• rtxn@lemmy.world
    link
    fedilink
    arrow-up
    21
    ·
    edit-2
    2 years ago

    Our business-critical internal software suite was written in Pascal as a temporary solution and has been unmaintained for almost 20 years. It transmits cleartext usernames and passwords as the URI components of GET requests. They also use a single decade-old Excel file to store vital statistics. A key part of the workflow involves an Excel file with a macro that processes an HTML document from the clipboard.

    I offered them a better solution, which was rejected because the downtime and the minimal training would be more costly than working around the current issues.

    • Tar_alcaran@lemmy.world
      link
      fedilink
      arrow-up
      7
      ·
      2 years ago

      The library I worked for as a teen used to process off-site reservations by writing them to a text file, which was automatically e-faxed to all locations every odd day.

      If you worked at not-the-main-location, you couldn’t do an off-site reservation, so on even days, you would print your list and fax it to the main site, who would re-enter it into the system.

      This was 2005. And yes, it broke every month with an odd number of days.

    • bleistift2@feddit.de
      link
      fedilink
      arrow-up
      2
      ·
      2 years ago

      cleartext usernames and passwords as the URI components of GET requests

      I’m not an infrastructure person. If the receiving web server doesn’t log the URI, and supposing the communication is encrypted with TLS, which removes the credentials from the URI, are there security concerns?

      • nudelbiotop@feddit.de
        link
        fedilink
        arrow-up
        2
        ·
        edit-2
        2 years ago

        Anyone who has access to any involved network infrastructure can trace the cleartext communication and extract the credentials.

        • walkwalkwalkwalk@feddit.uk
          link
          fedilink
          arrow-up
          1
          ·
          2 years ago

          What do you mean by any involved network infrastructure? The URI is encrypted by TLS, you would only see the host address/domain unless you had access to it after decryption on the server.

      • nijave@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        ·
        2 years ago

        Browser history

        Even if the destination doesn’t log GET components, there could be corporate proxies that MITM that might log the URL. Corporate proxies usually present an internally trusted certificate to the client.

    • SSTF@lemmy.world
      link
      fedilink
      arrow-up
      1
      ·
      2 years ago

      downtime

      minimal retraining

      I feel your pain. Many good ideas that cause this are rejected. I have had ideas requiring one big downtime chunk rejected even though it reduces short but constant downtimes and mathematically the fix will pay for itself in a month easily.

      Then the minimal retraining is frustrating when work environments and coworkers still pretend computers are some crazy device they’ve never seen before.

  • esadatari@lemmy.world
    link
    fedilink
    arrow-up
    12
    ·
    2 years ago

    i worked for a hybrid hosting and cloud provider that was partnered with Electronic Arts for the SimCity reboot.

    well half way through they decided our cloud wasn’t worth it, and moved providers. but no one bothered to tell all the outsourced foreign developers that they were on a new provider architecture.

    all the shit storm fail launch of SimCity was because of extremely shitty code that was meant to work on one cloud and didn’t really work on another. but they assumed hurr hurr all server same.

    so you guys got that shit launch and i knew exactly why and couldn’t say a damn thing for YEARS

  • thrawn@lemmy.world
    link
    fedilink
    arrow-up
    10
    ·
    2 years ago

    It’s pretty depressing, but the fact that soil and groundwater are almost certainly contaminated anywhere that humans have touched. I’ve seen all kinds of places from gas stations, to dry cleaners, to mines, to fire stations, to military bases, to schools, to hydroelectric plants, the list could go on, and every last one of them had poison in the ground.

    • pfannkuchen_gesicht@lemmy.one
      link
      fedilink
      arrow-up
      3
      ·
      2 years ago

      Some places are insanely polluted to the point where you wonder how a whole company could be so braindead and essentially poison themselves.
      A place not far from where I live had a chemical plant which just dumped loads of chemicals on a meadow for years. Now there are ground water pumps installed there which need to run 24/7 so that the chemicals don’t contaminate nearby rivers and hence the rest of the country.
      When taking samples from the pumped up water you can smell gasoline.

