Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Tailscale raises $100M

tailscale.com

Post reply on HN
Print view View original

461–468 of 468 posts

Re: Tailscale raises $100M

#461

Post by vineyardmike »

apitman wrote: post #365
vineyardmike wrote: post #343

Earlier quoted context omitted.

But you can also try to get them to be Tailscale users and effortlessly share the devices with access control features they built. I share my home servers and game servers with family/friends easily while still keeping everything off the public internet.

But now your friends and family are locked into a proprietary system, subject to whatever the future incentives of Tailscale end up being. How many people can you connect on the free plan?

Yea, but my friends and family would rather have a service that just works, has apps, etc instead of an open one. Tailscale is a good actor ~for now~ and ~for now~ thats good enough for us. Not everyday in every situation can I be an activist. I have a list of alternatives incl FOSS ones should I need, but I'll cross that bridge only if I need to, since this JustWorks.

You can connect one person on a free plan, but each person can have their own free plan that you share devices between.

Re: Tailscale raises $100M

#462

Post by discardedrefuse »

benoliver999 wrote: post #423
discardedrefuse wrote: post #410

Earlier quoted context omitted.

I had looked at this. It doesn't seem like they've implemented anything to handle firewall rules. They may not even be able to, seeing as how that part of ZT is closed source. Also, this doesn't solve the problem with mobile apps, so the whole thing was a moot point for me.

The mobile app does work with the self hosted option, we use it at work.

The official ZT docs* say, "The mobile apps don't support custom roots." And I don't see any setting in the Android app to point it to any server.

* https://docs.zerotier.com/self-hosting/introduction

Re: Tailscale raises $100M

#463

Post by samhw »

skinnymuch wrote: post #370
samhw wrote: post #301

Earlier quoted context omitted.

I dunno, but you ought to figure it out (for your business) before you make that offer!

Why? 1PW is succeeding. They didn’t do some huge moral quandary either that would make stopping the one time buying product a moral failing. People like the first commenter and myself have used 1PW for many years too and are fine with what has gone down. Vs a clear moral screw up like the big tech companies colluding to not hire one another’s employees.

If they said "buy once, get upgrades forever" and didn't provide that, then yeah, that's definitely a very plain example of immoral dealing. The future service is exactly what the purchasers were buying - not a nice-to-have add-on.

Re: Tailscale raises $100M

#464

Post by GekkePrutser »

PLG88 wrote: post #459
GekkePrutser wrote: post #449

Earlier quoted context omitted.

All the solutions I mentioned are outbound only (for the clients), though they do all have a central point which is open for inbound connections so they can find each other. Or in some cases their own cloud serves this purpose. They call them lighthouses, Moons, etc but the principle is the same. The embedding inside an app sounds like a really cool discerning feature though. I'll have a look!

Yes, outbound only is great for client side and for me table stakes. OpenZiti allows you to make the server side outbound only too. Do you care about Log4Shell or Spring4Shell when your server is dark to the internet? Java Magazine recently did a piece on it as the OpenZiti team 'zitified Springboot' - https://blogs.oracle.com/javamagazine/post/java-zero-trust-o... . We also recently zitified Prometheus - https://ope…

Oh that's interesting. But how do the server and clients manage to find one another then? Indeed an outbound-only server is a discerning feature and a huge security advantage.

I should really read up on it. I know... I will soon!

Re: Tailscale raises $100M

#465

Post by benoliver999 »

discardedrefuse wrote: post #462
benoliver999 wrote: post #423

Earlier quoted context omitted.

The mobile app does work with the self hosted option, we use it at work.

The official ZT docs* say, "The mobile apps don't support custom roots." And I don't see any setting in the Android app to point it to any server. * https://docs.zerotier.com/self-hosting/introduction

Ah, that's because we run a controller node not a root. So you just add an ID as normal.

The software linked in the parent works with the mobile apps.

Re: Tailscale raises $100M

#466

Post by qrkourier »

CMCDragonkai wrote: post #458
dovholuknf wrote: post #437

Earlier quoted context omitted.

You don't need to dream about it. You can absolutely do this today with OpenZiti. You just need to be able to set it up which is - imo (I am a dev on the project and wrote the quickstarts) just as easy to get up and running as anything. I do it in "under a minute" but I work on the project so my timing is not fair... :) You can find information about it over at https://openziti.github.io/ you don't even need to trust…

You said you can embed this in an application? What does that mean? Is this a C library that is embeddable?

Yes: https://github.com/openziti/ziti-sdk-c/

Re: Tailscale raises $100M

#467

Post by Groxx »

sleepybrett wrote: post #169
alberth wrote: post #49

Earlier quoted context omitted.

> I really like the direction [1Password] is heading I thought customers were complainingly loudly against their new direction of making 1Password an Electron app. Is that not the case? Note: I'm not a 1Password customer.

Removing the ability to use it in a non-saas (local vaults, vaults shared by other syncing solutions) capacity is what drove the final nail into the 1password coffin for me. I can't trust that they don't hold master keys to all the vaults on their saas offerings. The swap from native to electron on macos was hugely disappointing but something I could have probably lived with if they hadn't gone full saas no alternati…

Yep, ramming online vaults down everyone's throat is also what killed it for me. Since then I've gone from a massive supporter to recommending everyone look elsewhere.

Their online security-related UX is also a freaking nightmare. The desktop and mobile apps are excellent and still clearly the best, but yikes, their password plus secret uuid plus device identity is awful. I know multiple people who permanently lost everything thanks to that (remember, no local backups any more! That's what cloud storage almost always guarantees!), and they now push others away too.

I'm now a (relatively) happy KeePass user.

Re: Tailscale raises $100M

#468

Post by PLG88 »

GekkePrutser wrote: post #464
PLG88 wrote: post #459

Earlier quoted context omitted.

Yes, outbound only is great for client side and for me table stakes. OpenZiti allows you to make the server side outbound only too. Do you care about Log4Shell or Spring4Shell when your server is dark to the internet? Java Magazine recently did a piece on it as the OpenZiti team 'zitified Springboot' - https://blogs.oracle.com/javamagazine/post/java-zero-trust-o... . We also recently zitified Prometheus - https://ope…

Oh that's interesting. But how do the server and clients manage to find one another then? Indeed an outbound-only server is a discerning feature and a huge security advantage. I should really read up on it. I know... I will soon!

OpenZiti has an architecture of 'Edge' and 'fabric'. The Edge is at source and destinatation and outbound connects into the fabric. The fabric is SDN, edge connects and authenticates/authorises to controller based on embedded identity, then based on policy and rules, outbound connects to the data plane using smart routing over the mesh. The fabric only 'listens' for endpoints which have embedded, correct identity based on a process called 'bootstrapping trust' (there is a 5 part blog on this).

Clint and Ken did a really good ZitiTV on Friday which covered many of the cool superpowers of OpenZiti - https://www.youtube.com/watch?v=4wOGvZqN6Co&ab_channel=OpenZ...

Post reply on HN