That Salesforce OAuth hole wasn't a surprise — it was tech debt

Jessie Grenfell
Jessie Grenfell•
That Salesforce OAuth hole wasn't a surprise — it was tech debt

Baloney. That OAuth vulnerability was known at Salesforce, of that I am certain.

But CTOs / COOs- when you e-signed with Salesforce did you know that, until about a month ago, anyone with a Salesforce login could install a third-party app that used their credentials to access company data? Possibly (hopefully) against your internal policy.

This was known, just like so much of the tech debt baked into Salesforce. Some of it dates back decades. Some came from acquisitions that were half-integrated, then abandoned as the next shiny thing got resources: Pardot, Vlocity, FSC, etc. Even internally developed features have been left to age awkwardly.

Short-term gains over long-term quality — the disciples of Milton Friedman call it natural law. I call it greed-driven contempt for your customers.

Jessie Grenfell

Jessie Grenfell

Jessie has spent 20+ years architecting and delivering software for organizations where complexity is the norm: financial services, insurance, nonprofits, and regulated industries where getting it wrong isn’t an option. She specializes in the hard problems: unique operational workflows, cross-system integrations, and compliance requirements (HIPAA, CCPA, SOC 2) built into the design from the first conversation.

Her AI work comes out of that background. She has shipped AI to production, not just piloted it: a multi-agent research pipeline that cut a client’s investigation time from over an hour to minutes, and natural-language analytics that let executives ask plain-English questions of their operational data and get validated charts back. Years building business critical systems taught her where AI belongs in a business process and where it doesn’t.

At Codality, she leads engagements from discovery through delivery, because she’s seen what happens when that thread gets cut.