Skip to content
TopicTracker
From xeiaso.netView original
TranslationTranslation

Presigned URLs are technically a security vuln

Presigned URLs are replay attacks by design, but object storage systems like Tigris turn this into a feature by signing time into requests. Signatures expire within minutes, avoiding complex nonce coordination. Tradeoffs include no per-URL revocation, unlimited reuse before expiry, and unavoidable leakage, but self-destructing URLs make them practical for access control.

Related stories

  • Jimmy Wales announced that Wikipedia was live at wikipedia.com on January 15, 2001. The site was intended to be a "really quite snazzy" wiki complement to the Nupedia project, offering a more collaborative and less formal environment for building an encyclopedia.

  • OpenAI has announced Daybreak, a new initiative focused on advancing AI safety and alignment research to ensure artificial general intelligence benefits humanity.

  • SpaceX has announced plans to launch approximately one million satellites to create space-based data centres, according to the European Southern Observatory (ESO). The massive satellite constellation would significantly increase the number of objects in orbit, raising concerns about light pollution and interference with astronomical observations.