Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Tailscale has reached general availability

tailscale.com

Post reply on HN
Print view View original

41–50 of 128 posts

Re: Tailscale has reached general availability

#41

Post by kyrra »

armaxt wrote: post #10

I will get banned for this in a matter of minutes but I will say the truth to whoever think HN is fair. For the past 3 months, every, again EVERY post that was linked to Tailscale (not just the company domain but also the blog posts of the founders' websites), has gotten to the frontpage within minutes, with a full 100% hit rate. This cannot happen for any company, any project or anything else to be honest since ther…

My guess? The people involved at Tailscale. Two of the founders (Avery Pennarun and David Crawshaw) are former Googler's that had a lot of respect within the company (I loved both of their G+ posts internally). Brad Fitzpatrick also recently joined them.

They are then building the security model that Google uses[0], but trying to get it to other companies. I think the concept of BeyondCorp is pretty amazing and a great way to think about trust on a network.

Those 2 points together probably gets them lots of upvotes.

[0] https://research.google/pubs/pub43231/

Re: Tailscale has reached general availability

#42

Post by dfcarney »

jasonvorhe wrote: post #32
reinhardt1053 wrote: post #28

Why my team should pay Tailscale 10 dollars/user/month? We can get the same features with Wireguard/OpenVPN.

If you can, do so. This reminds me of claiming to be able to build Dropbox in a weekend with existing tools. You can, but it most likely won't work as well, won't be as integrated and well, you'll have to build it yourself which won't be as easy as you think it is, then add monitoring and paging and, depending on your requirements, high availability. I'd certainly be interested in a blog post about this, if it's as e…

(Co-founder of Tailscale here) To that end, we started publishing a "blueprint" for people who want to DIY. There's more to explain (and questions encouraged). Please check it out: https://tailscale.com/blog/how-tailscale-works/

Re: Tailscale has reached general availability

#43

Post by apenwarr »

bgentry wrote: post #34
apenwarr wrote: post #25

Earlier quoted context omitted.

I really love the privacy- and security-centric design of Sign In with Apple, but so far it only works if you have Apple hardware, right? Tailscale's selling point is you can use it on all your devices (modulo Android support which isn't released yet).

Quoting from the page linked above: Sign in with Apple works natively on iOS, macOS, tvOS, and watchOS. And it works in any browser, which means you can deploy it on your website and in versions of your apps running on other platforms. So it at least sounds like it can be used anywhere with a web login flow. Although the docs say this must be accomplished using their JS library, as opposed to a standard OAuth2 flow o…

Cool! Maybe it's more doable than we thought.

Re: Tailscale has reached general availability

#44

Post by camgunz »

armaxt wrote: post #10

I will get banned for this in a matter of minutes but I will say the truth to whoever think HN is fair. For the past 3 months, every, again EVERY post that was linked to Tailscale (not just the company domain but also the blog posts of the founders' websites), has gotten to the frontpage within minutes, with a full 100% hit rate. This cannot happen for any company, any project or anything else to be honest since ther…

Eh, as a datapoint in the other column, I'm genuinely interested in whatever bradfitz and apenwarr are working on. It could just be general fame.

Re: Tailscale has reached general availability

#46

Post by apenwarr »

dstaley wrote: post #38
bradfitz wrote: post #18

Earlier quoted context omitted.

(also Tailscale) FWIW, we'll probably also be supporting GitHub (and maybe Twitter?) auth, as well as perhaps letting you run your own auth server if you set up the right DNS records. Lot of things yet to do.

Super excited to see that you'll be supporting GitHub! That being said, do you have plans to implement any sort of account merging? For example, the ability to login with one of multiple authorized accounts (so my Google Account, my Twitter account, or my GitHub account).

(Tailscale co-founder) This question goes through my mind a lot. I personally want it for myself. However there's a "weakest link" problem in identity management: if you have N identity managers merged together, then your account is only as secure as the weakest one of them. So connecting multiple identity providers to one account might be risky.

On the other hand, I really like Keybase's way of federating multiple identities together, where each additional identity provider increases rather than decreases confidence.

