News for hackers. Stuff that matters.
Re:Serverless Horrors by tekno45 on Sunday September 07, 2025 @12:53PM (#45159862)
putting stuff on the internet is dangerous. if you're not prepared to secure public endpoints stop creating them.
Re:Serverless Horrors by benoau on Sunday September 07, 2025 @01:02PM (#45159946)
Putting stuff on the internet is dangerous, but the absence of hard caps is a choice and it just looks like another massive tech company optimizing for their own benefit. Another example of this is smartphone games for children, it's easier for a child to spend $2,000 then it is for a parent to enforce a $20/month spending limit.
Re:Serverless Horrors by jameshart on Sunday September 07, 2025 @01:43PM (#45160423)
Are you really comparing a software developer provisioning an online service to a child buying tokens for loot boxes?
Re:Serverless Horrors by benoau on Sunday September 07, 2025 @01:48PM (#45160479)
More the "dark pattern" of empowering unlimited spending and then what keeps on unfolding from it.
Re:Serverless Horrors by earnesti on Sunday September 07, 2025 @03:39PM (#45161467)
No it isn't. There are many ways to put stuff on internet with guaranteed max costs.
Re:Serverless Horrors by McGlockenshire on Sunday September 07, 2025 @01:12PM (#45160048)
blaming the victim? stay classy.

intentionally allowing huge billing by default is scummy, period.

Re:Serverless Horrors by JustExAWS on Sunday September 07, 2025 @01:53PM (#45160533)
Yes, you as a developer should know something about how the service works before you use it. I first opened the AWS console in 2016 and by then I had read about the possible gotchas.
Re:Serverless Horrors by earnesti on Sunday September 07, 2025 @03:40PM (#45161480)
Well, people get informed by reading these stories. So let's keep informing people to avoid AWS.
Re:Serverless Horrors by JustExAWS on Sunday September 07, 2025 @09:21PM (#45163887)
Yes I’m sure large corporations and even startups are going to leave AWS because a few junior devs didn’t do their research.
Re:Serverless Horrors by crote on Sunday September 07, 2025 @09:40PM (#45163977)
You do know that large corporations and startups employ junior devs as well, right?

All else being equal, would you rather choose the platform where a junior dev can accidentally incur a $1M bill (which would already bankrupt early startups), or the platform where that same junior dev get a "usage limits exceeded - click here to upgrade" email?

Re:Serverless Horrors by JustExAWS on Monday September 08, 2025 @12:36PM (#45170409)
Well, first I wouldn’t give a junior dev with no experience admin rights to an AWS account and would I have tight guardrails around what they can do - like I’ve done now with over a dozen implementations for clients since I’ve been in consulting for five years and the four years before that as an architect for product companies.

I also wouldn’t give a junior dev access to production databases.

Also from working with AWS from both the inside (Professional Services) and the outside at a third party consulting companies, I know how aggressively AWS is about keeping startups and they would never risk losing the continuing revenue of a company like that.

Re:Serverless Horrors by dragonwriter on Monday September 08, 2025 @12:38PM (#45170457)
> All else being equal, would you rather choose the platform where a junior dev can accidentally incur a $1M bill

If a junior dev has the access to do that, then there is a big failure (probably more than one) by someone who isn't a junior dev after choosing AWS that was necessary to enable that.