Re:Preventing Crypto Mining Abuse on Gitlab.com SaaS
by rbut on Tuesday May 18, 2021 @05:48AM
(#27192802)
SaaS abuse unfortunately isn’t new.
On our SaaS app, we had to introduce a Captcha when adding users to an account. Spammers would write scripts to continually add, send welcome emails, and then delete users (getting around the 5 free user limit). They would place their spam in the account name, and the users first and last name.
Before we caught it, they were sending thousands of emails a minute via our paid-for upstream transactional email provider.
On our SaaS app, we had to introduce a Captcha when adding users to an account. Spammers would write scripts to continually add, send welcome emails, and then delete users (getting around the 5 free user limit). They would place their spam in the account name, and the users first and last name.
Before we caught it, they were sending thousands of emails a minute via our paid-for upstream transactional email provider.
If it’s free, it’ll get abused eventually.