[jdiff]

If they're told to upload it as an opaque blob and only reference it by name, it may not react that way. So the attack may work, but it would also only last as long as you have billing limits left to feed it. It's not clear what would be accomplished by this extremely expensive and brief feedback loop.

[keanebean86]

In this hypothetical scenario a criminal would do this to cause problems. They would use stolen money or compromised accounts. How much it costs wouldn't really matter to the initiator or they might even want to waste as much as they can.