Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Tailscale raises $100M

tailscale.com

Post reply on HN
Print view View original

271–280 of 468 posts

Re: Tailscale raises $100M

#271

Post by tomhallett »

I'm trying to connect Tailscale's product with their goal "The internal dashboard and CI system that will never need to be public-facing. The HR database that will always have far less than a thousand queries per second. The dozens or hundreds of devs that ssh or RDP into servers, not the millions of users being served."

Does this mean - instead of deploying a dashboard/ci to aws, I should host it "locally" on a single computer (macbook, raspberry pi) and then internal employees can access that site via Tailscale's network layer?

Re: Tailscale raises $100M

#272

Post by obogobo »

fwip wrote: post #64
Lightbody wrote: post #17

We love Tailscale. Everyone employee has it, and we use it to provide access to dev, staging, and prod environments as well. Fun little thing we did with it: nobody can access the prod network without requesting access via a Slack bot (powered by https://indent.com/ ). So somebody requests access, another authorized person approves it, and the Tailscale ACLs are updated for X minutes and then reset. Access to secure…

That's gonna be exciting next time Slack is down.

it was down for many folks about 2 hours after you posted this lol

Re: Tailscale raises $100M

#273

Post by ncmncm »

kyawzazaw wrote: post #268
ncmncm wrote: post #81

Earlier quoted context omitted.

I thought that Tailscale was pretty interesting. Avery Pennarun, its CTO, is somebody whose judgment I am used to trusting. Then I learned that to use it, I would be dependent on authenticating using a login on one of the unaccountable internet behemoths who could take away my account for any random reason or no expressed reason at all. No, thank you.

Avery Pennarun is CEO. David Crawshaw is CTO.

I am corrected.

Re: Tailscale raises $100M

#274

Post by colordrops »

wmf wrote: post #263
colordrops wrote: post #240

Earlier quoted context omitted.

Don't you have to also trust Tailscales closed source coordinator node?

Which also applies to Tailscale's SD-WAN and cloud VPN competitors.

But doesn't apply to my wireguard setup on my OPNSense installation at home.

Re: Tailscale raises $100M

#275

Post by dcow »

skoskie wrote: post #205
YPPH wrote: post #159

Earlier quoted context omitted.

The choice of tech stack for a desktop application seems like an interesting basis to claim a company has lost touch with its core values.

I’m fully in the camp who believes critical, top-level security should not co-exist with npm pulling dozens of 3rd party libraries which each pull even more 4th party code. Is there anyone here with a counter argument? Has a security review been performed on each dependency? Any reason to think my fear is unfounded?

And what should replace it? Rust? Cargo? Oops. (I believe 1Password uses Rust for security-sensitive parts too, btw.) I'd genuinely like to know what the correct tech stack for a password manager is today because using the right one is important to my current endeavor.

Regardless at Uno we're working on a password manager with a native app and rust core. It's geared more towards everyday consumers than power HN users, but you might find it interesting. The rust core including api server is open source right now because that's one point where we diverge from 1P. Whatever tech stack you choose, it needs to be openly auditable so that the community can collectively ensure it remains secure. https://github.com/withuno/identity

Re: Tailscale raises $100M

#276

Post by dcow »

smilespray wrote: post #182
YPPH wrote: post #159

Earlier quoted context omitted.

The choice of tech stack for a desktop application seems like an interesting basis to claim a company has lost touch with its core values.

Moving from a native app to an Electron-based one has a definitive impact on usability. Calling it a tech stack choice is a bit dismissive. They used to have a kick-ass Mac app. That appealed to a considerable amount of their users. Then they ditched the native app for Electron, and those same users were disappointed.

Which functionality was removed by switch stacks? What is the actual usability impact? I currently use 1Password7 and haven't updated to 8 so I'd like to know before updating.

Re: Tailscale raises $100M

#277

Post by IceWreck »

pilif wrote: post #9

With such a huge investment comes the obligation to eventually pay it back. Is this another one of my favourite tools going the way of Dropbox, 1Password and all other companies that were formed around what should be a platform feature, which took on way too large investment sums and were eventually forced to become the everything, losing sight of their core values? I sincerely hope not, but there's so much bad prece…

Even if it does go away, youre not loosing anything. Its functionality can be replicated with a USD 5 VPS using Slack's nebula (not wireguard based) or any wireguard based tool like headscale, innernet, netmaker or plain old wireguard.

Re: Tailscale raises $100M

#278

Post by lazzlazzlazz »

cma wrote: post #233
lazzlazzlazz wrote: post #146

Earlier quoted context omitted.

> a direct ring of trust with friends The vision you outlined is great, except it doesn't work. The trust assumptions are too high, and even a great product like Tailscale seems to rely completely on centralized identity providers (you have to choose Google, Microsoft, or Github on sign-in). Ultimately, if you want to maintain full control of your online identity and network, you'll probably need some of the decentra…

What are DIDs: Device IDs?

Decentralized Identifiers: https://www.w3.org/TR/did-core/

Re: Tailscale raises $100M

#279

Post by ptomato »

paxys wrote: post #196
arsome wrote: post #124

I was going to try TailScale but then it seemed the only option to do so as an individual was to login with a 3rd party cloud provider, which I in no way want tied into my networks. I gave up and just setup wireguard directly instead, I don't trust Tailscale either if that's their attitude towards privacy, it's permanently marred my vision of their product.

Not sure why everyone is hung up on this. You don't have to use a third party provider for auth. They support SAML and OIDC, and it is pretty easy to set up your own auth server. There are enough open source implementations out there you can use.

only with an enterprise subscription.

Re: Tailscale raises $100M

#280

Post by _abox »

discardedrefuse wrote: post #184
nickysielicki wrote: post #111

Tailscale has a fantastic product, I’ve been extremely happy from day one. If you’re waiting for a weekend to have a few hours to try out Tailscale, don’t, it takes 15 minutes to get every device you own up and running and talking. This is the lowest friction personal VPN to ever exist, and once you see how easy it is for your own devices, you’ll wish you had it at work. The biggest risk that this company has is that…

> I’ve been dreaming lately of a tor-like network that’s based loosely on the idea of tailnets. Rather than blockchain bullshit, you’d have a direct ring of trust with friends, and then you could set up access policies to forward packets for people you don’t trust, but who know someone you do trust. Might want to check out Yggdrasil. It lets you can create a real mesh routed, E2E encrypted network. You can keep your…

Thanks, I thought I knew all the major mesh VPN options (tinc, nebula, tailscale, zero tier, hamachi) and yet I never heard of yggdrasil.

This is the kind of comment I love HN for!

Post reply on HN