      • dammitBobby@lemm.ee
        link
        fedilink
        arrow-up
        5
        ·
        2 years ago

        We’re house shopping and there has been a house on a lake sitting on the market forever. I got curious and researched the lake and… It’s a literal superfund site. The company that was on the other side of the lake just dumped their waste chemicals right on the shore and it has polluted both the lake and ground water forever essentially because they don’t break down. I looked up the previous owner… Died of cancer. The shit that companies are and were allowed to get away with is just insane. Meanwhile right wing nut jobs want to get rid of the EPA (which was ironically created by Richard Nixon).

      • PoliticalAgitator@lemm.ee
        link
        fedilink
        arrow-up
        1
        ·
        2 years ago

        A place not far from where I live had a chemical plant which just dumped loads of chemicals on a meadow for years.

        Sounds cheap.

  • MrBodyMassage@lemmy.world
    link
    fedilink
    arrow-up
    9
    ·
    2 years ago

    There is a million times more counterfeit/fake items at amazon than you think, and they dont care one bit to fix the problem

    • Sharkwellington@lemmy.one
      link
      fedilink
      arrow-up
      2
      arrow-down
      1
      ·
      2 years ago

      I recall watching a video about the nature of how things are stored at Amazon warehouses - basically if there are multiple sellers offering the same item it all goes in the same bin. Even if you are providing a genuine product, there’s a very good chance one of the other sellers is not, and that counterfeit gets sent out attached to your seller ID. Then you get a complaint for selling a counterfeit item someone else provided.

      Then when that seller is caught and booted, they just register another trademark with 5-10 random characters and do it again. This is causing a massive headache for the US Trademark Office as well.

      • Alethe Crow@sh.itjust.works
        link
        fedilink
        arrow-up
        1
        ·
        2 years ago

        Having worked for Amazon across multiple facilities. This is not true or at least wasn’t. When stowing everything seemed pretty random for spots. Seemed to be where ever there was space. But the items themselves when not sold directly by Amazon use a different set of numbers than the B00 number I think it is an FBA (fulfilled by Amazon) number.

        That being said, just going to the bathroom was enough to tank the rate for day and have to play catch-up. Lunches reset this.

        In one facility they caught two people in a Gaylord having some relations. Same facility they found a used sex toy that had biological material.

    • drphungky@lemmy.world
      link
      fedilink
      arrow-up
      0
      ·
      2 years ago

      they dont care one bit to fix the problem

      Who is they? Warehouse workers? Because without getting into too many details, I know someone fairly high up at Amazon corporate, and if I recall correctly her colleague runs a whole…divison? I don’t know, largish multi-person unit…and their whole job is addressing the counterfeit problem. I think it’s just really hard to do.

    • Paradox@lemdro.id
      link
      fedilink
      English
      arrow-up
      0
      ·
      2 years ago

      I bought a pepper grinder called the Pepper Cannon. Yes, its wonderfully overengineered and costs a fortune. But it’s made in the USA, and they’ve been pretty open with their startup process for making it.

      Few months ago I was browsing across amazon and lo and behold, some pepper grinders that look identical to the pepper cannon came up. They were all cheaper knockoffs, selling for a fraction of the cost, and outright stealing PCs industrial design. I didn’t buy one, as I don’t need one and didn’t really care enough to test if the mechanism was the same as the one I bought, but I did drop a line to the pepper cannon guys so they can try to get em delisted

      • Mikina@programming.dev
        link
        fedilink
        English
        arrow-up
        0
        ·
        2 years ago

        Now I want a Pepper Cannon. Would you recommend getting it, before I ruin my hype by looking up the price or what is actually is? :D

        • Paradox@lemdro.id
          link
          fedilink
          English
          arrow-up
          1
          ·
          2 years ago

          Its really great if you like pepper. It puts out an absolute ton of it, and you’ll find yourself going through way more black pepper than you thought you ever could. And the grind settings are unrivaled; you can get tiny little faerie dusts of pepper, all the way up to big honkin flakes that work great on a steak. Whenever I’m doing a brisket or similar on the smoker, its great to have on hand

          Its milled out of a single billet of aluminum, the grinding mechanism js custom built, and the whole thing just screams quality.

