3 ms·
I'm surprised they got anything at all. A few hundred dollars a year is nothing for these companies, not to mention that if you actually tried to abuse this to
by morgante 10y ago
I'm surprised they got anything at all.
A few hundred dollars a year is nothing for these companies, not to mention that if you actually tried to abuse this to a substantial level I am 100% confident that it would be detected and blocked.
It's like filing a bug bounty that you can sign up for multiple AWS accounts and mine bitcoins in the free tier. Up to a certain level, they just don't care. Past that level, you'll be detected and mitigated against.
- MichaelBurge 10y agoI agree: the main problem with security vulnerabilities is that your users' data gets leaked and it blows up in the media. If you just lose some money, you can budget for that right next to the risk somebody throws rocks in your window or the risk that somebody steals the company car.
- freyr 10y ago> if you actually tried to abuse this to a substantial level I am 100% confident that it would be detected and blocked. Yes, Facebook sounded quite confident that such attempts would be detected and blocked. It seemed like they gave him bounty just to get him out of their hair.
- imaginenore 10y agoDoesn't AWS require a working credit card to start using the free tier?
- neurostimulant 10y agoThey also accept prepaid debit card. I use one in my account.