I can go on.
I don't mean focused retrospectives, which is time set aside to constructively address things worth complaining about.
This must be the person who writes job descriptions.
There's so much bullshit going on in the cyber security scene, it's ridiculous. From supposed "AI driven network analysis" to "data enrichment pipelines"... everything is built as Enterprise as possible, and as useless as possible.
An XDR system that costs more than 500k per month and cannot even show the geolocation of an IP it's supposed to be able to block traffic from...I mean, come on...
Let alone the alert fatigue Blueteams have to deal with every day, where 99% of alerts is just noise, and the supposedly "intelligent" system doesn't even correlate the OS, let alone the programming language its services are running on.
Analysts are so overworked because all the products suck and use UX from the 90s, and are not even capable of batch-closing alerts when they are identical. It's so stupidly built that I don't even know why upper management buys that crap.
You mean motivated people with stronger work ethics? There’s a lot more to life than being smart.
How you get as belittling & insulting a turn as "people with woth stronger work ethic" (as though people who like doing work versus being overhead/commanders are all low ethic) is a sheer mystery to me
Another one - refusing to do any testing or CI because they think it will slow down the team.
This is a new one for me. I found an open source project with ~40k stars that I wanted to contribute to. I thought, there are almost no tests here, so I wrote up some tests and hooked it up to GitHub actions to run on PR submission. The maintainer of the project told me no thanks. It really surprised me! I thought everyone would be grateful to have more testing, but that apparently isn’t the case.
I've worked in the past with teams that have cargo-culted "Build fast, break things" to mean "If CI can builds it, let it deploy to prod". No tests, no Dev checks, barely any code review (The namesake "LGTM" on 1000 line PRs within 5 mins of it being opened or the worse Reviewer=Self), and things pushed to prod which invariably breaks and then everyone is scurrying to push hacky fixes because "it's a prod issue". And rather than fix the issue, it's always suggested to add more folks on call for critical issues etc.
It's okay when junior engineers do this because they're still building up their best practices, but when senior/staff engineers still bat for this process, it really grinds my gears because they not only mess up the company but "teach" junior folks that this shit proces is an acceptable way to build software.
Everyone will acknowledge that customers are seeing a lot of bugs (to the point where customers have attritioned because of buggy behaviour), and we need to be better, but noone acknowledges that CI/CD is not a silver bullet, but a rather intricate process that has many moving parts and needs to be built up accordingly.
2) Sprints are made overly ambitious because if not everything is done it makes it seem that someone slacked off when the achieving all targets was impossible in the in the first place.
> when the achieving all targets was impossible in the in the first place.
slightly related: when managers keep pushing for "increasing velocity" every sprint, causing those impossible-to-achieve targets (and ends up demotivating the team like nothing else)Not enough bottom up feedback. Roadmaps that can reflect the opportunities with high mechanistic-sympathy or address the real issues/opportunities seem rare once scale gets even mildly higher.
Product driven orgs that too often ask for quick & dirty & fast. Cutting corners is ok sometimes but if you keep doing ot, everything becomes a geometrically worsening half-baked barely-thought-out terribly-tentaclly-tangled mess, and the managerial/product class people never face it, see it, & move on, leaving the engineersired on their shit.
Quick & dirty also has a raft of personal issues associated with it. It's pretty insulting, often, as though product thinks they know best & are going to get some big savings. But 4 out of 5 times the damage more than makes up, but thats rarely admitted to or seen, and the savings never seem super significant. Also, good luck telling engineers to not take pride, to just throw shit together; I have found few respected peers who like being told that & who stay motivated when being told this is low quality whatever we're working on & to you know, just make some rough cuts at it & ship it.
The second of my two, asking for quick & dirty, leads to shit relationships & shit systems, which are major major reasons why my first issue, the on the ground knowledge of what we have & what we should be springing for & ehat we should be improving, becomes just a critical restabilization; bad jobs (or more often just accrued legacy to be honest) make it so fewer & fewer have the technical appreciation to right the hole-ridden old ship.
Yes well no one asked you to leave some text on a server somewhere and hope someone sees it. They asked if you could do X by Y time and you said YES.
Of course this usually isn't that much of a problem when the question is not too important, or the asking person knows possible options to proceed - it's usually a new or junior team member who suffers most from this. On interviews everybody is encouraged to ask questions, but in real life many become tired answering something which they know for too long - even though it's the specifics of the system, which they built unnecessarily complicated and just got used to. So unfortunately in subpar teams it becomes harder to obtain necessary information.
It's illusion that PR can usually be compact in terms of lines and files. That not only requires a good quality of code, which isn't ubiquitous, but also good understanding of code, which changes all the time with different opinions resulting in that code being modified. So PRs become rather large - and sometimes surprisingly missing useful things, because exact change isn't easy.
The PR which is hard to review may mean that the code isn't understood the same way by different people, and this is a signal that some discussion is needed. Unfortunately often that's not done, and after some efforts PR is pushed through, while misunderstandings grow.
The frustrating part is ALWAYS needing to clean up before making any contribution.
So following the advice, you always need two PRs.
I have a personal rule that I won't merge to master after lunch on Friday. I'd just rather wait until Morning.
Worst time it happened to me was the day just before the start of my Christmas holiday and it almost made me quit.
Hate it when director joins regular meeting and brings a lot of confusion with their little domain knowledge but speaking loudly thei ideas...
And also when people try to understand what business value brings shifting a button from right to left and talking about it for 40min.
"Bikeshedding." Ever since I learned that term I realized how much of my meetings are just that :(
So instead we're just not going to optimize anything, and every tool just gets slower and slower and slower.
It isn't going to make it, and it will annoy/discomfit/make life miserable for everyone.
Mis-handling of public communications on significant outages.
There is no such thing as full stack. Unless the stack is super small.