Tailscale SSH vulnerabilities from the Tailworm report: Findings, response timeline, security bulletins, and fixes in Tailscale v1.104.4.
Tailworm
The design choices of the open source tailscale and headscale software have created an environment ripe for risk, while marketing security as its design and purpose. Choices have been made to move away from security-in-depth, removing layers of authentication, and replacing daemons such as OpenSSH which employ privilege-separation with a highly-privileged process. Other findings include broader-than-advertised network security boundaries, which seems to be legitimate bugs, but the missing security and isolation is precisely what users are advertised by these tools.
Tailscale Services
Securely connect to and manage access to your internal resources using Tailscale Services.
Tailscale | Secure Connectivity for AI, IoT & Multi-Cloud
The connectivity platform for devs, IT, and security teams. Zero Trust identity-based access that deploys in minutes and scales to every resource. Start free.
Digging into how Tailscale encrypts its state file on Windows, Apple, and Linux
Tailscale's latest version encrypts more data at rest, making it harder for attackers to potentially clone your nodes. Here's how it works.
How Tailscale is improving NAT traversal (part 1)
Updates on Tailscale's efforts to improve NAT traversal, for its client and for the web at large.
Tailscale Funnel
Securely route internet traffic to local services using Tailscale Funnel.
tailmox v1.2.0 is ready
103 votes, 15 comments. With this version, `tailscale serve` is used which helps to decouple Tailscale from Proxmox as the certificate no longer…
The Tailscale node you mail to your parents
Securely connect to anything on the internet with Tailscale. Built on WireGuard®️, Tailscale enables you to make finely configurable connections, secured end-to-end according to zero trust principles, between any resources on any infrastructure.
Tailscale: How it works
Understand the entire Tailscale system, how it works, how we built it, and its benefits compared to legacy VPNs. Use this article as a guide to quickly build your own Tailscale replacement.
The best ways to use Tailscale for sharing with friends and family
Using Tailscale's sharing features to make files, self-hosted services, and exit nodes available to your inner circle.
Tailscale in the Hugging Face intrusion: The good news and the bad news
An AI agent used a stolen Tailscale auth key at Hugging Face. Workload identity federation, flow logs, and safer defaults could have reduced the risk.
We're making Tailscale faster
Tailscale performance updates reduce memory use, increase throughput, and speed startup with multi-queue, writev, and netmap caching.
Goodbye SSO Tax: How Tailscale Made SSO Free for Everyone
Tailscale eliminates the SSO tax, making all OIDC-compliant SSO identity providers free across every plan. Learn why security shouldn’t be a luxury and how this change aligns with Tailscale’s mission to build a secure internet for everyone.