署名付きURLは技術的にセキュリティ脆弱性である
署名付きURLは本質的にリプレイ攻撃を許容する認証トークンだが、SigV4プロトコルは時間を署名に組み込むことでこの脆弱性を機能に変換している。リクエストの署名に現在時刻を組み込み、15分の有効期限を設定することで、ステートレスな検証を維持しながらリプレイ攻撃を防ぐ。これにより、一度使用したナンスの管理という分散システム上の難題を回避し、URL自体を一時的な権限付与として扱うことを可能にしている。
関連記事
Jimmy Wales announced that Wikipedia was live at wikipedia.com on January 15, 2001. The site was intended to be a "really quite snazzy" wiki complement to the Nupedia project, offering a more collaborative and less formal environment for building an encyclopedia.
Realta Fusion has achieved a milestone by generating electricity directly from a fusion reaction, reportedly a first. The breakthrough marks a significant step toward practical fusion energy, potentially offering a clean and nearly limitless power source.
Daybreak
10.0OpenAI has announced Daybreak, a new initiative focused on advancing AI safety and alignment research to ensure artificial general intelligence benefits humanity.
SpaceX has announced plans to launch approximately one million satellites to create space-based data centres, according to the European Southern Observatory (ESO). The massive satellite constellation would significantly increase the number of objects in orbit, raising concerns about light pollution and interference with astronomical observations.
Max Weinbach says he had early access to OpenAI's new model GPT-5.6 Sol, calling it his favorite model by far. He highlights that it never gives up and will keep reasoning until it's done. OpenAI announced that GPT-5.6 Sol, along with Terra and Luna, will launch publicly on Thursday, with preview access expanding globally now.