          And you pay for it. They’re around $200

          There’s also a salt cannon, if you want the same sort of thing but built for salt. I got it because I like the matching pair, but you don’t strictly need it; salt is salt, regardless of where it was ground.

  • Whitebrow@lemmy.world
    link
    fedilink
    arrow-up
    9
    ·
    2 years ago

    The programming team that is working hard on your project is just one dude and he smells funny. The programming team you’ve met in your introductory meeting are just the two unpaid interns that will be fired or will quit within the next two months and don’t know what’s happening. We don’t do agile despite advertising it. Also your project being a priority means it’ll be slapped together from start to finish 24 hours prior to the deadline. Oh and there will be extra charges to fix anything that doesn’t work as it should.

  • shittymorph@lemmy.world
    link
    fedilink
    arrow-up
    10
    arrow-down
    2
    ·
    2 years ago

    I used to work for a popular wrestling company, billionaire owner, very profitable, would write off any OSHA penalties as the ‘cost of doing business’ just as they did in 1998, when The Undertaker threw Mankind off Hell In A Cell, and plummeted 16 ft through an announcer’s table

    • Gearheart@lemmy.world
      link
      fedilink
      arrow-up
      4
      ·
      edit-2
      2 years ago

      I want to believe… but the morph has always been exactly.

      “nineteen ninety eight when the undertaker threw mankind off hell in a cell and plummeted sixteen feet through an announcer’s table.”

      But I want to believe…

      Edit: looking back at previous shittymorph posts. Grammar, punctuation and delivery is at much higher standard… I’m sad 😢. I’m hoping that I’m way way wrong. Can anyone reach out to shittymorph on reddit to confirm?

      • shittymorph@lemmy.world
        link
        fedilink
        arrow-up
        2
        ·
        2 years ago

        That is quite an astute observation, in fact many folks would have overlooked such precise details. As you could imagine, with newness and changing situation such as a major platform shift, and as we enter a revolutionary technological time period in hopes of a prosperous fediverse, it’s easy for us to become a overzealous and infatuated with all the excitement, but we must remember, it pales in comparison to the crowd’s excitement in nineteen ninety eight when the undertaker threw mankind off hell in a cell and plummeted sixteen feet through an announcer’s table.

            • ThtCrzyBstrd@lemmy.world
              link
              fedilink
              arrow-up
              2
              ·
              2 years ago

              Back on the site-that-must-not-be-named, u/shittymorph would occasionally come out of nowhere with the one story about Hell in a Cell. It was his thing. Shortly before the place went to absolute hell, he posted saying he was stepping away for personal reasons.

              We believe this is an imposter.

    • ikidd@lemmy.world
      link
      fedilink
      arrow-up
      2
      ·
      2 years ago

      You son of a bitch, I don’t know if you’re the og shittymorph, but I missed that bastard.

  • shadesdk@lemmy.ml
    link
    fedilink
    arrow-up
    8
    ·
    edit-2
    2 years ago

    The company would bid on government contracts, knowing full well they promised features that didn’t exists and never would, but calculating that the fine for not meeting the specs was lower than the benefit of the contract and getting the buyers locked into our system. I raised this to my boss, nothing changed and I quit shortly after.

