This documentation page[1] seems pretty clear. One primary at a time, any number of read replicas that automatically proxy writes to the primary, when compute scales to zero the data is in object storage and a new primary can spin up elsewhere.
According to their ToS all customer accounts registered on or after September 3, 2024 are signed on to a US company, so no they're not doing what's necessary to keep US hands off the data.
After a different company detected it, figured out what it did, and reported it to Apple. The app was notarized on November 17, screenshots in the researchers' post are from December 16. That's a month of fully notarized distribution.
What a frustrating article. There was an interesting bug here. It's trivial to explain. It's not a zero-day, this was fixed months before disclosure. Most of the article is basically: "Imagine you were running software with horrific security holes behind this WAF. We even made some examples. It had a flaw. If your entire security posture depended on this WAF, imagine how much damage could have been done. Imagine if AI were involved!"
> So if the web app went a month with no visitors it would cost nothing (except for the file storage fees)?
Yes that's the idea. The public URL for a sprite is served by a (free) load balancer. The sprite is normally suspended, gets resumed when a request comes in, then suspended again. Not sure on the exact timeouts, they probably don't suspend immediately after a response is sent.
Sprites pricing is based on usage, not reserved capacity, so depending on what you're doing I think it can actually be cheaper than Shellbox. You'll have to stay below 1GB of memory and have the CPU be mostly idle, which I'm not sure common workloads will.
An alternative is Lettermint[1] which has much more gradual (and slightly lower, but with a less generous free plan) pricing. It's also pretty new (I think it launched last year) but more fully featured. I haven't used it but it seems good.
+1 I feel like Remails should try to have a more flexible pricing as well (I would love it if they can have 1000 mails per x euros or similar to lettermint pricing), it seems decent but remails has a higher free tier than lettermint so I hope that remails can revamp its pricing to include middle points (similar to lettermint in this instance) while still being price competitive.
[1]: https://docs.bunny.net/database/replication
reply