Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Tailscale has reached general availability

tailscale.com

Post reply on HN
Print view View original

31–40 of 128 posts

Re: Tailscale has reached general availability

#31

Post by blueside »

apenwarr wrote: post #22
mholt wrote: post #9

Earlier quoted context omitted.

I'd actually rather you have my username and password, since I use a password manager and every password is long and unique. I don't want to tie my Google/Apple/ account to my Tailscale account. This way I can also more easily keep track of which accounts I have since my password manager stores them all. So I will wait for email signup (which currently just subscribes me to a mailing list...)!

It's easy to make a basic password login system, and very technical people use password managers, long passwords, etc. But there's a long "tail" (ha ha) of people who don't use long passwords, who will reuse their password on multiple web sites, who will forget their password and need to recover it using their mother's maiden name, etc. This opens up unlimited opportunity for phishing attacks. And you don't get any k…

> few very technical people use password managers, long passwords, etc

I'd be very surprised if this was true. Most all technical (competent) people I know use a pw manager of some sort

Re: Tailscale has reached general availability

#32

Post by jasonvorhe »

reinhardt1053 wrote: post #28

Why my team should pay Tailscale 10 dollars/user/month? We can get the same features with Wireguard/OpenVPN.

If you can, do so. This reminds me of claiming to be able to build Dropbox in a weekend with existing tools. You can, but it most likely won't work as well, won't be as integrated and well, you'll have to build it yourself which won't be as easy as you think it is, then add monitoring and paging and, depending on your requirements, high availability.

I'd certainly be interested in a blog post about this, if it's as easy. But considering that Tailscale took this long to launch, I have doubts that this is as easy to build.

Re: Tailscale has reached general availability

#33

Post by steeve »

ASalazarMX wrote: post #29
steeve wrote: post #27

Been using it for the last few months and it's great. I use it for SSH, NAS etc... Also, being able to ping my iOS phone that's on 4G from my computer feels like magic.

> Also, being able to ping my iOS phone that's on 4G from my computer feels like magic. So, like every other VPN?

TailScale is to other VPNs what Docker was to LXC. Well, except Hamachi.

Re: Tailscale has reached general availability

#34

Post by bgentry »

apenwarr wrote: post #25
mromanuk wrote: post #7

Earlier quoted context omitted.

Maybe you can look at Sign In with Apple, it works native and for websites too. https://developer.apple.com/sign-in-with-apple/

I really love the privacy- and security-centric design of Sign In with Apple, but so far it only works if you have Apple hardware, right? Tailscale's selling point is you can use it on all your devices (modulo Android support which isn't released yet).

Quoting from the page linked above:

Sign in with Apple works natively on iOS, macOS, tvOS, and watchOS. And it works in any browser, which means you can deploy it on your website and in versions of your apps running on other platforms.

So it at least sounds like it can be used anywhere with a web login flow. Although the docs say this must be accomplished using their JS library, as opposed to a standard OAuth2 flow of some kind: https://developer.apple.com/documentation/sign_in_with_apple

Re: Tailscale has reached general availability

#35

Post by apenwarr »

blueside wrote: post #31
apenwarr wrote: post #22

Earlier quoted context omitted.

It's easy to make a basic password login system, and very technical people use password managers, long passwords, etc. But there's a long "tail" (ha ha) of people who don't use long passwords, who will reuse their password on multiple web sites, who will forget their password and need to recover it using their mother's maiden name, etc. This opens up unlimited opportunity for phishing attacks. And you don't get any k…

> few very technical people use password managers, long passwords, etc I'd be very surprised if this was true. Most all technical (competent) people I know use a pw manager of some sort

It originally said "a few", not "few", which was intended to have a slightly different meaning, but I've edited it to remove that because you're right and it's not important :)

Unfortunately non-technical people mostly don't use a password manager and we can't assume they do. Tailscale is about making the Internet secure by default, and passwords will never be secure by default.

Re: Tailscale has reached general availability

#36

Post by symplee »

armaxt wrote: post #10

I will get banned for this in a matter of minutes but I will say the truth to whoever think HN is fair. For the past 3 months, every, again EVERY post that was linked to Tailscale (not just the company domain but also the blog posts of the founders' websites), has gotten to the frontpage within minutes, with a full 100% hit rate. This cannot happen for any company, any project or anything else to be honest since ther…

Should the list of who upvotes an article be public?

When I make a comment, my username is displayed. If upvotes and their timestamps were public, it would make it a lot easier for the community to get to the bottom of any funny business like OP is describing.

Re: Tailscale has reached general availability

#37

Post by TechBro8615 »

symplee wrote: post #36
armaxt wrote: post #10

I will get banned for this in a matter of minutes but I will say the truth to whoever think HN is fair. For the past 3 months, every, again EVERY post that was linked to Tailscale (not just the company domain but also the blog posts of the founders' websites), has gotten to the frontpage within minutes, with a full 100% hit rate. This cannot happen for any company, any project or anything else to be honest since ther…

Should the list of who upvotes an article be public? When I make a comment, my username is displayed. If upvotes and their timestamps were public, it would make it a lot easier for the community to get to the bottom of any funny business like OP is describing.

This is a great idea, but will never happen because all the YC founders would be against it for obvious reasons.

EDIT: Slightly altering it a bit. What if only the first 50 upvotes were public?

Re: Tailscale has reached general availability

#38

Post by dstaley »

bradfitz wrote: post #18
mholt wrote: post #9

Earlier quoted context omitted.

I'd actually rather you have my username and password, since I use a password manager and every password is long and unique. I don't want to tie my Google/Apple/ account to my Tailscale account. This way I can also more easily keep track of which accounts I have since my password manager stores them all. So I will wait for email signup (which currently just subscribes me to a mailing list...)!

(also Tailscale) FWIW, we'll probably also be supporting GitHub (and maybe Twitter?) auth, as well as perhaps letting you run your own auth server if you set up the right DNS records. Lot of things yet to do.

Super excited to see that you'll be supporting GitHub! That being said, do you have plans to implement any sort of account merging? For example, the ability to login with one of multiple authorized accounts (so my Google Account, my Twitter account, or my GitHub account).

Re: Tailscale has reached general availability

#40

Post by bradfitz »

ahnick wrote: post #16
apenwarr wrote: post #5

Earlier quoted context omitted.

(I'm a Tailscale co-founder) The idea is to avoid building yet another commercial service that holds onto your username and password. People have enough identities already. More details here: https://tailscale.com/blog/how-tailscale-works/ We know we keep getting feedback that people want a different way to authorize their accounts (especially for personal use), so we're looking at other options. We just really want…

Have you considered integrating with Keybase? I think the identity system of Keybase coupled with the secure mesh networking of Tailscale would be a really powerful combination.

I just started talking to Max at Keybase about this today, actually. It'll require work on both our sides, but we both want to do it.
Post reply on HN