It's gotten to the point where I am legitimately impressed when I can tell a service is hashing their passwords.

All of these unnecessary complications of "must not have more than 2 of the same character in a row" but "can't be more than 12 characters" requirements make me think that the passwords are being saved in plain text.

Amazon and Dropbox do it right - present the user with an input box and no requirements printed anywhere.

My team is split on reviewing pull requests individually vs as a group.

Personally, I don't like being interrupted to come look at a projector for 20 minutes only to go back to work for an hour, and then get pulled into yet another review. Am I the only one that thinks this is incredibly inefficient?

I prefer to go over pull requests on my own time, asking questions/making comments as needed.

When you discover a small, relatively simple app builds into a bloated monstrosity

When throwing more hardware at a problem is always the chosen answer rather than fixing the performance issues...

When an application has tons of security holes and fixes never make it into sprint prioritization because "they're not new features"