291–300 of 468 posts
Earlier quoted context omitted.
You're assuming that they're thinking something completely outside of anything they've ever said, and something that nobody actually wants. Your assumption is the one that's out of left field, not mine.
You haven't proved me wrong, you just said I am wrong.
However, I just don't see much difference from my vanilla Wireguard setup. Granted, my use case is very simple, just connect a few devices at home and in the cloud into a single network and use one of them as an exit node, but I'm still not sure what would make me prefer Tailscale over Wireguard.
So far the biggest difference has been that it makes me use an external identity provider instead of having to manually exchange keys between devices, and I'm not sure I'm very comfortable with that.
Earlier quoted context omitted.
I’m pretty ignorant on this topic, but what are the benefits of having a personal VPN?
I have a server at home with file syncing, personal media, and home automation. I want to be able to access it remotely, but I’d rather some of those things not be publicly accessible for security. I could always do HTTP auth with an nginx reverse proxy, but it’s not a very smooth workflow and it relies on me being able to configure my server/services correctly. Instead I can bind my services to Tailscales network in…
Earlier quoted context omitted.
"Fixing the internet" == you can comunicate with computers that want to comunicate with you, and not with others.
"Fixing the internet" == you can communicate with computers that you want to communicate with, and not with others.
If someone uses a rubber hose, you might be forced to communicate against your will, using the fixed Internet.
I've tried Tailscale recently after reading all the raving reviews here on HN. The service is very easy to install and the apps are nice to use, everything is just very well done. However, I just don't see much difference from my vanilla Wireguard setup. Granted, my use case is very simple, just connect a few devices at home and in the cloud into a single network and use one of them as an exit node, but I'm still not…
Earlier quoted context omitted.
If you use an identity provider like Okta or OneLogin, then you're not tied to any "contentful" services like GitHub or a Google account that "historically" seem to have more problems of this type. As far as threat models go, I can't really say I understand this one too much.
As an example: shortly after Russia invaded Ukraine, Namecheap cancelled all accounts of all of its customers who were located in Russia. This was done regardless of what content if any was hosted by the account, whether or not the person in question supported the war, or whether the person in question was actively fleeing Russia and may have been relying on technical infrastructure they had previously set up to help…
If we (the US) decided to invade Canada tomorrow, you can be certain that the maple syrup would stop flowing.
Edit: According to their website[1], the overwhelming majority of their employees are in Ukraine. Two of the three cities they have offices in are on the current combat front.
Earlier quoted context omitted.
I haven't really felt like 1Password's product materially strayed from the original mission. If anything, I'm even more delighted with the team functionality, shared vaults, quick keyboard access in 1Password 8, etc. I wouldn't put them in the Dropbox bucket. Also, I think the value Tailscale provides is fairly unique and far from obviously a platform feature like file storage and perhaps even password management.
1Password went from being buy once upgrade forever to SaaS. A lot of folks bought back when that was the package (and business model) so it's viewed relatively negatively here from some folks. I don't blame them, but also, I think 1Password is a success. I just don't think they'd have been viable under their original business model.
How does it work for something like a security DVR where you can’t access the system itself? Is there an equivalent way to just access the network like a VPN?
Funding scares me. It bring sharks onboard who do not share the same vision. They will demand revenue and ROI above all else. I like Tailscale but I hate this business model down to the core (Netlify as an example). Tailscale was doing fine as it was, capable people there already. It quickly became an "exit type of business", too quickly. These companies usually bring something really easy to use, let people onboard…
Tailscale investor here. I can assure you we share the same vision with the founders.
I was going to try TailScale but then it seemed the only option to do so as an individual was to login with a 3rd party cloud provider, which I in no way want tied into my networks. I gave up and just setup wireguard directly instead, I don't trust Tailscale either if that's their attitude towards privacy, it's permanently marred my vision of their product.
Your personal dislike of cloud SSO is not the same as "their attitude towards privacy". Before you do anything "permanently" you should read their reasoning behind that decision: https://tailscale.com/kb/1013/sso-providers/ > Tailscale works on top of the SSO/IDP/IAM identity provider you or your company already use. > We don’t support sign-up with email addresses. By design, Tailscale is not an identity provider: th…
They don't even give the option to try to debug my own identity provider.
aka the BYO SAML feature does not exist for personal or small team/business users.
But maybe that's the point? TailScale's product is actually an identity integration layer for Wireguard? If you don't need an identity provider, Tailscale doesn't add value over Wireguard?