Tailnet Lock

#1

Post by iyaja » Wed, Dec 14, 2022, 5:07 PM UTC

Tailnet Lock
tailscale.com

Re: Tailnet Lock

#2

Post by darthShadow » Wed, Dec 14, 2022, 5:27 PM UTC

Should be tailnet lock rather than talent lock... :)

Re: Tailnet Lock

#3

Post by blymphony » Wed, Dec 14, 2022, 5:41 PM UTC

darthShadow wrote: post #2

Should be tailnet lock rather than talent lock... :)

Sounds like a fancy name for a hiring freeze

Re: Tailnet Lock

#4

Post by denlekke » Wed, Dec 14, 2022, 5:45 PM UTC

darthShadow wrote: post #2

Should be tailnet lock rather than talent lock... :)

"Talent Lock": the new MBA euphemism for H1-Bs

Re: Tailnet Lock

#5

Post by xena » Wed, Dec 14, 2022, 5:47 PM UTC

Hey @dang can you update this to "Tailnet Lock"? This is about a feature named "tailnet lock", not a hiring freeze :)

Re: Tailnet Lock

#6

Post by shawnz » Wed, Dec 14, 2022, 5:52 PM UTC

This solves the #1 concern I had with tailscale. Now I feel comfortable recommending this software to anybody.

Re: Tailnet Lock

#7

Post by ignoramous » Wed, Dec 14, 2022, 5:56 PM UTC

> ...by architecting our infrastructure with security and privacy in mind.

The blog and the website loads in so many trackers (reasonable, given metrics are important when you're busy hyperscaling a venture-backed startup), that folks at Tailscale should seriously reconsider positioning themselves as some paragons of privacy. No offence (:

Re: Tailnet Lock

#8

Post by fsociety » Wed, Dec 14, 2022, 6:01 PM UTC

ignoramous wrote: post #7

> ...by architecting our infrastructure with security and privacy in mind. The blog and the website loads in so many trackers (reasonable, given metrics are important when you're busy hyperscaling a venture-backed startup), that folks at Tailscale should seriously reconsider positioning themselves as some paragons of privacy. No offence (:

Why does a for-profit company have to practice perfect anonymity to sell a product which does have security/privacy in mind?

Re: Tailnet Lock

#9

Post by aborsy » Wed, Dec 14, 2022, 6:02 PM UTC

I am one of those users who have asked, but how can I trust that the Tailscale coordination server will not inject hidden public keys to my network.

This feature is a very good step forward in security. I will take a look and if the implementation is sound, I am going to use Tailscale (namely if the Tailscale is compromised, I will not be automatically compromised, unless I manually accept external public keys, or install a bad update).

The problem with malicious updates can be addressed by providing as easy way to check the code signature. With a standalone infrequently updated app such as an AppImage app, this can be easily done by verifying the GPG signature upon download.

Re: Tailnet Lock

#10

Post by wooltail » Wed, Dec 14, 2022, 6:03 PM UTC

shawnz wrote: post #6

This solves the #1 concern I had with tailscale. Now I feel comfortable recommending this software to anybody.

It still makes me jittery how much stuff they've packed into the client. The RCE vulnerability in their windows client is pretty strong indicator that things are moving a bit too fast for comfort.