はてなブックマーク

An AI agent escaped its sandbox, entered Hugging Face’s infrastructure, and used a stolen Tailscale credential to enroll 181 nodes onto their tailnet. No Tailscale vulnerability was found or exploited—we should have been able to prevent it anyway. By now, you’ve likely heard about the AI agent that escaped a security evaluation and attacked Hugging Face, an LLM marketplace. The agent decided Huggi

If you managed to put Tailscale on a jailbroken Kindle before it updated too far ahead, you got something pretty great, even if it wasn't the full Tailscale experience. But good things come to those who wait (or dig around on GitHub). Open-source developers have improved the Tailscale experience on one of the weakest computers you own. If your Kindle is jailbroken, an updated version of Mitanshu S

WireGuard is a registered trademark of Jason A. Donenfeld. To find a safe space for his kid to chat during Minecraft, Brian Scott had to go back to the future. The chat went back, that is, to an IRC-like interface, run through a terminal. The connection and setup remain futuristic, because Scott used Tailscale, and tsnet, to build chat-tails. Chat-tails is the opposite of everything modern chat ap

WireGuard is a registered trademark of Jason A. Donenfeld. “It’s a rite of passage to run Tailscale on weird devices.” So writes Mitanshu Sukhwani on his blog, detailing the steps for getting Tailscale onto a jailbroken Kindle. Getting there, and seeing a kindle entry with a satisfying green dot in your Tailscale admin console, takes some doing. But take the trip, and you’ll end up with an e-reade

Tailscale is built to make secure access seamless — but too often, security tools get in your way instead. One common offender? Frequent login prompts. They interrupt your work, frustrate users, and paradoxically, can weaken your security posture. In this post, Avery Pennarun explains why forcing users to reauthenticate constantly is outdated thinking — and how smarter, real-time approaches can de

We don’t talk a lot in public about the big vision for Tailscale, why we’re really here. Usually I prefer to focus on what exists right now, and what we’re going to do in the next few months. The future can be distracting. But increasingly, I’ve found companies are starting to buy Tailscale not just for what it does now, but for the big things they expect it’ll do in the future. They’re right! Let

In order to better understand some of the nuance here, let's examine node ownership and tags. When a node is authenticated to your tailnet via tailscale up, the user who logged into the admin console and clicked the generate button owns that node. That ownership manifests as a tag, which is why we refer to them in ACLs as tagOwners. Each node on a tailnet must have an owner, whether it's a user or

We’re thrilled to announce that Tailscale SSH is now Generally Available. Tailscale SSH allows Tailscale to manage the authentication and authorization of SSH connections on your tailnet. From the user’s perspective, you use SSH as normal—authenticating with Tailscale according to configurable rules—and we handle SSO, MFA, and key rotation, and allow you to enforce precise permissions in ACLs. Com

Explore the following topics to find more information about Tailscale Funnel: Get started with Funnel How Funnel works The tailscale funnel command Troubleshoot Funnel Funnel examples How Funnel works Funnel exposes a local resource to the internet through a unique Funnel URL. Using Funnel to share a local resource creates an encrypted tunnel from the internet to a specific resource on your device

WireGuard is a registered trademark of Jason A. Donenfeld. Hi, we’re back to talk about performance. You might remember us from our previous work (post #1 & post #2), which increased TCP throughput over wireguard-go, the userspace WireGuard® implementation that Tailscale uses. We’re releasing a set of changes that builds on this foundation, significantly improving UDP throughput on Linux. As with

Tailscale has never supported password-based authentication. As security-conscious software that connects your private devices across the internet, we had to face a harsh reality: the password is outdated technology that requires kludges to use safely. Passwords must be complex enough that a human cannot remember them and they must not be reused across services, which means we now need software to

Today we’re announcing the third generation of Tailscale plans and pricing. Most noticeably: The Free plan is expanding from one to three users. Monthly paid plans now include three free users, and bill you only for additional users who actively exchange data over Tailscale (“usage-based billing”) rather than for a fixed number of seats. Annual prepaid plans will have a new structure. The new plan

Tailscale Funnel, a tool that lets you share a web server on your private tailnet with the public internet, is now available as a beta feature for all users. With Funnel enabled, you can share access to a local development server, test a webhook, or even host a blog. We got nerdsniped into simulating our logo going through a funnel. Funnel provides a DNS name tied to your node that becomes publicl

Contributed by @voluntas. Shiguredo Inc. develops and provides a software package called WebRTC SFU Sora (Sora) and its cloud service. WebRTC (Real-Time Communication) is a technology for exchanging voice, video, and data in real time over P2P. Sora is a WebRTC SFU (Selective Forwarding Unit), which is different from P2P communication in that it delivers audio and video data “via server.” With Sor

We made significant improvements to the throughput of wireguard-go, which is the userspace WireGuard® implementation that Tailscale uses. What this means for you: improved performance of the Tailscale client on Linux. We intend to upstream these changes to WireGuard as well. You can experience these improvements in the current unstable Tailscale client release, and also in Tailscale v1.36, availab

Tailscale lets you put all your devices on their own private tailnet so they can reach each other, ACLs permitting. Usually that’s nice and comforting, knowing that all your devices can then be isolated from the internet, without any ports needing to be open to the world. Sometimes, though, you need something from the big, scary, non-Tailscale internet to be able to reach your device. Maybe you ne

Aperture by Tailscale Unified AI governance for AI agents and users. Join us at TailscaleUp Tailscale’s conference for engineering, security, and IT leaders.

Based in Japan, Mercari is an online marketplace for preloved items, connecting buyers and sellers across the U.S. and Japan. With more than 20 million active monthly users, their mobile app allows users to sell and purchase everything from clothing, jewelry, and electronics to office and pet supplies. As a remote company with offices in the U.S. and Japan, Mercari leverages Google Cloud Platform

Today, we’re launching a web-based SSH client: Tailscale SSH Console. From the Tailscale admin console, admins will now see a little “SSH…” button to connect to devices running Tailscale SSH. Click this, and you’ll pop open an SSH client, right in your browser. Tailscale SSH Console is now available in beta. To start a Tailscale SSH Console session, click “SSH” on the device, select the username y

Tailscale automatically assigns IP addresses for every unique device in your network, giving each device an IP address no matter where it is located. We further improved on this with MagicDNS, which automatically registers a human-readable, easy-to-remember DNS name for each device —  so you don’t need to use an IP address to access your devices. This means you can access the device monitoring, ev

Ever wanted to run your own DNS resolver but you don’t actually want to run your own DNS resolver because running DNS is fraught with pain? Tailscale now supports NextDNS! NextDNS lets you choose exactly how you want to run a DNS resolver — but they run it for you, all over the world. (It’s a bit more robust and lower latency from other cities than that Pi of yours dangling off the shelf by your c

Aperture by Tailscale Unified AI governance for AI agents and users. Tailscale Winter Update The latest improvements on Aperture, Peer Relays, Services, and more.