Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Tailscale raises $100M

tailscale.com

Post reply on HN
Print view View original

451–460 of 468 posts

Re: Tailscale raises $100M

#451

Post by prepend »

nicknow wrote: post #393
prepend wrote: post #219

Earlier quoted context omitted.

I think they changed from their mission to make password management easy and secure to extracting service fees forever. I don’t necessarily blame them but think their decision was pushed along by the need for big money. For example, I think they’d still be able to do the pay once model if they abstracted they storage to work with Dropbox/icloud/OneDrive/whatever. There’s really no value add as a user for a monthly fe…

> For example, I think they’d still be able to do the pay once model if they abstracted they storage to work with Dropbox/icloud/OneDrive/whatever. I get why they don't but I often wish more SaaS companies had a bring your own computer & storage model. It doesn't make sense for 95% of customers and the 5% of us who might like it and have the tech chops to use it would just complain about having to pay more because we…

It makes sense because they make less money that way. It seems like they have some cognitive dissonance where they try to explain their SaaS fee because of the “features” that require SaaS. If they supported bring your own storage then that cuts out the main reason for the SaaS fees.

Also sad because bring your own storage is more secure to me than trusting a company with all of my passwords. So they are reducing security and increasing price.

Re: Tailscale raises $100M

#452

Post by Sohcahtoa82 »

O_H_E wrote: post #416
Sohcahtoa82 wrote: post #366

Earlier quoted context omitted.

I have the PiHole VPN configured so that only DNS lookups go through it. All other traffic is not tunneled. It means I don't get billed for several gigabytes of traffic from AWS and my traffic doesn't come from an AWS IP, but I still get all the ad-blocking benefits of a PiHole. At home on my desktop, I just use uBlock Origin in my browser.

oh wow that is cool. I have never heard or thought about putting a pi-hole in the cloud.

It made more sense to me for using a PiHole on my phone. I didn't want to expose a VPN port on my home network, and didn't want to deal with trying to tunnel VPN through SSH.

And the EC2 instance I installed it on was already being used for other toy projects, so it's not like it cost me anything. The additional egress bandwidth is likely fractions of a penny.

Re: Tailscale raises $100M

#453

Post by [deleted] »

web007 wrote: post #180
arsome wrote: post #124

I was going to try TailScale but then it seemed the only option to do so as an individual was to login with a 3rd party cloud provider, which I in no way want tied into my networks. I gave up and just setup wireguard directly instead, I don't trust Tailscale either if that's their attitude towards privacy, it's permanently marred my vision of their product.

Your personal dislike of cloud SSO is not the same as "their attitude towards privacy". Before you do anything "permanently" you should read their reasoning behind that decision: https://tailscale.com/kb/1013/sso-providers/ > Tailscale works on top of the SSO/IDP/IAM identity provider you or your company already use. > We don’t support sign-up with email addresses. By design, Tailscale is not an identity provider: th…

[deleted]

Re: Tailscale raises $100M

#454

Post by qrkourier »

dovholuknf wrote: post #437
nickysielicki wrote: post #111

Tailscale has a fantastic product, I’ve been extremely happy from day one. If you’re waiting for a weekend to have a few hours to try out Tailscale, don’t, it takes 15 minutes to get every device you own up and running and talking. This is the lowest friction personal VPN to ever exist, and once you see how easy it is for your own devices, you’ll wish you had it at work. The biggest risk that this company has is that…

You don't need to dream about it. You can absolutely do this today with OpenZiti. You just need to be able to set it up which is - imo (I am a dev on the project and wrote the quickstarts) just as easy to get up and running as anything. I do it in "under a minute" but I work on the project so my timing is not fair... :) You can find information about it over at https://openziti.github.io/ you don't even need to trust…

I guess it's like anything else. You can trust someone a little to manage your crypto keys or you can do it yourself whether its PKI or a Bitcoin wallet. You have to know and do more to trust less. For me, it's a really great value if software makes DiY crypto convenient enough to do crypto stuff safely enough that I don't have to trust or pay a 3rd party and don't end up wrecked because I got in over my head. Like bowling bumpers, but for cryptography.

Re: Tailscale raises $100M

#455

Post by oicU00 »

samhw wrote: post #306
oicU00 wrote: post #165

Earlier quoted context omitted.

