Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Golink: A private shortlink service for tailnets

github.com

Post reply on HN
Print view View original

41–50 of 84 posts

Re: Golink: A private shortlink service for tailnets

#41

Post by sph »

CommitSyn wrote: post #37
bpanon wrote: post #35

A few weeks back, I installed Tailscale on a Friday and the following Sunday my machine (ubuntu 22.10) was hacked and running mining/tracking software and rsyslog. I only noticed because my fans were spinning harder than usual. caveat emptor

Ouch. CVE-2022-41924 Severe 9.6 A vulnerability identified in the Tailscale Windows client allows a malicious website to reconfigure the Tailscale daemon `tailscaled`, which can then be used to remotely execute code. In the Tailscale Windows client, the local API was bound to a local TCP socket, and communicated with the Windows client GUI in cleartext with no Host header verification. This allowed an attacker-contro…

That is pretty bad. How the heck can a page in a browser send requests to a listening socket on my machine, bound to 127.0.0.1?

Also how does an attacker "rebind DNS"? What does this even mean?

EDIT: more details here: https://emily.id.au/tailscale

Re: Golink: A private shortlink service for tailnets

#42

Post by fragmede »

CommitSyn wrote: post #36
jhoechtl wrote: post #16

I started reading bout tailnet and still have no clue what it is

I was thinking about asking here if anyone could give a brief yet full overview of what exactly tailscale is and who/how it benefits. I've read about it, but I still don't get it.

Assume all your machines have Internet access, which they probably do these days. Instead of having to create firewall rules and routes and that whole mess in order to connect to a machine on "the inside" somewhere, the machine reaches out to the Internet and creates a tunnel, and you connect to the machine through that tunnel.

Re: Golink: A private shortlink service for tailnets

#43

Post by mackrevinack »

CommitSyn wrote: post #36
jhoechtl wrote: post #16

I started reading bout tailnet and still have no clue what it is

I was thinking about asking here if anyone could give a brief yet full overview of what exactly tailscale is and who/how it benefits. I've read about it, but I still don't get it.

i use it to access my NAS/network drive when im away from home.

when im at home i can access it no problem since im connected to my home network and so is the NAS. when im away its not possible to connect to it because im on a completely different network.

with tailscale installed on each device makes it seem like im still on my home network even when im away.

Re: Golink: A private shortlink service for tailnets

#44

Post by matthewmacleod »

bpanon wrote: post #35

A few weeks back, I installed Tailscale on a Friday and the following Sunday my machine (ubuntu 22.10) was hacked and running mining/tracking software and rsyslog. I only noticed because my fans were spinning harder than usual. caveat emptor

Do you feel that your being “hacked” was somehow a result of your using Tailscale? I mean, that’s the obvious implication.

Re: Golink: A private shortlink service for tailnets

#45

Post by joatmon-snoo »

This made me wonder what the oldest go-link (from inside Google) discoverable on the public internet is. The earliest I've found is from Nov 2009: https://github.com/google/closure-library/blame/11ed104958a2.... (The second closest I've found in another repo is in RE2 from Mar 2010, https://github.com/google/re2/blame/954656f47fe8fb505d4818da... - and yes, both of these existed prior to the listed date, but I'm going off associated timestamps.)

(Fun fact: go-links are so critical to Google ops, that they're expected to be accessible in a "everything is down" scenario.)

Re: Golink: A private shortlink service for tailnets

#46

Post by fragmede »

arianvanp wrote: post #40
CommitSyn wrote: post #37

Earlier quoted context omitted.

Ouch. CVE-2022-41924 Severe 9.6 A vulnerability identified in the Tailscale Windows client allows a malicious website to reconfigure the Tailscale daemon `tailscaled`, which can then be used to remotely execute code. In the Tailscale Windows client, the local API was bound to a local TCP socket, and communicated with the Windows client GUI in cleartext with no Host header verification. This allowed an attacker-contro…

Only affected Windows though. The user is on ubuntu

but given what Tailscale does, lateral movement street compromising a windows host in the network seems entirely possible.

Re: Golink: A private shortlink service for tailnets

#47

Post by aaaa4444 »

mackrevinack wrote: post #43
CommitSyn wrote: post #36

Earlier quoted context omitted.

I was thinking about asking here if anyone could give a brief yet full overview of what exactly tailscale is and who/how it benefits. I've read about it, but I still don't get it.

i use it to access my NAS/network drive when im away from home. when im at home i can access it no problem since im connected to my home network and so is the NAS. when im away its not possible to connect to it because im on a completely different network. with tailscale installed on each device makes it seem like im still on my home network even when im away.

So its a bit like a VPN? Except that you can join specific devices from a multitude of networks?

Re: Golink: A private shortlink service for tailnets

#48

Post by cmsj »

elromulous wrote: post #32
leetrout wrote: post #2

This is great. I love go links ever since knorton turned me on to them. I will give this a spin first thing in the morning.

Is knorton some combination of Knuth and Norton antivirus?

I would never run Norton, but if it was combined with Knuth... that's a strong maybe.

Re: Golink: A private shortlink service for tailnets

#50

Post by petercooper »

jhoechtl wrote: post #16

I started reading bout tailnet and still have no clue what it is

It's a term they've had to invent because the term "VPN" has been twisted into being synonymous with "proxy server" nowadays, but really a tailnet is a VPN (not a proxy!)

A tailnet is a true "virtual private network" in the sense that it's a non-physically defined network to which which numerous devices can connect and see each other directly. The underlying physical network, a layer below, is (mostly) irrelevant to the operation of this network, and that's the part that's beautiful about Tailscale's implementation in particular. You could have a Pi Zero in your garage, a VPS in Australia, and your laptop in New York all joining the same private network ('tailnet') and interact as if they were on the same local physical network (in most respects).

Post reply on HN