I can go on.
I don't mean focused retrospectives, which is time set aside to constructively address things worth complaining about.
There's so much bullshit going on in the cyber security scene, it's ridiculous. From supposed "AI driven network analysis" to "data enrichment pipelines"... everything is built as Enterprise as possible, and as useless as possible.
An XDR system that costs more than 500k per month and cannot even show the geolocation of an IP it's supposed to be able to block traffic from...I mean, come on...
Let alone the alert fatigue Blueteams have to deal with every day, where 99% of alerts is just noise, and the supposedly "intelligent" system doesn't even correlate the OS, let alone the programming language its services are running on.
Analysts are so overworked because all the products suck and use UX from the 90s, and are not even capable of batch-closing alerts when they are identical. It's so stupidly built that I don't even know why upper management buys that crap.
Another one - refusing to do any testing or CI because they think it will slow down the team.
I've worked in the past with teams that have cargo-culted "Build fast, break things" to mean "If CI can builds it, let it deploy to prod". No tests, no Dev checks, barely any code review (The namesake "LGTM" on 1000 line PRs within 5 mins of it being opened or the worse Reviewer=Self), and things pushed to prod which invariably breaks and then everyone is scurrying to push hacky fixes because "it's a prod issue". And rather than fix the issue, it's always suggested to add more folks on call for critical issues etc.
It's okay when junior engineers do this because they're still building up their best practices, but when senior/staff engineers still bat for this process, it really grinds my gears because they not only mess up the company but "teach" junior folks that this shit proces is an acceptable way to build software.
Everyone will acknowledge that customers are seeing a lot of bugs (to the point where customers have attritioned because of buggy behaviour), and we need to be better, but noone acknowledges that CI/CD is not a silver bullet, but a rather intricate process that has many moving parts and needs to be built up accordingly.
2) Sprints are made overly ambitious because if not everything is done it makes it seem that someone slacked off when the achieving all targets was impossible in the in the first place.
Not enough bottom up feedback. Roadmaps that can reflect the opportunities with high mechanistic-sympathy or address the real issues/opportunities seem rare once scale gets even mildly higher.
Product driven orgs that too often ask for quick & dirty & fast. Cutting corners is ok sometimes but if you keep doing ot, everything becomes a geometrically worsening half-baked barely-thought-out terribly-tentaclly-tangled mess, and the managerial/product class people never face it, see it, & move on, leaving the engineersired on their shit.
Quick & dirty also has a raft of personal issues associated with it. It's pretty insulting, often, as though product thinks they know best & are going to get some big savings. But 4 out of 5 times the damage more than makes up, but thats rarely admitted to or seen, and the savings never seem super significant. Also, good luck telling engineers to not take pride, to just throw shit together; I have found few respected peers who like being told that & who stay motivated when being told this is low quality whatever we're working on & to you know, just make some rough cuts at it & ship it.
The second of my two, asking for quick & dirty, leads to shit relationships & shit systems, which are major major reasons why my first issue, the on the ground knowledge of what we have & what we should be springing for & ehat we should be improving, becomes just a critical restabilization; bad jobs (or more often just accrued legacy to be honest) make it so fewer & fewer have the technical appreciation to right the hole-ridden old ship.
Yes well no one asked you to leave some text on a server somewhere and hope someone sees it. They asked if you could do X by Y time and you said YES.
It's illusion that PR can usually be compact in terms of lines and files. That not only requires a good quality of code, which isn't ubiquitous, but also good understanding of code, which changes all the time with different opinions resulting in that code being modified. So PRs become rather large - and sometimes surprisingly missing useful things, because exact change isn't easy.
The PR which is hard to review may mean that the code isn't understood the same way by different people, and this is a signal that some discussion is needed. Unfortunately often that's not done, and after some efforts PR is pushed through, while misunderstandings grow.
Worst time it happened to me was the day just before the start of my Christmas holiday and it almost made me quit.
Hate it when director joins regular meeting and brings a lot of confusion with their little domain knowledge but speaking loudly thei ideas...
And also when people try to understand what business value brings shifting a button from right to left and talking about it for 40min.
So instead we're just not going to optimize anything, and every tool just gets slower and slower and slower.
It isn't going to make it, and it will annoy/discomfit/make life miserable for everyone.
Mis-handling of public communications on significant outages.
There is no such thing as full stack. Unless the stack is super small.