pot8n

The real raison d'etre with these new wave of commercial NoVPN products like this one and Tailscale is to build a high margin SaaS business without really having the infrastructure liabilities of SaaS businesses. The problem with these kinds of products is that they are, from a security perspective, a disaster. Not only your entire network is compromised if they get hacked or if even they want to get into your network whenever they want which is an unlimited power I've never seen in any SaaS product, also your network becomes prisoner to their services, so if their services go down for any reason, you and everyone in your network will be unable to connect to your network even if it's perfectly working.

At least Twingate doesn't try to do sanke oil advertising like Tailscale and sells itself as an "open source" (go have a look at their Github open issues, it's a complete disaster) while it is not. Also the other thing is, if you have a relatively small company of 50 people you will end up actually paying MORE than those seemingly overpriced yet established products like Zscaler ZPA.

For me, the only serious alternative to expensive products like ZPA are Zerotier and Pritunl. They are as transparent as open source yet still viable as businesses without being greedy or captive to VC money to extract every single dollar out of you.

Thank you for this addon. Google should have done this 20 years ago.

Don't forget Stackshare. One of the most disgusting tech spam websites of all time.

Usually job listing, SEO, web crawling, VPN and many other very low-barrier-to-entry companies are founded and run by the worst and most contemptible of all people. Dude, it's like a pattern!

You just made learning Zig on my todo list. Thanks :D

Rust is awesome and very eye opening and it's a great alternative for almost any Golang use case, I just hope they prioritize enhancing compilation times if possible.

I am sure I wouldn't use a service that can literally get into each and every device of my private network if they want to or worse, they get hacked. Each and every device in the network automatically accepts whatever public keys and endpoints that get advertised by their servers and automatically connect to them. It's not only an overpriced mediocre product. From a security perspective, it's the most dangerous SaaS service I've ever seen.

My biggest fear is once this company gets tied to WireGuard and the security disasters come out, WireGuard's fate will be tied to a mediocre commercial product that put money above engineering decisions.

eBPF

I was just going to post it. I am unable to work currently because of it.

Joe "Spotify doesn't make any sense" Rogan

HN trending expectations: how eBPF works

HN trending reality: How I make a zillion dollars a day with a yet another SEO/web scraping/reselling domains business