Live data from Hacker News

How I attacked myself using Google and I ramped up a $1000 bandwidth bill

behind-the-enemy-lines.com

21–30 of 152 posts

Re: How I attacked myself using Google and I ramped up a $1000 bandwidth bill

#21
post #5

I'm pretty surprised Google didn't have the client download the images instead. Wouldn't that be a better solution or am I missing something here? Pretty interesting though and if this becomes a big enough story you can bet Google will be changing something; the last thing they need is someone using Google Docs to DOS websites.

Perhaps the server needs to know the image dimensions for page layout.

Re: How I attacked myself using Google and I ramped up a $1000 bandwidth bill

#25
post #8

But, why re-downloading every hour? Does merely having the spreadsheet passively open in a browser trigger that, or was some other process re-loading the spreadsheet every hour? (If the former, I wouldn't be as forgiving of Google. I understand the desire not to cache possibly-private data, but proper URL design and conditional GETs should be able to prevent the entire download on an automatic hourly schedule. And ev…

There must me something else to it because if the spreadsheet is sitting passively open there would be no need for Google to go an pre-fetch again.

Re: How I attacked myself using Google and I ramped up a $1000 bandwidth bill

#26

This really underscores Amazon's glaring omission of a billing cutoff on Amazon web services. How hard would it be for them to let me say, cut off my services at $100/month? This is the main reason I'd never use AWS to host anything public.

I guess that would be a nice feature to offer as an option, but most people would not want their web service cut off if they get a spike in traffic.

Re: How I attacked myself using Google and I ramped up a $1000 bandwidth bill

#27

This really underscores Amazon's glaring omission of a billing cutoff on Amazon web services. How hard would it be for them to let me say, cut off my services at $100/month? This is the main reason I'd never use AWS to host anything public.

End of the article: "PS: Amazon was nice enough to refund the bandwidth charges, as they considered this activity accidental and not intentional. Thanks TK!"

Re: How I attacked myself using Google and I ramped up a $1000 bandwidth bill

#28
post #5

I'm pretty surprised Google didn't have the client download the images instead. Wouldn't that be a better solution or am I missing something here? Pretty interesting though and if this becomes a big enough story you can bet Google will be changing something; the last thing they need is someone using Google Docs to DOS websites.

Google Docs is in HTTPS so they need to proxy the assets like Github does : https://github.com/blog/743-sidejack-prevention-phase-3-ssl-...

Re: How I attacked myself using Google and I ramped up a $1000 bandwidth bill

#29

Can you limit bandwidth with AWS? Also, why would the spreadsheet be calling these images every hour. Did you have the spreadsheet open? Does google do this call even when no one is viewing the spreadsheet?

You can put a robots.txt in the bucket.

According to the article, that would not have helped; feedfetcher is meant to be manually triggered and thus does not obey robots.txt

Re: How I attacked myself using Google and I ramped up a $1000 bandwidth bill

#30
post #5

I'm pretty surprised Google didn't have the client download the images instead. Wouldn't that be a better solution or am I missing something here? Pretty interesting though and if this becomes a big enough story you can bet Google will be changing something; the last thing they need is someone using Google Docs to DOS websites.

Perhaps the server needs to know the image dimensions for page layout.

They use quite a bit of HTML 5 so they should be able to do this client-side I would imagine. But I dunno.
Post reply on HN