Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

€54k spike in 13h from unrestricted Firebase browser key accessing Gemini APIs

discuss.ai.google.dev

Post reply on HN
Print view View original

321–325 of 325 posts

Re: €54k spike in 13h from unrestricted Firebase browser key accessing Gemini APIs

#321

Post by aisaasbuilder »

freedomben wrote: post #12
trick-or-treat wrote: post #8

Earlier quoted context omitted.

Prepaid only is a fantastic idea, especially for dumb-ass startups. Limiting your liability to $100 or so sound like a big-ass W.

Prepaid only is a fantastic idea, until your site goes (desirably) viral and then gets shut off right as traffic is picking up, or you grow steadily and forget to increase your deposit amount and suddenly production is down. Billing alerts are a much better solution IMHO.

the planning-your-day-around-the-window thing is real and underrated as a cost. the limits don't just hit you at the moment you hit them, they change how you work for the entire day around them. we're building something called Traeco that tells you what's actually eating your limit per step so you can at least see what's burning fast vs what's fine — happy to share early access if you want to try it.

Re: €54k spike in 13h from unrestricted Firebase browser key accessing Gemini APIs

#322

Post by aisaasbuilder »

benterix wrote: post #94
Hamuko wrote: post #81

Earlier quoted context omitted.

Which cloud provider actually prioritises features that cut off your money supply? Because AWS sure as shit doesn't either.

Amazon, Microsoft and Google don't offer hard cap. Most other/smaller public cloud providers do. The reasons are quite obvious.

Spend alerts are a post-mortem tool dressed up as prevention. By design they fire after the billing cycle aggregates. The real fix is catching runaway patterns at the config level before they run. That is what we are building at Traeco. The difference between an alert after 28k euros and a flag before the first run. traeco.dev

Re: €54k spike in 13h from unrestricted Firebase browser key accessing Gemini APIs

#323

Post by aisaasbuilder »

startages wrote: post #152
benterix wrote: post #90

> We had a budget alert (€80) and a cost anomaly alert, both of which triggered with a delay of a few hours > By the time we reacted, costs were already around €28,000 > The final amount settled at €54,000+ due to delayed cost reporting So much for the folks defending these three companies that refused to provide hard spending cap ("but you can set the budget", "you are doing it wrong if you worry about billing", "ha…

Yeah, that the main reason I never use services like Google Cloud if I don't have to, it's impossible to have a hard cap, and anyone pretending to be an expert, is just off. Google says that they can't provide a hard cap because that would mean shutting down all your services..bla bla, but at least give users the option.

The providers will not ship hard caps because a hard cap is a revenue ceiling. They will ship soft alerts that fire late enough to be useless. The only answer is an independent layer between your config and the provider that does not have that incentive. Building exactly that at Traeco. traeco.dev

Re: €54k spike in 13h from unrestricted Firebase browser key accessing Gemini APIs

#324

Post by aisaasbuilder »

siva7 wrote: post #310
not_your_vase wrote: post #245

Earlier quoted context omitted.

I just find it extraordinary that the biggest tech company in the world can do cutting edge real time AI for millions of people, run Youtube and of course all the other google services with having literally the smartest people in the world and unlimited resources on board, but still can't keep real time track of the user's current billing and their spending limits, it's all best effort still. Somehow it doesn't add u…

Not just Google, also Microsoft and Amazon. Real-time cost tracking is technically impossible to solve according to the major cloud providers. I have huge respect for those sales & finops engineers.

Technically impossible for them because real-time attribution cuts into margin. Config-layer tracking does not have that constraint. You do not need real-time billing data if you know from the agent config that it is going to explode before it runs. That is the distinction Traeco is built on. traeco.dev
Post reply on HN