Live data from Hacker News

Show HN: Ts-SSH – SSH over Tailscale without running the daemon

github.com

21–30 of 43 posts

Re: Show HN: Ts-SSH – SSH over Tailscale without running the daemon

#21
post #14

Earlier quoted context omitted.

> I am scared that this is vibe coded Totally serious question: would you feel better about this piece of software, if you didn't know that it was vibe coded? Do we need "build without AI" stickers on every piece of software created these days?

[flagged]

I don't really care if "AI assistance" was used as long a human is actually reviewing the output, which just doesn't seem to be the case here (and usually not the case when it comes to "vibe coding")

Re: Show HN: Ts-SSH – SSH over Tailscale without running the daemon

#22
post #11

Earlier quoted context omitted.

That kind of goes counter to semantic versioning, where: - x.y.Z (patch) -> backward compatible bug fixes - x.Y.z (minor) -> backward compatible new features - X.y.z (major) -> breaking changes But of course it's fine to use whatever versioning scheme you like, as long as you communicate it to your consumers. https://semver.org/ Edit: updated the version strings for clarity.

Minor note, but since the topic is accurate semvar: rule 4 specifies 0.x.y is a special case where anything may change at any time.

Good point, if we're already being pedantic we should be accurate. I've updated the version strings in my comment, thanks!

Re: Show HN: Ts-SSH – SSH over Tailscale without running the daemon

#23
post #7

I am scared that this is vibe coded and not audited in any way. tsnet is good software, but wrapping it in this way is a recipe for disaster. Please reconsider.

> I am scared that this is vibe coded Totally serious question: would you feel better about this piece of software, if you didn't know that it was vibe coded? Do we need "build without AI" stickers on every piece of software created these days?

I looked at the code and the documentation and it's definitely vibe coded. Also the presence of CLAUDE.md is pretty telling. I have no issue with vibe coding in general, but I am skeptical of the usefulness of LLMs with security code.

Yes, I think projects that are coded wholly or in part by LLMs should be noted as such.

Re: Show HN: Ts-SSH – SSH over Tailscale without running the daemon

#24
Tangential ... I think I read somewhere that I cannot become a customer of tailscale without FAANG credentials ?

As in, I cannot simply sign up with my own personal identifiers (email, phone, etc.) but need to participate in a google auth or FB auth mechanism ?

I found it hard to believe - is this, indeed, the case ?

Re: Show HN: Ts-SSH – SSH over Tailscale without running the daemon

#25
post #2

This is why you don't let Claude handle versioning and the release process. From v0.1.0 to v1.0.0 to v2.0.0, and then suddenly 1.2.0? Semantic versioning isn't quantum mechanics. (Even then, I'll admit it's sometimes hard for me too to decide the right increment when tagging versions. :)

https://preview.redd.it/ou8h9owirmme1.png?width=1024&auto=we...

Re: Show HN: Ts-SSH – SSH over Tailscale without running the daemon

#26
post #24

Tangential ... I think I read somewhere that I cannot become a customer of tailscale without FAANG credentials ? As in, I cannot simply sign up with my own personal identifiers (email, phone, etc.) but need to participate in a google auth or FB auth mechanism ? I found it hard to believe - is this, indeed, the case ?

You need one of the following:

Google, Microsoft, Github, Apple or your own OIDC Provider.

They do not have their own account backend.

So you dont technically need a FAANG account if you have a Gitea, Gitlab, Authentik Account or something like that.

Re: Show HN: Ts-SSH – SSH over Tailscale without running the daemon

#27
post #24

Tangential ... I think I read somewhere that I cannot become a customer of tailscale without FAANG credentials ? As in, I cannot simply sign up with my own personal identifiers (email, phone, etc.) but need to participate in a google auth or FB auth mechanism ? I found it hard to believe - is this, indeed, the case ?

Since April 2023 they support custom OIDC providers[1], and as of April 2024 that was extended to the free plan as well[2], so you can bring your own auth.

[1]: https://tailscale.com/kb/1240/sso-custom-oidc

[2]: https://tailscale.com/blog/sso-tax-cut

Re: Show HN: Ts-SSH – SSH over Tailscale without running the daemon

#28
post #24

Tangential ... I think I read somewhere that I cannot become a customer of tailscale without FAANG credentials ? As in, I cannot simply sign up with my own personal identifiers (email, phone, etc.) but need to participate in a google auth or FB auth mechanism ? I found it hard to believe - is this, indeed, the case ?

It's possible to use Tailscale with just a passkey [0], but it's a weird process because they don't let you create a tailnet and a passkey account at the same time. Instead, you need to create an account with a throwaway FAANG credential and send yourself an invite to that account's tailnet, and then use that invite to create a passkey-linked Tailscale account. This account can then create its own tailnet, at which point the original tailnet (and the throwaway FAANG account) can be discarded.

It's a weird process and not particularly user friendly (passkey accounts are tied to a specific passkey and can't have additional ones added, so you need to create a new account if you, say, migrate from one hardware key to another). Hopefully they improve the process before passkey support goes out of beta.

[0] https://tailscale.com/kb/1269/passkeys

Re: Show HN: Ts-SSH – SSH over Tailscale without running the daemon

#30

Meta question: How does a HN post like this come to exist with _both_ a link and a body? Anytime I've submitted with both url + body the body is posted as a comment.

not sure, but i think this may be a special feature for Show HNs
Post reply on HN