ref: https://dlorenc.medium.com/improving-tofu-with-transparency-da674aa2879d
本篇文章要介紹的是一種名為 TOFU 的認證機制,其全名為 Trust-On-First-Use.
要探討這個機制前,作者先列舉一個情境
假設你人要到火車站去找一個名為 Alice 的人交換手提箱,你要如何於火車站正確的找到 Alice?
# Nothing
最基本的情況就是你看到每個人都詢問,你是不是 Alice,但是任何人都可以說謊假裝自己是 Alice,因此惡意攻擊者跟 Alice
一樣都可以輕鬆回答你「我就是 Alice」,顯而易見這種機制基本上沒有辦法幫助我們找到 Alice,也沒有辦法分辨到底眼前的人是惡意攻擊者還是 Alice。
一種改善的機制就是 PKI (Public Key Infrastructure),該機制的概念是
1. 有一個第三方服務會發行相關的 ID 證件,該 ID 證件難以偽造 (譬如 Certificate Authorities)
2. 你信賴這個第三方服務
所以你到火車站之後,每遇到一個人就要求對方出示其 ID,並且請第三方服務幫忙驗證這個 ID 證件是否合法,透過這種概念來找到到底誰是 Alice。
這種機制運作起來沒有問題,唯一的問題就是找到一個可信任的第三方服務相對複雜且困難。
有沒有一種相對簡單又有點有效的機制? 就是本篇要探討的 TOFU
假設情境改成,今天需要頻繁的到火車站去找 Alice 交換行李箱,這件事情會重複非常多次。這種情境下,我們可以
記住第一次遇到號稱自己是 Alice 的那個人,接下來每次都找該人交易。
簡單來說就是,相信第一次遇到的人,並且記住該人的狀態與面貌,接下來每次交易都直接尋找上次熟悉的面孔。
網路世界來說,一個非常知名使用 TOFU 的軟體就是 SSH。
SSH 使用者第一次連線到遠方 Server 時會相信自己連接到的是正確的 Server,同時將 Server 本身的指紋資訊給存入到本地快取。
因此接下來每次連接到該 SSH 的時候,就直接比較 Server 的指紋是否一致來確定是否連線。
這個機制聽起來很可怕,不過對於這種「很難預測第一次連線的 Server 是誰的狀態」的情境是滿堪用的,畢竟不容易一開始就被偽裝攻擊。
另外一個使用 TOFU 機制的概念就是 supply-chain security,假設你要透過 Packager Manager 來使用不同版本的 Package
這種情境下系統要如何信任每次抓到的 Package 都是正確的?
透過 TOFU 的機制將每個 Package 的 Hash 值都存放 local,這種情況下就可以去比對第二次,第三次下載的內容是否一致。
不過對於 CI 環境下,要一直維持 local cache 實在不容易,因此 Trust-On-First-Use 就會演化成另外一種 Trust-On-Every-Use.
文章後續還介紹 golang 生態系的 go get 是採用何種機制去信任每次下載的 library,對於這篇文章有興趣的不要錯過
public key infrastructure 在 Lee Hsien Loong Facebook 的最讚貼文
The repeated waves of COVID-19 clearly show that the fates of countries are intertwined. Only a concerted global effort can overcome this pandemic.
Glad to join leaders from the G20 Italy, the European Commission, other guest countries and key international organisations in the Global Health Summit to discuss what we can do in this historic fight. I talked about maintaining a well-functioning public healthcare system that can test, contact-trace, and vaccinate populations.
Singapore fully supports the Rome Declaration of principles to strengthen the global health infrastructure. We will work with all countries to build collective resilience against future pandemics. SM Tharman Shanmugaratnam and NCID Executive Director Leo Yee-Sin also spoke at the pre-Summit event. We are happy to share our experiences handling COVID-19, and in other areas like urban health emergency preparedness.
No country is safe in this pandemic until everyone else is safe too. – LHL
public key infrastructure 在 ลงทุนแมน Facebook 的最佳貼文
รู้จัก EECi เมืองนวัตกรรมแห่งใหม่ของประเทศไทย / โดย ลงทุนแมน
สหรัฐอเมริกามี ซิลิคอนวัลเลย์ เป็นเมืองเทคโนโลยี
จีนมี เซินเจิ้น ที่เปลี่ยนตัวเองจากอาณาจักรก๊อบปี้ มาเป็นดินแดนนวัตกรรมล้ำสมัย
ทีนี้หลายคนคงถามแล้วเมืองไทย สถานที่นี้อยู่ที่ไหน? ...
Continue ReadingKnow EECi, Thailand's innovative city / by investman
USA has Silicon Valley as a tech city
China has Shenzhen that transforms itself from a photoby approach to a modern innovation land.
Many people may ask now. Where is Thailand?
We must have heard EEC or EC economic development area in the development of 3 provinces in the East, Chonburi, Rayong and Chachoengsao.
Which is one of the Mega projects under Thailand policy 4.0
With a total infrastructure investment of 1.5 trillion baht.
To have both high speed trains, double rail trains, airport and harbor.
To connect travel conveniently and uplift the Thai industry compared to world class.
Which 1 in 3 provinces will exist. One area that is raised to be a city of innovation.
EECi or Eastern Economic Economic Corridor of Innovation is located in Wang Moon Valley, Rayong province.
Area up to 3,454 Rai
How much time does EECi have to be a Silicon Valley of Thailand?
Invest man will tell you about it.
╔═══════════╗
Blockdit is a platform of source of thinkers.
Help to update the situation in video article format.
Including podcasts to listen to on the go.