  • pureness@lemmy.world
    link
    fedilink
    arrow-up
    7
    ·
    2 years ago

    Geek Squad, We were flying under the radar upgrading Macbook RAM, until one day we became officially Apple Authorized to fix iPhones, which means we were no longer allowed to upgrade Macbook RAM since the Macbooks were older and considered “obsolete” by apple, meaning we were unable to repair or upgrade the hardware the customer paid for, simply because apple said it was “too old”. it was at this point in my customer interaction, that we recommend a repair shop down the road that isn’t held at gunpoint by apple ;)

  • TerkErJerbs@lemm.ee
    link
    fedilink
    arrow-up
    4
    ·
    2 years ago

    I quit a well known ecomm tech company a few months ago ahead of (another) one of their layoff rounds because upper mgmt was turning into ultra-wall street corpo bullshit. With 30% of staff gone, and yet our userbase almost doubling over the same period, they wanted everyone to continue increasing output and quality. We were barely keeping up with our existing workload at that point, burnout was (and still is) rampant.

    Over the two weeks after I gave my notice I discovered that in the third-party app ecosystem many thousands of apps that had (approved) access to the Billing API weren’t even operating anymore. Some had quit operating years ago, but they were still billing end-users on a monthly basis. Many end-users install dozens of apps (just like people do with mobile phones) and then forget they ever did so. The monthly rates for these apps are anywhere from 3 to 20 dollars per month, many people never checked their bank statements or invoices (when they eventually did, they’d contact support to complain about paying for an app that doesn’t even load and may not have for months or years at this point).

    I gathered evidence on at least three dozen of these zombie apps. Many of them had hundreds of active installs, and were billing users for in some cases the past three years. I extrapolated that there were probably in the high-hundreds or low-thousands of these zombie apps billing users on the platform, amounting to high-thousands to low-tens-of thousands of installs… amounting to likely millions per year in faulty and sketchy invoicing happening over our Billing API.

    Mgmt actually did put together a triage team to address my findings, but I can absolutely assure you the only reason they acted so quickly is because I was on the way out of the company. I’d spotted things like this in the wild previously and nothing had ever been done about it. The pat answer has always been well people are responsible for their own accounts and invoicing. I believe they acted on this one because I was being very vocal about how it would be ‘a shame’ if this situation ever became public, and all those end-users came after the company for those false invoices at one time. It would be a PR and Support nightmare.

    You have definitely interacted with this ecommerce platform if you shop online.

  • Abrslam @sh.itjust.works
    link
    fedilink
    arrow-up
    4
    ·
    2 years ago

    I worked for for the railroad. Nothing is fixed ever. I witnessed hundreds of code violations every day for years. Doesn’t matter if a rail car or locomotive meets code as long as it “can travel” its good to go.

    When an employee inspector finds a defective rail car management determines if it will get fixed. If the supervisor “feels” like “it’s not that bad” then the rail car is “let go”.

  • confluence@lemmy.world
    link
    fedilink
    arrow-up
    4
    ·
    2 years ago

    I worked as a pastor and professor for a global, evangelical television ministry/college. They knowingly conceal scholarship on the Bible and punish their pastors for asking any questions that undermine their most closely held traditions (including anti-evolution, mental illness is supernatural, etc.). They tell their US viewers that they can’t call themselves Christians if they don’t vote Republican, while still enjoying tax-exempt status. They use pseudohistorians to inspire Christian Nationalism over their network, and are one of the largest propaganda networks for the Religious Right. A U.S. Capitol police commander told me his men were fighting people who were wearing the network’s brand.

        • vaultdweller013@sh.itjust.works
          link
          fedilink
          arrow-up
          0
          ·
          2 years ago

          I feel like there are minimum two definitions of cult, that being a high controll group like say jones town and to a lesser but still damaging extent seventh day adventists for example and just a smaller religious grouping.

            • HardlightCereal@lemmy.world
              link
              fedilink
              arrow-up
              1
              ·
              2 years ago

              The BITE classification was invented in order to justify hatred of small religions, by taking a word that already had a meaning (cult) and attaching a second, pejorative meaning to it. It’s like if I write a fantasy novel with a species of evil creatures called jews. Jew is already a word, and it’s a horrific act of religious persecution to take a pre-existing word for marginalised religions and spin it into an unrelated negative.

