News for hackers. Stuff that matters.
Re:€54k spike in 13h from unrestricted Firebase browser key ... by trick-or-treat on Thursday April 16, 2026 @08:30AM (#47792042)
Prepaid only is a fantastic idea, especially for dumb-ass startups. Limiting your liability to $100 or so sound like a big-ass W.
Re:€54k spike in 13h from unrestricted Firebase browser key ... by eru on Thursday April 16, 2026 @08:34AM (#47792084)
Yes, pre-paid would be fine and it's a well-understood pattern.

No need to retire API keys.

Re:€54k spike in 13h from unrestricted Firebase browser key ... by owebmaster on Thursday April 16, 2026 @08:48AM (#47792229)
Nobody is thinking about the stock owners, I see
Re:€54k spike in 13h from unrestricted Firebase browser key ... by 100ms on Thursday April 16, 2026 @08:33AM (#47792071)
Implementing this in any meaningful manner quickly begins to look like every read becoming a globally synchronised write. Of course it doesn't have to be perfect, but even approximating perfection doesn't look much different. Also, can you imagine the kind of downtimes and complaints that would inevitably originate from a fully synchronous billing architecture?
Re:€54k spike in 13h from unrestricted Firebase browser key ... by eru on Thursday April 16, 2026 @08:35AM (#47792100)
> Of course it doesn't have to be perfect, but even approximating perfection doesn't look much different.

It's pretty easy to get right, if the provider allows you to go (slightly) negative before cutting you off.

> Also, can you imagine the kind of downtimes and complaints that would inevitably originate from a fully synchronous billing architecture?

Doesn't need to fully synchronous.

Re:€54k spike in 13h from unrestricted Firebase browser key ... by christkv on Thursday April 16, 2026 @08:35AM (#47792097)
Open ai has this
Re:€54k spike in 13h from unrestricted Firebase browser key ... by freedomben on Thursday April 16, 2026 @08:32AM (#47792065)
Prepaid only is a fantastic idea, until your site goes (desirably) viral and then gets shut off right as traffic is picking up, or you grow steadily and forget to increase your deposit amount and suddenly production is down. Billing alerts are a much better solution IMHO.
Re:€54k spike in 13h from unrestricted Firebase browser key ... by trick-or-treat on Thursday April 16, 2026 @08:36AM (#47792107)
No you big dummy, that is especially when you want to limit your liability, lol.

Because these days it will be all worthless bot traffic.

Re:€54k spike in 13h from unrestricted Firebase browser key ... by dummydummy1234 on Thursday April 16, 2026 @08:35AM (#47792091)
Prepaid/paid limits with shutoff is appropriate for this though.

If you have per key limits, this is not possible, and even in a wild situation you should b able to expect that your firebase key will not use 50k.

Re:€54k spike in 13h from unrestricted Firebase browser key ... by lisdexan on Thursday April 16, 2026 @08:50AM (#47792264)
Let me choose. This common point seems more like a rationalization for the default behavior of hyperscalers. AWS isn't avoiding prepaid due to concern about my site's virality, just that prepaid = less money.
Re:€54k spike in 13h from unrestricted Firebase browser key ... by microtonal on Thursday April 16, 2026 @08:36AM (#47792102)
You can also have both, a cap and one or more billing alert levels below it. Some providers do this (e.g. IIRC Backblaze B2).
Re:€54k spike in 13h from unrestricted Firebase browser key ... by freedomben on Thursday April 16, 2026 @08:37AM (#47792121)
Yes in reality, and ideally, you can have both, but GP specifically said "Prepaid only" implying you can't have both (which is what I replied to)
Re:€54k spike in 13h from unrestricted Firebase browser key ... by eru on Thursday April 16, 2026 @09:05AM (#47792401)
Well, they should also have pre-paid only. Offer a few different options.
Re:€54k spike in 13h from unrestricted Firebase browser key ... by aisaasbuilder on Tuesday April 28, 2026 @03:50AM (#47931572)
the planning-your-day-around-the-window thing is real and underrated as a cost. the limits don't just hit you at the moment you hit them, they change how you work for the entire day around them. we're building something called Traeco that tells you what's actually eating your limit per step so you can at least see what's burning fast vs what's fine — happy to share early access if you want to try it.