Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Tailscale didn't stop the Hugging Face intrusion

tailscale.com

Post reply on HN
Print view View original

91–100 of 239 posts

Re: Tailscale didn't stop the Hugging Face intrusion

#91

Post by colechristensen »

andy99 wrote: post #60
guessmyname wrote: post #51

Expect similar articles (cough, ads, cough) in the next couple of days from every single company whose software was involved in the incident.

Why not? If done right it’s a good way to talk about implications for those companies and provide some education like tailscale did here. We also saw Anthropic post about “our agent escaped too” and while I understand the incident caused them to review, they found something and needed to disclose, the whole thing came across much worse and largely they got mocked or accused of trying to piggyback, so obviously there…

This all has the -aire of theatre. OH NOES THE POWERFUL AI GOT OUT

Then everyone coming out with humbled determination about working together to responsibly use and contain this powerful technology for the greater good (and profit margin).

I will not believe marketing gimmickry is not a large part of what's going on with every one of these "incidents".

Re: Tailscale didn't stop the Hugging Face intrusion

#92

Post by nunez »

test1072 wrote: post #75

sorry I know off topic, is there any alternative VPN to tailscale. actually I have open Web socket to my mobile from my PC to stream screen record using ffmpeg. it's my own app . so anyway tailscale sometimes is slow . is there any alternative free service like tailscale vpn ? ( don't want to use anything like parsec etc , I want to use my own app)

This requires buying hardware, but Firewalla provides Wireguard for their router/firewall appliances. It works really well though it's just plain Jane WireGuard and doesn't have the fancy feature set that Tailscale provides like ACLs, key base auth, etc.

If you want a purely software defined solution, Netbird is gaining popularity.

Re: Tailscale didn't stop the Hugging Face intrusion

#93

Post by d3m0t3p »

simonw wrote: post #49

> One of those 136 credentials was a reusable Tailscale auth key, used to create new Tailscale CI (continuous integration, used for automated testing) nodes in their tailnet. The agent copied that key into a series of external sandboxes and used it, over several days, to enroll a total of 181 nodes into Hugging Face’s tailnet. Those nodes each received a Tailscale identity tag granting all the access a CI node would…

When everyone push on friday, and you have 400 CICD pipeline triggers spawning that many nodes. How do you know if this is unexpected ?

Their cloud compute might be on demande, someone starts training a model and 50 machines are spawned. Knowning when something is unexpected is hard

Re: Tailscale didn't stop the Hugging Face intrusion

#94

Post by selfmodruntime »

ahofmann wrote: post #43
free652 wrote: post #15

Earlier quoted context omitted.

Read from the ENV variables of a container.

And someone was stupid enough to put a reusable tailscale auth key in there.

I'm willing to bet that 95% of people using tailscale for CI have a 90 day (max days) ephemeral, reusable auth key somewhere in their setup.

Re: Tailscale didn't stop the Hugging Face intrusion

#96

Post by rlt »

guessmyname wrote: post #51

Expect similar articles (cough, ads, cough) in the next couple of days from every single company whose software was involved in the incident.

If they take actions that would have further prevented or limited this attack then it seems like a good form of advertising to me.

Re: Tailscale didn't stop the Hugging Face intrusion

#97

Post by monster_truck »

kenniskrag wrote: post #38
monster_truck wrote: post #34

You know what would have gone a long way to stopping this? Not leaving credentials as env variables in containers. Vault is not that hard to stand up and utilize. We need to bring shame back, the humans responsible are supposed to be professionals.

Why should that help to have no env variables?

There is no way you're seriously asking this right now

Re: Tailscale didn't stop the Hugging Face intrusion

#98

Post by bakugo »

fragmede wrote: post #86
yellow_lead wrote: post #72

Anthropics initial post felt like marketing to me. But I also found them incompetent for being unable to unplug an Ethernet cable. Now everyone is trying to bandwagon onto it, first OpenAI, and now tailscale?

Oh no! Marketing! Whatever shall we do‽

What are you trying to say here, exactly? Do you enjoy being bombarded by thinly veiled advertisements everywhere you go?

Re: Tailscale didn't stop the Hugging Face intrusion

#99

Post by inigyou »

apenwarr wrote: post #71
traceroute66 wrote: post #68

Earlier quoted context omitted.

But why should insecure argument handling bugs (as per your recent SSH bulletin) be found after release ? Those are an ancient class of bugs that should be picked up by any competent security review.

Is your theory that "any competent security review" will find every security hole in a product? Because that sure would be great if it were true. Unfortunately it does not match my experience.

[flagged]

Re: Tailscale didn't stop the Hugging Face intrusion

#100

Post by vablings »

test1072 wrote: post #75

sorry I know off topic, is there any alternative VPN to tailscale. actually I have open Web socket to my mobile from my PC to stream screen record using ffmpeg. it's my own app . so anyway tailscale sometimes is slow . is there any alternative free service like tailscale vpn ? ( don't want to use anything like parsec etc , I want to use my own app)

Tailscale should not be any slower unless you have some strange NAT issue and you are not getting a direct connection.

There is also headscale if you prefer to self host a solution

Post reply on HN