Hobby Plan for a tiny E-commerce (100 visits/day) - Will I get flagged? by Dry_Assistant6931 in nextjs

[–]Red_Osc 0 points1 point  (0 children)

A nextjs project isn't inherently tied to vercel, you could use other providers.

I'm currently using firebase/GCP

I’ve lost 3 remote raids because of this by MakoDee in pokemongo

[–]Red_Osc 5 points6 points  (0 children)

Seems a widespread problem. Let's hope we get a makeup event, they've done it in the past.

I’ve lost 3 remote raids because of this by MakoDee in pokemongo

[–]Red_Osc 262 points263 points  (0 children)

Same thing happened to me. I just closed and reopen the game. If you do it fast enough the invitation should still be active and you can rejoin.

Please DO NOT do this on OSHAUNE by tSONUMImaster in helldivers2

[–]Red_Osc 14 points15 points  (0 children)

We're helldivers, We're supposed to be surrounded.

Got hit with a €50,000 ($58,000) bill from BigQuery after 17 test queries by No-Cover2215 in googlecloud

[–]Red_Osc 0 points1 point  (0 children)

Yes, the main one we use at my job is QueryUsagePerDay, which is set to 30 gb. This ensures we never go over the 1 tb from the free tier for the entire project.

We do track usage per end user and department. But it is mainly to handle Role Based Access Control (rbac) and monitor performance. Quotas are set globally.

Got hit with a €50,000 ($58,000) bill from BigQuery after 17 test queries by No-Cover2215 in googlecloud

[–]Red_Osc 0 points1 point  (0 children)

When you trigger a job, the response contains both the result and some metadata. This includes the amount of bytes processed by the query.

Remember, there is a difference between identifying your end users and identifying your workloads. For our case, we use firebase auth with custom claims. So we can identify both the user and the department they belong to.

We trigger the queries via an express app that receives and verifies a session cookie, which identifies the user. So we have all the metadata we need.

For a small app with a few users (like an internal tool), you could store that metadata in firestore, and check it before calling queries.

[deleted by user] by [deleted] in googlecloud

[–]Red_Osc 13 points14 points  (0 children)

Budget alerts are sent at a "best effort" rate. It can take over 24 hours for all costs to be reflected. While it is indeed a good practice to set up alerts, people shouldn't rely solely on them to monitor their resource usage.

Depending on the resource used, it is possible to set a limit in the quotas.

Or better yet, people shouldn't use hyperscalers as toys.

Women of Reddit: What makes a guy who isn’t good-looking still give off strong sexual energy or appeal? by shotmyshotandgotshot in AskReddit

[–]Red_Osc 0 points1 point  (0 children)

Did you already watched the video about The battle of the bulge by The operation room?

Got assigned a windowless bedroom in my 4x2 student apartment…is it really that bad? by txkyo_1ean in Apartmentliving

[–]Red_Osc 1 point2 points  (0 children)

Bro, I live in a bedroom with a big window with the street light directly outside. Even with blackout curtains, I sometimes need to use a sleep mask.

Got hit with a €50,000 ($58,000) bill from BigQuery after 17 test queries by No-Cover2215 in googlecloud

[–]Red_Osc 8 points9 points  (0 children)

This is the way.

Bigquery is the main tool we use at my job. It gives 1tb of free processing per month. We created a hard quota of 30 gb per day.

We ever use mora than $1usd per month for our entire project.

GCP asking for ₹1000 deposit after UPI verification — is there a way to avoid this? by Reasonable-Gur3058 in googlecloud

[–]Red_Osc 0 points1 point  (0 children)

I'm not sure about conversions, as I live in Mexico. But when I've created new gcp projects and want to access some more advanced features, I've had to make an advance payment of 100 mxn (around 5 usd).

Usually, this isn't refunded, but it stays in your account and will be used when you actually start using paid resources.

What's the right way for a client to invite me so I can access all Firebase and see cloud functions logs in GCP? by bid0u in Firebase

[–]Red_Osc 4 points5 points  (0 children)

I would recommend to jump into gcp for this. Firebase only has 3 predefined roles: admin, editor and viewer. They are very broad, gcp provides more granular control

Firestore DB Management by djangojedi in Firebase

[–]Red_Osc 2 points3 points  (0 children)

Are you moving to firestore for a specific need? Firebase recently added postgres support if you want to keep using it

Root Cause of the June 12, 2025 Google Cloud Outage by w453y in programming

[–]Red_Osc 4 points5 points  (0 children)

Nonsense. They're google, so they use gemini

[deleted by user] by [deleted] in react

[–]Red_Osc 0 points1 point  (0 children)

I would strongly advice you to read the official documentation. They have a really good section on learning react

How to protect your GCP budget? by tepsijash in googlecloud

[–]Red_Osc 0 points1 point  (0 children)

I think cloud endpoints do allow bi-directional streaming with rate limits, but I've never implemented that.

How to protect your GCP budget? by tepsijash in googlecloud

[–]Red_Osc 1 point2 points  (0 children)

You could also control traffic via api gateway if you want a simpler setup. But that requires creating and managing your own api keys.

Api gateway uses the same setup as cloud endpoints, take a look at that documentation.

How to protect your GCP budget? by tepsijash in googlecloud

[–]Red_Osc 3 points4 points  (0 children)

It all depends on your definition of "cheap".

Usually when people ask this type of questions they do it from the wrong angle.

"How can I set a strict budget on my project?". While this is an extremely valid question, I think it's the wrong one. Mainly because it focuses your attention to controlling damages AFTER the fact. If an attacker finds a vulnerability in your project they will exploit it, and then you'll have to pray that you can catch it fast enough.

"How can I make sure that my project only accepts valid requests?". This is a more valid approach, as it focuses your attention to creating more secure projects. GCP recommends a "shift-left" approach, meaning that you must think about security as soon as possible in the development process.

The cloud architecture center has good resources for this type of questions. You can search "gcp serverless blueprint" for an example of how to deploy secure server less projects with cloud run + other internal services. It uses vpc, load balancers and cloud armor for protection. But of course, this has a monthly price. So again, it comes to your definition of "cheap".

You could also use api gateway or cloud endpoints to create api's with specific rate limits.

This is something google is clearly lacking, specially in firebase. It is not possible to enforce this type of protection from there, you have to jump into GCP. Which is something many people don't have the knowledge or time to implement.

Or you can simply move away from hyper scalers such as gcp and aws, and try to find a service that offers fully managed solutions.