0.com
      link
      fedilink
      arrow-up
      0
      ·
      3 years ago

      I’ve had a few friends work for them out in Montreal, and their parent company (2 Men and a Truck). According to them it’s a mob-operated business.

      • Thwompthwomp@lemmy.world
        link
        fedilink
        English
        arrow-up
        0
        ·
        3 years ago

        Oh no! I had a great experience with 2 men and a truck when I he used them! No idea it was associated with the 1 800 junk folks

  • Aceticon@lemmy.world
    link
    fedilink
    arrow-up
    0
    ·
    edit-2
    3 years ago

    Over a decade ago I worked as a freelancer for an Investment Bank (the largest one that went bankrupt in the 2008 Crash, which was a few years later) were the head of the Proprietary Trading Desk (the team of Traders who invest for the profit of the bank) asked me if I could change the software so that they could see the investments of the Client Trading Desk (who invest for clients with client money) was making, with the assent of the latter team.

    Now if the guys investing money for the bank know what they guys investing customer money are doing they can do things like Front-Run the customer trades (or serve them at exactly the right price to barelly beat the competiotion) thus making more profits for the bank and hence get bigger bonuses. This is why Financial regulations say that there is supposed to be so-called Chinese Walls between the proprietary trading and the customer trading activities: they’re supposed to be segregated and not visible to each other.

    Note that the heads of both teams were mates and already regularly had chats, so they might already have been exchanging this info informally.

    I was quite fresh in there (less than 1 year) and the software system I worked in at the time was used by both teams, but when I started looking into it I saw that the separation was very explicitly coded in software and that got me thinking about what I had learned from the mandatory compliance training I had done when I first joined (so, yeah, that stuff is not totally useless!!!)

    So I asked for written confirmation from the heads of both teams, and just got some vague response e-mails, no clear “do such and such”.

    So I played the fool and took it to a seperate team called Compliance (responsible for compliance with financial regulations) saying I just wanted to make sure it was all prim and proper, “just in case”.

    Of course, it kinda blew up (locally) and I ended up called to a meeting with the heads of the Prop Desk and whatnot - all stern looks and barelly contained angry tones - were I kept playing the fool.

    Ultimatelly it ended up not being a problem for me at all, to the point that after that bank went bust and its component parts were sold to another bank, the technical team manager asked me to come back to work with the same IT group (remember, I was a freelancer) with even greater responsabilities, so this didn’t exactly damage my career.

    That said, over the years there were various cases of IT guys in large investment banks who went along with “innocent” requests from the Traders and ended up as the fall-guys for subsequent breaking of Finance Regulations, serving jail time, so had I gone along with that request I would’ve actually risked ending up in jail.

    (Financial Regulators were and are a complete total joke when it comes to large banks, which actually makes it more likely that some poor techie guy will be made the fall guy to protected the bank and its heads).

    • Wats0ns@sh.itjust.works
      link
      fedilink
      arrow-up
      0
      ·
      3 years ago

      This is your friendly reminder that the only person who went to jail for the diesel gate is the software developer who implemented the test-cheating practice. Not the managers, the directors who asked for it or anybody else

  • Boozilla@lemmy.world
    link
    fedilink
    arrow-up
    0
    ·
    3 years ago

    Health insurance company I worked for would automatically reject claims over a certain amount without reviewing them. Just to be dicks and make people have to resubmit. This was over 25 years ago, but it’s my understanding many health insurers still pull this shit. They don’t care if it’s legal or not. Enforcement is lazy and fines are cheaper than medical claims.

    Obviously this is in the USA.

  • Abrslam @sh.itjust.works
    link
    fedilink
    arrow-up
    0
    ·
    3 years ago

    I worked for for the railroad. Nothing is fixed ever. I witnessed hundreds of code violations every day for years. Doesn’t matter if a rail car or locomotive meets code as long as it “can travel” its good to go.

    When an employee inspector finds a defective rail car management determines if it will get fixed. If the supervisor “feels” like “it’s not that bad” then the rail car is “let go”.

    • oatscoop@midwest.social
      link
      fedilink
      arrow-up
      0
      ·
      3 years ago

      Oh, so like ambulances in the USA.

      “The ambulance had issues making it unsafe (or even illegal) to drive? But it can still drive down the road? Doesn’t seem too bad: keep an eye on it.”

  • LucasWaffyWaf@lemmy.world
    link
    fedilink
    arrow-up
    0
    ·
    3 years ago

    Anybody knows that one waterfall attraction in the Southeast US? The one that advertises bloody everywhere? Waterfall is pumped during the dry seasons, otherwise there’d be nothing to see. Lots of the formations are fake, and the Cactus and Candle formation was either moved from a different spot in the cave, or is from a different cave in New Mexico. Management doesn’t want people to know that, but fuck 'em.

      • DannyMac@lemmy.world
        link
        fedilink
        arrow-up
        0
        ·
        3 years ago

        After looking it up, you can find reports from others stating the same things. When I was there as a kid, I remember that they claimed no one knew where the source of the water came from… I guess they actually know enough to help it out at least, lol

        I really enjoyed it and would like to go again, but it’s no Mammoth Cave.

  • Ace_of_spades@lemmy.world
    link
    fedilink
    arrow-up
    0
    ·
    3 years ago

    Just remembered another one:

    Have you ever had an anonymous survey sent to you by your work or by a company your work has hired? They’re not anonymous. Management knows what your opinions are and will use them against you.

    I worked for a consultant that would try and help fix businesses. The worst example I can think of was when I saw one person had answered a survey question saying that their employer had a “blame culture”. Rather than trying to work on the processes or address why something had gone wrong, staff would start pointing fingers to keep out of trouble. This didn’t fix anything and only made people spend all the time covering their posteriors.

    The manager called a general meeting of everyone at that site and then singled out the employee who’d mentioned the blame culture, blaming him for saying there was a blame culture. The employee then pointed out that they’d been told, in writing, that the survey was anonymous. That employee called the manager a liar and then she lost control of the meeting, with lots of employees calling her a liar and several storming out. They weren’t in business the next year.

  • Gabu@lemmy.world
    link
    fedilink
    arrow-up
    0
    ·
    3 years ago

    A national (not US) cake company uses expired ingredients because it’s cheaper. Yes, I did report them to the authorities.

  • oshu@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    3 years ago

    The majority of tech startups are super chaotic and barely keeping things running. More than you would ever imagine.

    • nijave@lemmy.world
      link
      fedilink
      English
      arrow-up
      0
      ·
      3 years ago

      Ahh yes, the perpetual slow burn (that sometimes flames up into a much larger fire).