Interview candidate commits GCP credentials to code, racks up $78k in charges

Posted by arkadiyt on Tuesday September 07, 2021 @01:25PM
from the twitter.com dept.

https://twitter.com/victortrac/status/1432773688512950272

( 8 comments | 62 points | on HN )

Re:Interview candidate commits GCP credentials to code, rack... by toomuchtodo on Tuesday September 07, 2021 @03:13PM (#28448652)

Was this not caught by Github's Secret Scanning Partner Program? Google Cloud is a partner.

https://docs.github.com/en/developers/overview/secret-scanni...

https://docs.github.com/en/code-security/secret-scanning/abo... (Control-F "Google cloud")

[ Parent | on HN ]

Re:Interview candidate commits GCP credentials to code, rack... by tqkxzugoaupvwqr on Tuesday September 07, 2021 @06:14PM (#28450573)

Just yesterday I read a thread from nine months ago where someone received a surprise bill from Google because Google Cloud Computing lifts limits automatically.

https://news.ycombinator.com/item?id=25372336

[ Parent | on HN ]

Re:Interview candidate commits GCP credentials to code, rack... by TonyBagODonuts on Tuesday September 07, 2021 @05:48PM (#28450378)

Did he not know this was a possibility? We hear about something like this or aws or whatever like once a month. I get that he didn't intend for it to happen but if you let someone and facilitate the action aren't you at least partially to blame?

[ Parent | on HN ]

Re:Interview candidate commits GCP credentials to code, rack... by stevage on Tuesday September 07, 2021 @05:37PM (#28450276)

Later in the thread they report that the fees were credited back.

[ Parent | on HN ]

Re:Interview candidate commits GCP credentials to code, rack... by mensetmanusman on Tuesday September 07, 2021 @03:21PM (#28448740)

Wow. I wonder if you should just reincorporate and have the dead business declare bankruptcy.

[ Parent | on HN ]

Re:Interview candidate commits GCP credentials to code, rack... by notyourday on Tuesday September 07, 2021 @04:15PM (#28449313)

I bet Google is going to lock your other accounts should you do that in future regardless of the bankruptcy protection while doing "It is our advanced AI, we know nuffing" hand wave

[ Parent | on HN ]

Re:Interview candidate commits GCP credentials to code, rack... by Jxl180 on Tuesday September 07, 2021 @10:09PM (#28452199)

Google gave them a $99.9k credit.

[ Parent | on HN ]

Re:Interview candidate commits GCP credentials to code, rack... by defaultprimate on Wednesday September 08, 2021 @08:02AM (#28455817)

lol giving Owner access to interviewees

[ Parent | on HN ]