Today I was asked for the 10th damn time to build something that could expose a small amount of HIPAA data. The last 9 times I explained how building this feature would, at the least, require a security audit, but nobody understood why I was making such a big deal.
Today, I almost said "Fuck it, if you want to make a blatantly negligent mistake then just reply to this email detailing once more how stupid this is and I'll just build it." If I get asked once more, I still might.
Does that make me an unethical money chasing individual? I dunno, maybe. And maybe I'm wrong and it's not a big deal -- I honestly don't know if that feature is a HIPAA violation or not. But most of all, I just want to keep my job and keep feeding my family.
I wouldn't be too quick to condemn the people that wrote this for Uber.