  • FireRetardant@lemmy.world
    link
    fedilink
    arrow-up
    4
    ·
    edit-2
    2 years ago

    1-800-got-junk? doesn’t care at all about its environmental impact. No sorting what so ever happens to what goes on their trucks it all goes to landfills. All the ads will say they recycle and that they repurpose old furniture but I was threatened with being fired when I recommended donating antiques instead of dumping a load of furniture.

    More jobs and more profits comes before anything else in that company, including employee health and safety. Several times I was told to enter spaces we werent trained for (attics and crawl spaces) and carry waste I legally couldn’t transport (human/organic wastes and the laws states the driver is fined, not the company). One guy injured his shoulder during an attic job and was told to finish the shift or lose his job. Absoulte scum of a company with very sleazy management and possibly the labour board in their pocket as they kept “losing the files” when I tried to file a report with buddy’s shoulder (he was hesistant to report for fear of losing his job).

  • ChickenLadyLovesLife@lemmy.world
    link
    fedilink
    arrow-up
    3
    ·
    2 years ago

    I used to work for a cable company whose name rhymes with “bombast”. They offer a wifi service whose name is a derivation of the word “infinity”. Most of the hotspots for this wifi service are provided by the Bombast wireless routers that cable customers have in their homes. So if you’re a Bombast customer, you’re helping to pay the electrical bill and giving up bandwidth in order to provide Infinity wifi.

    Another fun Bombast story: the founder, a man who always wore a bowtie, died a few years ago. At a memorial service in his honor, a number of vice presidents and other executives (including my boss at the time) wore bowties. Everyone who wore a bowtie to the service was fired within a week.

  • LucasWaffyWaf@lemmy.world
    link
    fedilink
    arrow-up
    3
    ·
    2 years ago

    Anybody knows that one waterfall attraction in the Southeast US? The one that advertises bloody everywhere? Waterfall is pumped during the dry seasons, otherwise there’d be nothing to see. Lots of the formations are fake, and the Cactus and Candle formation was either moved from a different spot in the cave, or is from a different cave in New Mexico. Management doesn’t want people to know that, but fuck 'em.

  • KingJalopy @lemm.ee
    link
    fedilink
    arrow-up
    3
    ·
    2 years ago

    I work in pest control and 99% of the shit we use. You can buy without having a license. The license just covers us to use the products on other people’s houses responsibly. If you really want to do pest control, you only need a few chemicals and they are all easily obtainable on Amazon.

      • KingJalopy @lemm.ee
        link
        fedilink
        arrow-up
        1
        ·
        edit-2
        2 years ago

        Best products for general pest control

        -demand CS (very strong can burn skin) -talstar p (better during cold months) -Archer (good for roaches) -Alpine wsg (water soluble granules) - 1oz per gallon Advion WDG (water dissolvable granules) similar to Alpine.

        Flea/tick control

        -precor (spray can) -cimexa (dust)-good for weep holes around exterior of home too. PT flea and tick control (spray can)

        Ants

        -intice 10 granules (sprinkle around the perimeter of the home) -maxforce gel -the above mentioned chemicals Terro ant bait is a gimmick

        Spiders

        -onslaught Fastcap (great shit for spiders and scorpions)

        Any other particular questions just ask.

        • BluesF@lemmy.world
          link
          fedilink
          arrow-up
          1
          ·
          2 years ago

          We have a persistent weevil problem (at least I think they’re weevils, they were concentrated in an old bag of flour in the back of a cupboard), is there anything you know of that can wipe em out? We’ve containerised our cupboards and make efforts to keep surfaces free of, yknow, weevil food, but so far they’re resistant to starvation. Vinagre seems to help… a bit.

          • KingJalopy @lemm.ee
            link
            fedilink
            arrow-up
            1
            ·
            2 years ago

            Talstar p will kill them as well as the archer. You need an insect growth regulator. Treat the infected food and throw it out. Then treat your whole pantry/kitchen. The precor will also work.