Tag Archives: security

Using Azure API Management to prevent Denial of Wallet attacks

While it would be high near impossible to DDoS a solution running on a serverless platform (scaling would just continue to handle all the requests it needed to), somebody still has to pay for the execution. Most (good) serverless implementations use what is often called “micro-billing” whereby you are billed only for each *actual execution* of your code. But, if we think of this nefariously and I send a few thousand requests/second to your endpoints guess what happens. Yup, one hefty bill. This has become known as a Denial of Wallet attack.

SSH Tunnel setup–for Windows users

“What’s an SSH tunnel?” you ask? In layman’s terms, it’s a way for you to take one PC, and pipe all its network traffic through another PC before it gets out to the internet. So what this means is that if, oh, somewhere were to say, monitor the traffic from your PC all they’d see… Read More »