预签名URL从技术上讲是一个安全漏洞
预签名URL本质上是一种你主动允许的重放攻击。可重放的认证令牌通常是构建脆弱系统的教科书式方式，但Tigris及其他所有对象存储系统都将其作为一级特性来提供。然而这并非设计缺陷，因为预签名URL巧妙地将一个安全弱点转化为了实用功能。通过将时间签名到请求中，SigV4协议使签名在15分钟后自动失效，既实现了无状态验证，又让临时链接分享成为可能——这正是预签名URL的核心价值。
相关报道
Jimmy Wales announced that Wikipedia was live at wikipedia.com on January 15, 2001. The site was intended to be a "really quite snazzy" wiki complement to the Nupedia project, offering a more collaborative and less formal environment for building an encyclopedia.
Realta Fusion has achieved a milestone by generating electricity directly from a fusion reaction, reportedly a first. The breakthrough marks a significant step toward practical fusion energy, potentially offering a clean and nearly limitless power source.
Daybreak
10.0OpenAI has announced Daybreak, a new initiative focused on advancing AI safety and alignment research to ensure artificial general intelligence benefits humanity.
SpaceX has announced plans to launch approximately one million satellites to create space-based data centres, according to the European Southern Observatory (ESO). The massive satellite constellation would significantly increase the number of objects in orbit, raising concerns about light pollution and interference with astronomical observations.
Max Weinbach says he had early access to OpenAI's new model GPT-5.6 Sol, calling it his favorite model by far. He highlights that it never gives up and will keep reasoning until it's done. OpenAI announced that GPT-5.6 Sol, along with Terra and Luna, will launch publicly on Thursday, with preview access expanding globally now.