The fact that AWS has no way to limit billing seems insane to me. Your only recourse for an accidental (or malicious) overcharge is beg customer support. It's an incredible liability.
That is not true, you can setup a budget, and billing alerts.
Tell HN: Rise in AWS accounts getting hacked and owner being stuck with the bill
31–40 of 110 posts
Re: Tell HN: Rise in AWS accounts getting hacked and owner being stuck with the bill
#32The fact that AWS has no way to limit billing seems insane to me. Your only recourse for an accidental (or malicious) overcharge is beg customer support. It's an incredible liability.
That is not true, you can setup a budget, and billing alerts.
Re: Tell HN: Rise in AWS accounts getting hacked and owner being stuck with the bill
#33The fact that AWS has no way to limit billing seems insane to me. Your only recourse for an accidental (or malicious) overcharge is beg customer support. It's an incredible liability.
That is not true, you can setup a budget, and billing alerts.
Re: Tell HN: Rise in AWS accounts getting hacked and owner being stuck with the bill
#34I deleted my AWS account yesterday. It is obviously catered towards large organisations - very complicated tools and pricing that I couldn't really fit into my use case. I tried to just shut down the services that were using money but wasn't even sure I had found them all so I just closed the whole account. I don't even like the idea of any of this stuff. I want to run my own little raspberry pi server or whatever, i…
Re: Tell HN: Rise in AWS accounts getting hacked and owner being stuck with the bill
#35Re: Tell HN: Rise in AWS accounts getting hacked and owner being stuck with the bill
#36The fact that AWS has no way to limit billing seems insane to me. Your only recourse for an accidental (or malicious) overcharge is beg customer support. It's an incredible liability.
If you were "hacked" (ie password reuse), the attacker can just relimit this.
Re: Tell HN: Rise in AWS accounts getting hacked and owner being stuck with the bill
#37Well, yeah, of course they're stuck with the bill. I feel like people think AWS is supposed to have infinite guard rails regardless of what the engineers using it do, like when people write code that infinite loops and it blows up their bill. AWS gives money back in a lot of cases that I think they legitimately aren't responsible for. I don't know that other cloud providers are going to do any better - an attacker wh…
I don't feel that some kind of quota management or predictable pricing is a significant ask. Most people or orgs do not need instant and infinite scaling. And would rather a 1 hour outage while they sort things out rather than a $100,000 bill for a minor bug.
Re: Tell HN: Rise in AWS accounts getting hacked and owner being stuck with the bill
#38Re: Tell HN: Rise in AWS accounts getting hacked and owner being stuck with the bill
#39their hardware MFA functionality is worse than useless it only permits a single hardware token to be registered to an account so good luck if you misplace or break your hardware token
When setting up the token you can scan the QR with multiple devices. E.g YubiKey and Authenticator App. This at least allows for a backup in case one goes missing. I agree it is kind of incredible that multiple tokens are not supported.
Re: Tell HN: Rise in AWS accounts getting hacked and owner being stuck with the bill
#40The fact that AWS has no way to limit billing seems insane to me. Your only recourse for an accidental (or malicious) overcharge is beg customer support. It's an incredible liability.
I find it hard to fathom that a company which sells machine learning as a service cannot detect that an account sitting dormant for months, which suddenly spins up several large VMs, has been compromised.
It's unsatisfactory that the only recourse is hoping for a favourable exercise of discretion on Amazon's part to waive the charges.