hasenpfote

My specific point was made in context of maven central repository.

It gives a false sense of security when you have to have a signed pgp key but no challange for trust.

Mh i thought your answer is ridiculous. Why would someone enforce/use a pgp signature with public key servers without a proper challenge?

I know it from my visited 'network of trust' but apparently there is no real challenge involved in uploading your key.

Thats just really really shitty.

Putting it out there as an idea, might inspire others and might help.

Machine Learning is the most closest thing we have, as far as i know.

So what does this really help?

Do i get now a higher liablility because the alert alerted me and i now need to be aware of it?

so i'm going on holiday and i'm fucked?

You know, a billig alert is a nice thing, its not the solution. Host a few things on AWS, tell me your endpoints and your bill just might be already in deep shit before you read your bill.

I have said it over and over and will repeat it happily:

IF your Services doesn't has a proper limit, you do make yourself suddenly liable to a much higher risk than before and you have to be aware of this.

It is the same shit when you rent a car: Do NEVER rent a Car without proper insurance.

I'm working with GCP professionally and i have used AWS in the prev company. I do ask my manager if i can use it to try a few things out and its fine but i will not put my credit card behind an account with unlimited cost risk (its limited probably but you know what i mean).

And its not even simple; Everything costs you money. Storing data, receiving data, pushing data, making api requests etc.

And what i find always quite surprising: How often people, even on hn, present simple file based apis where you can upload images and edit them or upload files and download them again or offering free services and that with AWS as a backend.

I just might be to long in this industry to see all those pitfalls of exploits and risks everywhere but i have the feeling that obvious respect against cloud service billing is neglected by most.