If they can do it it’s not impossible (they’re just people after all). With an open source implementation out there, anyone can do it merely pulling a Docker container, and without paying Tailscale. Regardless I manage a dozen users with no issue using Embarks container; once they’re setup I touch nothing. Paying people is not working with people; it’s working with a specific group. Open source is working with people…

If the open source implementation is equally good, I'm sure people will use that instead of Tailscale. That Tailscale exists makes me suspect that the open source implementation - as is usually the case with these "just use curlftpfs!" comments – is not equally good. The reality is that making software, like any other human endeavour, takes time and energy. Paying one another money is a rather well-established mechan…

If agency to make a thing must be purchased the long term viability of the thing is suspect. The work becomes about payments not the thing.

If it’s a real human problem, humans will solve it. If it’s instigated due to someone with coins in their pocket to mesmerize lizard brains, it’s a synthetic solution that will vanish with the synthetic driver of the work; payments.

Just because paying for things is common throughout history does not mean it’s necessary or the best choice long term; see Netflix propping up payment flows churning out crap. It means meat based tape recorders simply LARP the past.

Re: Tailscale raises $100M

#457

Post by oicU00 »

samhw wrote: post #399
shepherdjerred wrote: post #353

Earlier quoted context omitted.

It's the same argument as the famous Dropbox comment[0]. I'm generally going to prefer a polished service over a technical solution. [0]: https://news.ycombinator.com/item?id=9224

Haha, yup, that's what I was quoting in my comment ("just use curlftpfs!").

Apples and oranges

A fully functional web app in a Docker image is what wg-ui is.

Web companies could probably just provide API keys for customers at this point and abandon UX teams.

Re: Tailscale raises $100M

#458

Post by CMCDragonkai »

dovholuknf wrote: post #437
nickysielicki wrote: post #111

Tailscale has a fantastic product, I’ve been extremely happy from day one. If you’re waiting for a weekend to have a few hours to try out Tailscale, don’t, it takes 15 minutes to get every device you own up and running and talking. This is the lowest friction personal VPN to ever exist, and once you see how easy it is for your own devices, you’ll wish you had it at work. The biggest risk that this company has is that…

You don't need to dream about it. You can absolutely do this today with OpenZiti. You just need to be able to set it up which is - imo (I am a dev on the project and wrote the quickstarts) just as easy to get up and running as anything. I do it in "under a minute" but I work on the project so my timing is not fair... :) You can find information about it over at https://openziti.github.io/ you don't even need to trust…

You said you can embed this in an application? What does that mean? Is this a C library that is embeddable?

Re: Tailscale raises $100M

#459

Post by PLG88 »

GekkePrutser wrote: post #449
PLG88 wrote: post #430

Earlier quoted context omitted.

Here is another (sort of), OpenZiti - https://openziti.github.io/ . OpenZiti provides a mesh overlay network built on zero trust priinciples with outbound only connections so that we do not need inbound ports or link listeners. Similar to TS, you can host anything anywhere and has options to deploy on any popular host OS or as a virtual appliance. What makes it realluy unique though is that it can actually be embedde…

All the solutions I mentioned are outbound only (for the clients), though they do all have a central point which is open for inbound connections so they can find each other. Or in some cases their own cloud serves this purpose. They call them lighthouses, Moons, etc but the principle is the same. The embedding inside an app sounds like a really cool discerning feature though. I'll have a look!

Yes, outbound only is great for client side and for me table stakes. OpenZiti allows you to make the server side outbound only too. Do you care about Log4Shell or Spring4Shell when your server is dark to the internet? Java Magazine recently did a piece on it as the OpenZiti team 'zitified Springboot' - https://blogs.oracle.com/javamagazine/post/java-zero-trust-o.... We also recently zitified Prometheus - https://openziti.github.io/articles/zitification/prometheus/...... private, outbound-only connectivity natively part of the code.

Re: Tailscale raises $100M

#460

Post by PLG88 »

CMCDragonkai wrote: post #458
dovholuknf wrote: post #437

Earlier quoted context omitted.

You don't need to dream about it. You can absolutely do this today with OpenZiti. You just need to be able to set it up which is - imo (I am a dev on the project and wrote the quickstarts) just as easy to get up and running as anything. I do it in "under a minute" but I work on the project so my timing is not fair... :) You can find information about it over at https://openziti.github.io/ you don't even need to trust…

You said you can embed this in an application? What does that mean? Is this a C library that is embeddable?

You can literally embed private, outbound-only connectivity into your application code using one of the many SDKs - C, Java, Go etc etc... here is a good overview https://ziti.dev/. As you can embed inside you app, you can now build 'zitifications' which is apps which have native, private connectivity embedded both client or server side.

Here are a couple of cool artciles on some we have already done: - Springboot framework: https://blogs.oracle.com/javamagazine/post/java-zero-trust-o... - Prometheus: https://openziti.github.io/articles/zitification/prometheus/...

Post reply on HN