Earlier quoted context omitted.
Why should a customer be stuck with the bill in the case of fraud? If someone fraudulently buys something in a store with my stolen credit card, I am not liable to pay for those purchases. Why would it be different for AWS services?
Right, but if someone buys say a shirt with your stolen card, it isn’t the store that picks up the bill. It’s the credit card company.
Tell HN: Rise in AWS accounts getting hacked and owner being stuck with the bill
61–70 of 110 posts
Re: Tell HN: Rise in AWS accounts getting hacked and owner being stuck with the bill
#62Well, yeah, of course they're stuck with the bill. I feel like people think AWS is supposed to have infinite guard rails regardless of what the engineers using it do, like when people write code that infinite loops and it blows up their bill. AWS gives money back in a lot of cases that I think they legitimately aren't responsible for. I don't know that other cloud providers are going to do any better - an attacker wh…
https://docs.microsoft.com/en-us/azure/active-directory/fund...
Re: Tell HN: Rise in AWS accounts getting hacked and owner being stuck with the bill
#63MFA does not prevent this. Its IAM keys.
Re: Tell HN: Rise in AWS accounts getting hacked and owner being stuck with the bill
#64The fact that AWS has no way to limit billing seems insane to me. Your only recourse for an accidental (or malicious) overcharge is beg customer support. It's an incredible liability.
That is not true, you can setup a budget, and billing alerts.
Re: Tell HN: Rise in AWS accounts getting hacked and owner being stuck with the bill
#65Edit: Done! Was quite easy. Luckily I had no services running or needed.
Re: Tell HN: Rise in AWS accounts getting hacked and owner being stuck with the bill
#66I deleted my AWS account yesterday. It is obviously catered towards large organisations - very complicated tools and pricing that I couldn't really fit into my use case. I tried to just shut down the services that were using money but wasn't even sure I had found them all so I just closed the whole account. I don't even like the idea of any of this stuff. I want to run my own little raspberry pi server or whatever, i…
> Closing your account might not automatically terminate all your active resources. You might continue to incur charges for some of your active resources even after you close your account.
https://aws.amazon.com/premiumsupport/knowledge-center/termi...
Re: Tell HN: Rise in AWS accounts getting hacked and owner being stuck with the bill
#67Re: Tell HN: Rise in AWS accounts getting hacked and owner being stuck with the bill
#68Earlier quoted context omitted.
Jeff Bezos did not become a billionaire by being user-friendly. Guess anyone trying to cancel their Amazon Prime subscription would agree.
>Guess anyone trying to cancel their Amazon Prime subscription would agree. The unsubscribe button was easy enough to find, but had to maybe go through 2 nag screens before letting me cancel. I guess it's not pro-user, but it's also not exactly a roadblock to me canceling.
Compare that to the experience of unsubscribing from netflix, for instance.
Re: Tell HN: Rise in AWS accounts getting hacked and owner being stuck with the bill
#69Earlier quoted context omitted.
Why should a customer be stuck with the bill in the case of fraud? If someone fraudulently buys something in a store with my stolen credit card, I am not liable to pay for those purchases. Why would it be different for AWS services?
Right, but if someone buys say a shirt with your stolen card, it isn’t the store that picks up the bill. It’s the credit card company.
Re: Tell HN: Rise in AWS accounts getting hacked and owner being stuck with the bill
#70I know it's easy to get lazy about checking your AWS billing dashboard but I do it once a week - you can set up alerts and whatnot but I find it easier just to go look at the current usage to make sure nothing has gone awry.