Try it out at Blockdit.com/download
╚═══════════╝
EECi aims Thailand to move forward to innovative new industries.
To add economic value to long term countries
When it's like this, it's impossible to guess that EECi must be a source of scientists and good engineers.
Let's combine research materials to top up new industries with advanced technologies.
By this innovative city, there are ′′ 6 target industry ′′ that serves differently.
1. Modern agriculture that will change old agriculture completely.
Because you know that Thailand has 6.8 million farming households.
But it's only 8 % income from the total GDP value of 1.68 trillion baht.
From such information, it means indirect meaning that Thai farmers will have less income than other industrial sector. When it's like this, it's a result. The new generation doesn't want to be farmers.
EECi has another mission to innovate modern agriculture research. Modern Farming
To solve this problem by making productivity more but using less people but more quality.
With infrastructure such as Plant Factory (Plant Factory)
It's a technology to help new generation farmers to produce effectiveness.
Because it's a planting system. Shut up or semi-shut system can control the environment
Such as lighting, temperatures and food elements are suitable for plant growth.
Phenomics Greenhouse Technology Farmhouse (Phenomenics Greenhouse) will have equipment to measure the physical characteristics of plants.
Growing in various conditions of how high and growth is.
Then, gather as a database to help select strong plant species.
2. biofuels and biological chemicals
When the produce is much, it has to be sold more expensively.
This area will also serve advanced technology to privatize agricultural produce to increase in value.
One of them is Biorefinery. Biorefinery. A prototype to privatize agricultural produce.
Go to high value products
Which is Dr. Jane Kritthaya, Director EECi from National Science and Technology Development Office of the National Science and Technology Development Office (NCO) ) As the EECi regulatory agency says, ′′ EECi will help make more value for raw materials in the country to go to the world market. From the same time that Thailand sells ′′ tons of rice ′′ can be sold from rice to ′′ gram ′′ at the same time. More value added than ′′
By this prototype biological refinery starts from design, experimenting, agricultural produce.
Comes to the fermentation process, then separates the produce into 2 parts.
It's Non-GMP to produce fuel and biological materials.
And GMP will produce food, cosmetics and supplements.
3. high performance battery and modern transportation
Many people may not know that our country is the world's number 11 big car manufacturer.
But today. Car technology runs further than we think.
The trend of the world will surely occur, is that the combustion engine will gradually go extinct.
And will be replaced by BEV Car
And if we don't want to lose a huge income that will happen in the future.
It has to be Thailand as part of the manufacturing base of electric cars and future cars.
By one of the key structures is ′′ high performance battery production
For that reason, EECi will be a space to mobilize engineers and specialists in public and private sector. Think of how to make Thailand a top largest battery production base of Asia to develop unmanned automotive technology.
4. Automation, Robotics and Smart Electronics
We may have heard often that technology will replace human labor.
To keep industrial costs cheaper and more quality products.
EECi is not overlooked by the creation of robotics and intelligent industrial mechanical machines so that they can support and test the prototype development process, manufacturing products for entrepreneurs.
Make the innovation center sustainable or sustainable Manufacturing Center (SMC) develops people with knowledge.
So far, production line samples so that both small and medium produce sector have experimented with semi-automatic and automatic production processes. Make it suitable for your business or not. To bring information before making a real investment in your business.
5. Aviation and Space
Many people may question whether our country can actually do this?
But the government sector is considered in Thailand
World top manufacturing base and automotive parts
We should also be able to develop future aircraft and aircraft parts too.
When it's like this, EECi will be a gathering of good engineers to develop the aviation industry.
Unmanned aircraft to satellite
6. Medical Devices
From the facts of Thailand, we produce rubber gloves and condoms to the top of the world.
But.. another angle is a weakness.
Each year we import high tech medical devices, 7-8 billion baht per year.
Which if Thailand is a Medical Hub in the eyes of the world.
It's necessary to decrease imports and turn to manufacturers of advanced medical devices, technology.
Which would make EECi have a team to innovate to produce various medical instruments in the area.
Also, in the EECI area, there will be a 3 GeV Energy Level sin Light Generator
Which produces a million times brighter than the daylight.
With this brightness is like a special microscope.
Where we can see all kinds of material molecules on Earth thoroughly.
Interesting is this beam is an important science infrastructure.
Continuing research and development in various industries.
When looking at EECi, the side round must say this could be another turning point of the country.
We're doing all the way to build a higher business and new industries.
To add value to the Thai economic system.
Because if we don't hurry up to do it today.. in the future, we may be a country left behind.
It's hard to run a world that is changing so fast.
In the past, Thai research results invented at laboratory level, there are still limited to developing manufacturing processes to forward to useful users. We have weaknesses that are not invested in infrastructure and mechanism to expand research. And another side can't take much advantage of foreign advanced technology. Because of lack of infrastructure and mechanism to support technology adaptation to Thai context.
In the future, EECi would be an important infrastructure and mechanism of the country to shut down the weaknesses in this matter..
╔═══════════╗
Blockdit is a platform of source of thinkers.
Help to update the situation in video article format.
Including podcasts to listen to on the go.
Try it out at Blockdit.com/download
╚═══════════╝
Follow up to invest manly at
Website - longtunman.com
Blockdit-blockdit.com/longtunman
Facebook-@[113397052526245:274: lngthun mæn]
Twitter - twitter.com/longtunman
Instagram-instagram.com/longtunman
Line - page.line.me/longtunman
YouTube - youtube.com/longtunman
References
- www.eeci.or.th/th/home
- Fact Sheet EECi DocumentTranslated