4 ms·

Someone on the Google subreddit did report getting a 80k bill yesterday from a Gemini key. I’m very careful with Google and co since they’re so intent on infin

by Havoc 8mo ago

Someone on the Google subreddit did report getting a 80k bill yesterday from a Gemini key. I’m very careful with Google and co since they’re so intent on infinite scaling access to your wallet

KomoD 8mo ago
> Someone on the Google subreddit did report getting a 80k bill yesterday from a Gemini key. Do you have a link?
- Havoc 8mo ago
  https://www.reddit.com/r/googlecloud/comments/1reqtvi/82000_in_48_hours_from_stolen_gemini_api_key_my/ https://www.reddit.com/r/googlecloud/comments/1reqtvi/82000_... It’s pretty much a daily occurrence in all three of the big cloud subs that people still learning get wiped out because the clouds refuse to provide appropriate safeguards
  - abustamam 8mo ago
    Why spend resources on enterprise customers who have millions to spend on infra when they can just rely on obfuscation to make newbies pay hundreds if not thousands? (/s, of course)
le-mark 8mo ago
This and problematic Gemini pro availability are why I pay for two other ai services and won’t pay google.
- hparadiz 8mo ago
  About 10 years ago I got $100 for free to use on AdSense. I used it for fun not realizing it keeps going and then billed me. Since then I basically don't use any Google paid products. Hope that $250 was worth it.
  - kristianp 8mo ago
    Wait till you try aws!
  - StilesCrisis 8mo ago
    That's... pretty much how every free trial works? Try signing up for a free month of Amazon Prime or Netflix and see what happens. The entire point of the promotion is retention.
    - marcosdumay 8mo ago
      AdSense doesn't present itself as a permanent service you stay subscribed to. (Or at least didn't at the time I've tried to use it. That may have changed, but we don't know when the GP tried it either.)
      - hparadiz 8mo ago
        It wasn't a subscription. My expectation was that it would simply stop once it hit $0. Not really here to argue about it. The tldr is I don't trust Google with this stuff anymore.
        gowld 8mo ago
        I wonder what you thought putting your credit card on file was for.
        hparadiz 8mo ago
        The credit card on file was for other stuff in Google.
twism 8mo ago
I think GCP has a setting for max monthly spend and is enabled by default
- gcr 8mo ago
  Other comments in this discussion disagree.
deltarholamda 8mo ago
The article mentions "Building software at Google's scale is extraordinarily difficult...", which I've seen many times before when one or another of these big corporations has a serious security flaw. If a company like Google, with its ability to attract the best of the best, cannot handle the complexity of security and safety with SaaS/PaaS products, at what point do we say that perhaps this sector needs much more oversight?
- andxor 8mo ago
  Oversight by whom?

by Havoc 8mo ago

Someone on the Google subreddit did report getting a 80k bill yesterday from a Gemini key. I’m very careful with Google and co since they’re so intent on infinite scaling access to your wallet

KomoD 8mo ago

> Someone on the Google subreddit did report getting a 80k bill yesterday from a Gemini key. Do you have a link?

Havoc 8mo ago
https://www.reddit.com/r/googlecloud/comments/1reqtvi/82000_in_48_hours_from_stolen_gemini_api_key_my/ https://www.reddit.com/r/googlecloud/comments/1reqtvi/82000_... It’s pretty much a daily occurrence in all three of the big cloud subs that people still learning get wiped out because the clouds refuse to provide appropriate safeguards
- abustamam 8mo ago
  Why spend resources on enterprise customers who have millions to spend on infra when they can just rely on obfuscation to make newbies pay hundreds if not thousands? (/s, of course)

le-mark 8mo ago

This and problematic Gemini pro availability are why I pay for two other ai services and won’t pay google.

hparadiz 8mo ago
About 10 years ago I got $100 for free to use on AdSense. I used it for fun not realizing it keeps going and then billed me. Since then I basically don't use any Google paid products. Hope that $250 was worth it.
- kristianp 8mo ago
  Wait till you try aws!
- StilesCrisis 8mo ago
  That's... pretty much how every free trial works? Try signing up for a free month of Amazon Prime or Netflix and see what happens. The entire point of the promotion is retention.
  - marcosdumay 8mo ago
    AdSense doesn't present itself as a permanent service you stay subscribed to. (Or at least didn't at the time I've tried to use it. That may have changed, but we don't know when the GP tried it either.)
    - hparadiz 8mo ago
      It wasn't a subscription. My expectation was that it would simply stop once it hit $0. Not really here to argue about it. The tldr is I don't trust Google with this stuff anymore.
      - gowld 8mo ago
        I wonder what you thought putting your credit card on file was for.
        hparadiz 8mo ago
        The credit card on file was for other stuff in Google.

twism 8mo ago

I think GCP has a setting for max monthly spend and is enabled by default

gcr 8mo ago
Other comments in this discussion disagree.

deltarholamda 8mo ago

The article mentions "Building software at Google's scale is extraordinarily difficult...", which I've seen many times before when one or another of these big corporations has a serious security flaw. If a company like Google, with its ability to attract the best of the best, cannot handle the complexity of security and safety with SaaS/PaaS products, at what point do we say that perhaps this sector needs much more oversight?

andxor 8mo ago
Oversight by whom?