Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Serverless Horrors

serverlesshorrors.com

Post reply on HN
Print view View original

151–160 of 174 posts

Re: Serverless Horrors

#151

Post by s9df898r32h »

throwaway11460 wrote: post #150
s9df898r32h wrote: post #149

Earlier quoted context omitted.

just use a virtual card and then change the spending limit to $0? or freeze it

That still passes your personal info.

at least you wont get charged without your knowledge... which in the end, is the first step in getting this non-sense fixed, for a person... of course the government should fix it for everyone. This shit should probably be considered fraud anyways... companies get free passes all the time. My name (s9df898r32h) is my company, I should be able to steal whatever I want /s

Why are such large companies so incompetent though...

Re: Serverless Horrors

#152

Post by Vuizur »

bingo-bongo wrote: post #136
arandomusername wrote: post #89

Earlier quoted context omitted.

It's easy to create a secure server. Use private keys. Use a firewall (ufw is really simple) and only expose your reverse proxy (e.g nginx or haproxy). Use docker to run your crap. Any software engineer should be well capable of setting up a secure server. It really is simple.

Right up until someone runs a container with 8080:8080, which unfortunately bypasses ufw and the container is suddenly exposed to the entire internet .. :|

Reading the GitHub issue about this is somewhat entertaining: https://github.com/docker/for-linux/issues/690

People are getting hacked a lot because of this, and docker doesn't seem to care all that much.

Re: Serverless Horrors

#153

Post by srigi »

roygbiv2 wrote: post #73
ponector wrote: post #70

Earlier quoted context omitted.

And what if you add a debit card without money? Or add a disposable card and then the next day you deactivate it? Nowadays everyone push you to add a card to open free* account. Such disposable cards is a solution to this issue.

Your debt will be sold to a collection company.

What a great achievement of our society. Inventing a financial instrument to buy and sell debts.

Re: Serverless Horrors

#154

Post by hurflmurfl »

d1sxeyes wrote: post #37
hurflmurfl wrote: post #32

Earlier quoted context omitted.

The link to the "competitor" is front and center on the site, so I imagine what you're really trying to say is that this is NOT a competitor for the following reasons: . Otherwise this seems like a bait question:)

Andras (who created both Serverless Horrors and Coolify, which I imagine you're describing as the competitor here) is a pretty solid guy from everything I've seen and I've never seen him ask bait questions or engage in bad faith in discussions here or on other platforms. Although he calls Coolify a Netlify 'alternative', it's 100% 'bring-your-own-server', and is not at all serverless . Coolify is basically a (very ni…

Just to clarify, I didn't think that Coolify is a competitor.

What I was getting at is that we now have a thread with 4 replies: (1) you pitch competing product (2) what product? (3) Coolify (4) it's not competitor because ...

I just wanted to point out that comment #2 only seems to prompt question #3, whereas the helpful reply #4 created by yourself obviates the need for #2 and #3.

Re: Serverless Horrors

#155

Post by remram »

fragmede wrote: post #87
voidwtf wrote: post #4

Earlier quoted context omitted.

That's my favorite thing about all these services. None of them have an equivalent of a stop-loss. They'll notify you IF you setup an alert, but that's it. Often times the alerts are way after the damage is done, with some billable metrics often lagging in reporting/alerting by hours. The default should be safe with easy options to increase the limits.

You can totally build a GCP function that will tear down your site if a billing alert hits the pubsub bus, but you can also set billing caps for a bunch of the APIs.

What you're saying is that I can build a cost control function, not that GCP has one.

Re: Serverless Horrors

#156

Post by remram »

s9df898r32h wrote: post #151
throwaway11460 wrote: post #150

Earlier quoted context omitted.

That still passes your personal info.

at least you wont get charged without your knowledge... which in the end, is the first step in getting this non-sense fixed, for a person... of course the government should fix it for everyone. This shit should probably be considered fraud anyways... companies get free passes all the time. My name (s9df898r32h) is my company, I should be able to steal whatever I want /s Why are such large companies so incompetent tho…

You will have to pay it AND a fee for fraud, and possibly their legal fees for tracking you down. You also will have a difficult time arguing that you were in good faith with this kind of shenanigans.

Bouncing checks are not a life hack to get stuff for free, they're a crime.

Re: Serverless Horrors

#157

Post by remram »

leerob wrote: post #98
throwawayyy9237 wrote: post #39

Perhaps I'm overreacting, but I had my personal site on Netlify and decided to move it. I don't need anything more than a dumping ground for HTML, and Netlify was "good enough" (I wasn't aware that this issue existed) What brought it closer to home was the characteristics of the recently affect site (same number of daily visits, not popular (a bit niche), etc) where similar to mine. Moving is easy enough, mostly requ…

(I work at Vercel) We do have DDoS protection, and spend limits. Working on releasing some further improvements to both of these imminently as well. https://vercel.com/blog/introducing-spend-management-realtim...

Vercel is 2 out of the 4 issues in the article. Hard no, man, come on.

Based on the info in this thread, Vercel is the only company I'd leave for Netlify.

Re: Serverless Horrors

#159

Post by fragmede »

voidwtf wrote: post #4
crooked-v wrote: post #2

Also see the Netlify comment thread linked from one of the Reddit posts ( https://answers.netlify.com/t/limit-bandwidth-to-avoid-high-... ), where one of their representatives specifically says that if you suffer a DDOS they will do nothing to stop you from getting a bajillion-dollar bandwidth bill, even if you're on the "free" tier.

That's my favorite thing about all these services. None of them have an equivalent of a stop-loss. They'll notify you IF you setup an alert, but that's it. Often times the alerts are way after the damage is done, with some billable metrics often lagging in reporting/alerting by hours. The default should be safe with easy options to increase the limits.

What you really want is prepaid instead of post-paid billing. Charge up the account with $100, and stop working and delete my data if that gets hit, with an auto renew option to recharge some amount every month.

Re: Serverless Horrors

#160

Post by voidwtf »

fragmede wrote: post #159
voidwtf wrote: post #4

Earlier quoted context omitted.

That's my favorite thing about all these services. None of them have an equivalent of a stop-loss. They'll notify you IF you setup an alert, but that's it. Often times the alerts are way after the damage is done, with some billable metrics often lagging in reporting/alerting by hours. The default should be safe with easy options to increase the limits.

What you really want is prepaid instead of post-paid billing. Charge up the account with $100, and stop working and delete my data if that gets hit, with an auto renew option to recharge some amount every month.

That seems a little reductive. I don’t think it’s unreasonable to say, my current spend is ~13k a month. I should be able to set a 20k cap, such that non fixed billable like bandwidth or map tiles get paused while someone determines whether we’d like to proceed at that rate. There is a not so fine line between scaling for a rush/event and a resume generating event.
Post reply on HN