I've always wondered: What stops someone from uploading a 10 GB file using Django's upload forms? The file could even be very small when gzipped, it sounds like a reasonable and easy DoS attack.