Re:The AWS S3 Denial of Wallet Amplification Attack
by yencabulator on Thursday May 02, 2024 @04:18PM
(#40240942)
If they charged for the extents that are actually read from S3 (even if the network connection was just closed), that'd be fine. But charging for terabytes when the actual connection consumed a few kilobytes is still wrong; surely they didn't e.g. buffer those terabytes of data from S3 disk storage into memory.
Charge for the buffer you fill: sure.
Charge the theoretical maximum: silly.