search

cinely / mule-uploader

Stubborn HTML5 Amazon S3 uploader
http://mule-uploader.com/
MIT License
223 stars 43 forks source link

DDoS risk? #67

Open sesam opened 8 years ago

sesam commented 8 years ago

From a security standpoint, can someone DDoS a site using mule-uploader (financially or otherwise) by uploading millions of small files and cause huge AWS costs?

gabipurcaru commented 8 years ago

Yes they can. Just like they could with a regular upload field; you have to add your own rate limitations if you have such needs, DDoS protection is outside of this project's scope IMO.

Also, I'm pretty sure Amazon only bills the traffic and storage, not file count, so millions of small files vs handful of huge files would be the same as far as money is concerned.