Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Tailscale didn't stop the Hugging Face intrusion

tailscale.com

Post reply on HN
Print view View original

131–140 of 239 posts

Re: Tailscale didn't stop the Hugging Face intrusion

#131

Post by zactato »

simonw wrote: post #49

> One of those 136 credentials was a reusable Tailscale auth key, used to create new Tailscale CI (continuous integration, used for automated testing) nodes in their tailnet. The agent copied that key into a series of external sandboxes and used it, over several days, to enroll a total of 181 nodes into Hugging Face’s tailnet. Those nodes each received a Tailscale identity tag granting all the access a CI node would…

Its always CI. Whenever I've worked with good pen testers they always start with Jenkins, know that people stored creds and there and didn't treat as seriously as they treated production.

Re: Tailscale didn't stop the Hugging Face intrusion

#132

Post by inigyou »

icedchai wrote: post #128
inigyou wrote: post #102

Earlier quoted context omitted.

If you want a hard-to-use VPN with minimal features and minimal surface area, as you said, Wireguard is right there. Tailscale is convenient Wireguard.

I use Wireguard for several site-to-site VPNs. It just works. I never have to worry about it, and there are very few configuration settings to mess up (unlike, say, IPsec, which is a nightmare.)

Yes, for a permanent site-to-site link. Now try configuring 300 nodes in a mesh, where nodes are coming and going every half hour.

Re: Tailscale didn't stop the Hugging Face intrusion

#134

Post by throwawaysess »

Tailscale OAuth client ACL permissions are not fine-grained enough. I have a system that issues auth keys scoped to a single machine on the tailnet — but to set that up, my OAuth client must have global permission to write ACLs. So if that key is compromised, it can grant access to any machine on the tailnet. This was raised in a GitHub issue in 2023 and remains unresolved.

Re: Tailscale didn't stop the Hugging Face intrusion

#135

Post by AlphaSite »

r0b05 wrote: post #70
aborsy wrote: post #47

Earlier quoted context omitted.

It does too many things, and the product has got too complex. I saw a year ago they were looking for someone just to help with complexity. I use it but feel uncomfortable, that it has large attack surface and LLMs will find exploits in it. Without taillock it makes no sense. Anyone on their coordination servers will be able to connect to your network.

The large attack surface is a good point. I started using it initially and the ease of setting up a vpn was nice, but then I came across few security vulnerability postings which led to concern so I went to Wireguard. I think they should reign in the features and treat it as a secure vpn first and foremost and remove unnecessary features to minimize the attack surface.

If you architect properly it doesn’t necessarily follow that more features means more attacks, or certainly not more system wide attacks.

If you layer and segment correctly you can build atop a secure core and have some decent security.

Re: Tailscale didn't stop the Hugging Face intrusion

#136

Post by somebudyelse »

sscaryterry wrote: post #122
bilekas wrote: post #78

Earlier quoted context omitted.

And I have no problem with this. Infact it would be nice to be a point of pride to be there to say how your security is handled.

I think this is simply a case of Tailscale saying, we've got no idea what these guys (OpenAI) are talking about. All these incidents are scarce on technical details . Honestly, IMHO, OpenAI and Anthropic are now actively pushing for AI regulation, as a defence mechanism. These are false flag operations.

Tailwind or Tailscale?

I think the case is Tailscale is saying, "It's technically not our fault, but we still should've stopped it."

Re: Tailscale didn't stop the Hugging Face intrusion

#137

Post by ripbozo »

claiir wrote: post #108
luciana1u wrote: post #23

[flagged]

Bot account. This sounded like LLM text. I went through all your other comments, and of your thousands of comments written in 35 days, every other one is also similarly written by LLM. Some superficial comment usually commenting on the title, always lowercase, always load-bearing and honest.

it was created 35 days ago and already has 418 karma. I've been here for over 6 years and don't even have half of that

Re: Tailscale didn't stop the Hugging Face intrusion

#138

Post by darkteflon »

behnamoh wrote: post #29
john_strinlai wrote: post #2

> No “vulnerabilities” in Tailscale were found or exploited, and that might make it even more uncomfortable for us. [...] But, we're a security tool. Their intrusion is our intrusion, and it's our job to take it seriously. im a happy customer of tailscale, so i am obviously biased, but i have a lot of respect for this. they could have just stayed quiet and i dont think anyone would have bat an eye.

Tailscale as a company reminds me of Valve and other good old tech-oriented people that I can "trust" that they know what they're doing. I'm a happy customer too and I hope they retain the essence of what distinguishes Tailscale.

For me, the calculus is simply: “there’s no way I could do this better than Tailscale”.

Re: Tailscale didn't stop the Hugging Face intrusion

#140

Post by qlte »

walrus01 wrote: post #117
claiir wrote: post #108

Earlier quoted context omitted.

Bot account. This sounded like LLM text. I went through all your other comments, and of your thousands of comments written in 35 days, every other one is also similarly written by LLM. Some superficial comment usually commenting on the title, always lowercase, always load-bearing and honest.

Sure seems like it. Real humans don't write exclusively one sentence comments. It doesn't look like the post history of anyone here that I'm fairly sure is a real meat based mammal. It looks like someone gave an LLM an instruction to write exclusively short and snappy comments that are somewhat relevant to the original post.

  > … comments that are somewhat relevant to the original post.
This is a really common tell for HN bot accounts I find, even when effectively disguised/customized to drop the most obvious LLM cliches/em-dashes/etc.

In a vacuum a specific comment may be more or less fine, or just a tad over baked like the parent post giving it an uncanny valley feel though otherwise passable.

But even people who diligently try to stay on topic on a forum like HN will occasionally use a post as a segue or jumping off point to some other idea, tangentially related news, personal experience, or random thought that pops into their head if it feels like it (kinda) “fits”.

After scrolling through a few dozen replies in an account’s history that are all directly related to the post topic it no longer looks human in aggregate.

I’m sure the spammers will try to incorporate that idiosyncrasy into their prompts eventually but not sure it will help more than hurt.

Post reply on HN