[jiggawatts]

I've talked with coworkers who visited the Samsung mobile division headquarters. They all reported that it was a horrorshow, top-to-bottom.

Things like: They hired a contractor to modify a website used for thousands of staff to log in, but they had him modify the production system live because they were too cheap to build a dev system. Several days of everyone sitting on their hands in the morning ensued. Several.

Another fun one was that instead of using Access Control Lists and unique accounts for Active Directory security, like rest of the world does it, everyone is an admin, there's no security, but your IP address is logged. You are your network address, it's assigned to you like a user name. If anything 'bad' is logged from it, you are blamed and/or fired. So, it's basically network security through punishment instead of... you know... actual security.