aborsy

Isn't embracing AI expected in a software company?

Those who don't catch up will lose.

See my comments in this thread.

Tailnet owner may not trust all their devices to the same extent. Here is a concrete example.

I install tailscale on my cloud vps which I use for downloading torrents. I want my laptop to talk to this node, but I don't want this vm talk to my laptop, which is the whole purpose of ACLs. My ACL is deny by default, so that is great and easy to set. But now this node can still send arbitrary files to my laptop. If I don't remember to tag it, I'm vulnerable. If I do, there is still a window that this node can send me files until I tag it (I can't install tailscale to a tag).

Sending a file otherwise normally requires an app listening to a port, so taildrop permissions should be same as network permissions set by ACL.

BTW, last year or so tailscale advertised a position for someone to manage complexity of tailscale. Founder was talking about this issue. They seem to be aware of the problem.

I backup my different devices to my NAS. The user is a restricted backup user seeing only their own directory. I obviously don't want my torrent computer gets root on my NAS.

I personally use openssh, but someone else may use tailscale SSH.

There are too many features, and lines of code (probably more than OpenVPN). I'm pretty sure there are all kinds of zero days in it, with this attack surface and feature set.

I use it extensively, and I would rather pay them a fee if they could review thr code.

A possibility is a lock down mode, disabling risky features.

I just want a VPN for connrctiviy, no taildrop, taildrive, SSH, funnel, services, DNS, node sharing, ...They are disabled in my admin console, but the code runs on my devices and they can be enabled by mistake.

A question. Taildrop enables unauthenticated input and doesn't even obey ACLs. I'm not quite sure about this, but couldn't malware in a low trust device send a file to my Synology NAS, which will then automatically process it for indexing things like thumbnail, leading to potential code execution? Why doesn't it obey ACLs, and why isn't the recipient approval needed before the file exits the sender's device? I use tags, but I'm the owner not the tag.

Science is getting out of the reach of the majority of people. In particular, EU is out of it mostly.

And what will happen to all these software engineers who are laid off, and to massss who are graduating in CS (because the same CEOs told them it's a good carrier)?

Is it known if this is AI related?

Or perhaps, as Zack noted, Musk showed them the way?

Why?

Some of these vulnerabilities are critical. One compromised node with ssh can get root every other node.

Calling it slop, AI, conveys nothing, 10000 words does not help. They provide practical demonstration, and explain the cause.

In my opinion tailscale needs to focus on secure networking. File sharing, DNS, SSH, Funnel, ... can be handled by dedicated tools.

How many lines of code is tailscale client nowadays?

Syncthing apps for example. Search for example comments of Synctrain app developer in syncthing forum.

France also regulates encryption in applications. Some percentage of apps are not available in France, because apps don't comply with the rules imposed by bureaucrats or more often developers find procedures cumbersome or unfamiliar

Would Dirac get a job these days?

The interfaces of arr stack are ugly, and linking qbit to indexer manager to arr app is needlessly complex. Maybe there could be plugins in one app like qbit.

Prices in Amazon in my area are significantly less than in local shops. Amazon has improved the life greatly for us!

Julia should have been adopted for numerical computation and ML by places like Google.

They went with python and it's just too general and verbose.