Real HR policy ...

HR Manager in Heaven!!!

One day while walking down the street a highly successful HR Manager was hit by a bus and she died. Her soul arrived up in heaven where she was greeted by God himself.

"Welcome to Heaven," said God. "

"Well, What we're going to do is let you have a day in Hell and a day in Heaven and then you can choose whichever one you want to spend an eternity in."

"Actually, I think I've made up my mind, I prefer to stay in Heaven", said the woman.

"Sorry, we have rules."

And with that God put the HR Manager in an elevator and it went down-down-down to hell.

The doors opened and she found herself stepping out onto the hell wt beautiful golf course. And a country club and standing in front of her were all her friends - fellow executives that she had worked with and they were well dressed in evening gowns and cheering for her. they talked about old times.
She met the Devil who was really a nice guy and She was having such a good time that before she knew it, it was time to leave.

Everybody waved goodbye as she got on the elevator.

The elevator went up-up-up and opened back up at the Pearly Gates and found God waiting for her.

"Now it's time to spend a day in heaven," he said. So she spent the next 24 hours around on clouds and playing the harp and singing. She had great time and before she knew it her 24 hours were up and God came and got her.

"So, you've spent a day in hell and in heaven. Now u must choose ur eternity,"

The woman paused for a second and then replied, "Well, I never thought I'd say this, I mean, Heaven has been really great and all, but I think I had a better time in Hell."

So God escorted her to the elevator and again she went down-down-down back to Hell.

When the doors of the elevator opened she found herself standing in a desolate wasteland covered in garbage and filth. She saw her friends were dressed in rags and were picking up the garbage and putting it in sacks.

The Devil came up to her and put his arm around her.

"I don't understand," stammered the woman, "yesterday I was here and there was a golf course and a country club and we ate lobster and we danced and had a great time. Now all there is a wasteland of garbage and all my friends look miserable."

The Devil looked at her smiled and said:
...
...
...
....
....

"Yesterday we were recruiting you, today you're an Employee".😁😁😁
☝dedicated to all companies

I'm fixing a security exploit, and it's a goddamn mountain of fuckups.

First, some idiot (read: the legendary dev himself) decided to use a gem to do some basic fucking searching instead of writing a simple fucking query.

Second, security ... didn't just drop the ball, they shit on it and flushed it down the toilet. The gem in question allows users to search by FUCKING EVERYTHING on EVERY FUCKING TABLE IN THE DB using really nice tools, actually, that let you do fancy things like traverse all the internal associations to find the users table, then list all users whose password reset hashes begin with "a" then "ab" then "abc" ... Want to steal an account? Hell, want to automate stealing all accounts? Only takes a few hundred requests apiece! Oooh, there's CC data, too, and its encryption keys!

Third, the gem does actually allow whitelisting associations, methods, etc. but ... well, the documentation actually recommends against it for whatever fucking reason, and that whitelisting is about as fine-grained as a club. You wanna restrict it to accessing the "name" column, but it needs to access both the "site" and "user" tables? Cool, users can now access site.name AND user.name... which is PII and totally leads to hefty fines. Thanks!

Fourth. If the gem can't access something thanks to the whitelist, it doesn't catch the exception and give you a useful error message or anything, no way. It just throws NoMethodErrors because fuck you. Good luck figuring out what they mean, especially if you have no idea you're even using the fucking thing.

Fifth. Thanks to the follower mentality prevalent in this hellhole, this shit is now used in a lot of places (and all indirectly!) so there's no searching for uses. Once I banhammer everything... well, loads of shit is going to break, and I won't have a fucking clue where because very few of these brainless sheep write decent test coverage (or even fucking write view tests), so I'll be doing tons of manual fucking testing. Oh, and I only have a week to finish everything, because fucking of course.

So, in summary. The stupid and lazy (and legendary!) dev fucked up. The stupid gem's author fucked up, and kept fucking up. The stupid devs followed the first fuckup's lead and repeated his fuck up, and fucked up on their own some more. It's fuckups all the fucking way down.

there's this club at my school, called STEM, and another called "science olympiad." both are pretty cringey, bad, or boring. science olympiad was just for the college credit. during the intro to the club, they said there was a coding section. "game on!" is what they dubbed it as, where basically you're timed to make a game in scratch. i'm fucking tired of it. why is scratch considered programming? don't get me wrong, i'll write an OS in PHP before i say code.org is better than scratch, but fuck it. its a fucking interpreted language that's interpreted by another interpreted language. i don't understand why this shit is still used. scratch isn't good. please codecademy or w3schools or just write in binary directly, but not scratch. my hand hurts from dragging and dropping, my eyes hurt from the light theme, my imaginary cat committed suicide after learning about scratch's mascot. fuck it. now onto stem club, fuck it too. not for being bad (well, kinda), but for not being more recognized. it should be above science olympiad, and other clubs because you actually have to think instead of just memorize. but alas, we still were offered the choice of scratch to program the robot. sigh. arduino much? i guess not. challenging much? nope. was i elected "leader"? with three of my friends out of the eight there, i could have been, but no. effort in this would be depressing.

When you post an opening for a junior developer, and the only resume you get is a "Senior Developer with Team Lead Experience" you interview them anyway...

When that interview reveals their resume is fiction, and they're very junior.

(No punchlines just a rant sorry, very angry at this person. Can't leave the club. Talked to seniors about it. Talked to coworkers for some voluntary help. No help here ;-;)

Yesterday: we need to have a meet to plan things out. 3 PM?

Rainbow eating monster: Yes

Yesterday 5 PM: Reminder

Rainbow shitting monster: I can't I have important things

Yesterday 5:01 PM: Children eating monster (in group): hey yall watching the event going on rn

Yesterday 5:02 PM: is this what you're busy with?

Rabbit pooping monster: this of course I can't miss. And anyways I have 5 more things to do: thing that I've already done, this club meet that you asked me to do yesterday and I said I'd have done, a meet with a friend, I'm having lunch now, and a meet with you. Hence I can't meet with you.

...

Today (in group): Kidney stealing monster: @me (irrelevant to discussion) can you meet for other thing that *I* was supposed to do a week ago?
Will you be available @me at 5 PM?
Okay everyone, assuming @me is available, tentatively we meet at 5 PM.

Today 12 PM: i wake up to this faeces