Re: Tailscale has reached general availability

#47

Post by armaxt »

kyrra wrote: post #41
armaxt wrote: post #10

I will get banned for this in a matter of minutes but I will say the truth to whoever think HN is fair. For the past 3 months, every, again EVERY post that was linked to Tailscale (not just the company domain but also the blog posts of the founders' websites), has gotten to the frontpage within minutes, with a full 100% hit rate. This cannot happen for any company, any project or anything else to be honest since ther…

My guess? The people involved at Tailscale. Two of the founders (Avery Pennarun and David Crawshaw) are former Googler's that had a lot of respect within the company (I loved both of their G+ posts internally). Brad Fitzpatrick also recently joined them. They are then building the security model that Google uses[0], but trying to get it to other companies. I think the concept of BeyondCorp is pretty amazing and a gre…

Again, my argument is simple, how can EVERY post about any certain thing (not just for a _for-profit_ company like Tailscale but in general) can go to the frontpage within the first minutes every time for more than 10 times in a row over the short course of the past 3 months in a website that has the reputation of near impossibility to have your post on the frontpage even once except maybe for SHOW HN threads and where a flood of new threads gets posted every 10 minutes and almost every post gets buried immediately without getting a single upvote even if it was very well written.

Re: Tailscale has reached general availability

#48

Post by mattbee »

symplee wrote: post #36
armaxt wrote: post #10

I will get banned for this in a matter of minutes but I will say the truth to whoever think HN is fair. For the past 3 months, every, again EVERY post that was linked to Tailscale (not just the company domain but also the blog posts of the founders' websites), has gotten to the frontpage within minutes, with a full 100% hit rate. This cannot happen for any company, any project or anything else to be honest since ther…

Should the list of who upvotes an article be public? When I make a comment, my username is displayed. If upvotes and their timestamps were public, it would make it a lot easier for the community to get to the bottom of any funny business like OP is describing.

What alterations could HN make to the front page weighting algorithm that tries to spot and penalise voting rings?

e.g. if you're someone who routinely upvotes posts within minutes, maybe your vote could count for less than an account that only dips in to the new page occasionally?

Or maybe your vote gets penalised if it's your only upvote in a 24 hour period?

Or maybe HN keeps track of who you upvote with, and your vote gets penalised the more you upvote with the same people?

idk, it sounds like a fun project for someone if HN wanted a more organic front page.

Re: Tailscale has reached general availability

#49

Post by api »

TechBro8615 wrote: post #37
symplee wrote: post #36

Earlier quoted context omitted.

Should the list of who upvotes an article be public? When I make a comment, my username is displayed. If upvotes and their timestamps were public, it would make it a lot easier for the community to get to the bottom of any funny business like OP is describing.

This is a great idea, but will never happen because all the YC founders would be against it for obvious reasons. EDIT: Slightly altering it a bit. What if only the first 50 upvotes were public?

Everyone knows the site is partial to YC companies. It's an open secret. I consider it part of the "trade" in exchange for running a decent board without any ads or surveillance monetization. They're doing this for a reason, and it's to pump their brand.

Hell they could just tag articles related to YC companies with a special color and pin them for a bit. I'd be fine with that.

Re: Tailscale has reached general availability

#50

Post by jedieaston »

I don't know if it's really ready without what they're calling "magic DNS": https://tailscale.com/kb/1054/dns

Something that bugs me about ZeroTier is also present here, which is that there's no name management whatsoever, so I have to either keep a hosts file around with all the names of the network or find a script on GitHub that does it for me (or put a DNS server on the Tailscale network, and make sure all the hosts have records on there manually since there isn't a way to automatically integrate it with the hostnames that Tailscale already logs). Or, of course, use public records and pray you don't have more than a couple services because who wants to log in to the domain host every time you bring up a new container?

Half the magic of BeyondCorp (which I'm a big believer in) is that it's invisible from an end user perspective. I open a browser, go to git.corp.planeteaston.com, and it works, not "let's go to gitlab... it didn't resolve. what was the IP address again? 192.168.10-oh, wait, I'm offsite, the address is different, let's go see what it is in the Tailscale console", and a tech person could figure that out, maybe, never mind a computer-illiterate person in another department that was just told "go home, coronavirus, take your laptop".

This isn't a knock, since the main competitor, ZeroTier, doesn't have a great solution for DNS either besides run a DNS server, but whoever cracks it will probably win this race. And it's almost worse for ZeroTier, which by default (at least when I started using it 2-ish years ago), wanted you to use IPv6 addresses by default that there was no chance of you memorizing. I'll be a customer when this works!

Post reply on HN