Post

dish
@pyrox.dev

Pretty sure this is all bunk. Requiring auth? Pointing out that if you use a malicious relay, it can act maliciously against you? ditto for app connectors? I fail to see how any of this is security-critical at all. Try harder, please. Sick of this kinda slop

Cyberdione Labs@cyberdione.bsky.social

Our researchers have discovered vulnerabilities in the open source Tailscale software. These have been reported upstream. Take the appropriate precautions. Our primary recommendation is to disable the "tailscale ssh" feature and App Connectors. www.tailworm.com

dish
@pyrox.dev

Also no kidding your document is dense, it takes me a minute per sentance because your LLM put 50 buzzwords in every section. Lighten up on the jargon, please, and don't claudeslop a website. Made my head genuinely hurt to read, haven't had a website do that in a while.

dish
@pyrox.dev

Also I haven't confirmed, but apparently some of these exploits require insecure non-default configs. In which case, not a great look to not disclose that clearly upfront.

0 reposts3 likes

No replies yet.