







Like most folks working in infrastructure engineering in 2014, I really enjoyed Google’s BeyondCorp whitepaper. My foremost personal interest was grounded in the fact that Uber’s contemporaneous security implementation didn’t include a VPN, so it was interesting to see a well-thought description of fostering security without over-reliance on a hardened network for employee devices. I had a second, longer-term, personal interest as well, which was never again having to argue with a coworker about why they needed to log into the VPN before accessing a secure resource.
Creating the Internet Layer That Should Have Been With Avery Pennarun
Tailscale: How it works
Understand the entire Tailscale system, how it works, how we built it, and its benefits compared to legacy VPNs. Use this article as a guide to quickly build your own Tailscale replacement.

Tor VPN Beta: What we've learned building our own VPN for Android from scratch | Tor Project
Last fall, we soft-launched Tor VPN Beta as a way to extend Tor's privacy protections beyond the browser to an entire Android device. Since then, we've been able to learn from how people are actually using it in real-world scenarios. This post walks through what makes our per-app circuit isolation different from commercial VPNs, the surprising UX lesson when trying to bypass blocks, and the mobile foundation we're building for what's next.

How we built a lightweight identity provider using Tailscale's tools
How tsnet, application security grants, and Funnel combined to build a secure authorization app.

Top 5 Limitations of Google BeyondCorp | Twingate
Google BeyondCorp pioneered Zero Trust at scale—but it was built for Google. Here are the top 5 limitations for organizations trying to apply it themselves.

GREG ISENBERG on Twitter / X
I think the most interesting thing about Jack Dorsey's "Slack killer" is the idea around shared compute.I haven't seen people talk about it so here are my thoughts FWIW:Open models got good, close enough to the paid frontier stuff to run for real. But the strongest ones need… https://t.co/b5PBgYjAGL— GREG ISENBERG (@gregisenberg) July 25, 2026
What are the most indispensable books for indie hackers?
I asked over a dozen indie hackers for the one book they each find indispensable to bootstrapping a successful business. Check out their answers below....
Google’s Most-Hated Announcement Ever
Alex Komoroske (Common Tools)
Tailscale | Secure Connectivity for AI, IoT & Multi-Cloud
The connectivity platform for devs, IT, and security teams. Zero Trust identity-based access that deploys in minutes and scales to every resource. Start free.

Avery Pennarun on Tailscale's Evolution: From Mesh VPN to AI Security Gateway
Corey is the Chief Cloud Economist at Duckbill, where he specializes in helping companies improve their AWS bills by making them smaller and less horrifying. He also hosts the "Screaming in the Cloud" and "AWS Morning Brief" podcasts; and curates "Last Week in AWS," a weekly newsletter summarizing the latest in AWS news, blogs, and tools, sprinkled with snark and thoughtful analysis in roughly equal measure.

Tailworm
The design choices of the open source tailscale and headscale software have created an environment ripe for risk, while marketing security as its design and purpose. Choices have been made to move away from security-in-depth, removing layers of authentication, and replacing daemons such as OpenSSH which employ privilege-separation with a highly-privileged process. Other findings include broader-than-advertised network security boundaries, which seems to be legitimate bugs, but the missing security and isolation is precisely what users are advertised by these tools.
Tailscale Services
Securely connect to and manage access to your internal resources using Tailscale Services.

AI's Security Crisis: Why Your Assistant Might Betray You
Corey is the Chief Cloud Economist at Duckbill, where he specializes in helping companies improve their AWS bills by making them smaller and less horrifying. He also hosts the "Screaming in the Cloud" and "AWS Morning Brief" podcasts; and curates "Last Week in AWS," a weekly newsletter summarizing the latest in AWS news, blogs, and tools, sprinkled with snark and thoughtful analysis in roughly equal measure.

Open Source Startup: Why We Give Away All Our IP 🐝
Interview with Richard D. Bartlett, Loomio cofounder. Reposted with permission from Straight Up, a monthly startup resource that tackles…

We're getting close! atlogin.net is a start on the identity side, and we just launched declarative node sharing which lets you share groups of devices with arbitrary outside identities (without them joining your tailnet). tailscale.com/docs/features/declarative-nod…
ATLogin - OIDC for ATProto/Bluesky
atlogin.net