Tailscale got hacked recently as well, didnt they (?). I think they did, the whole system is poisoned, because I believe one of the vectors had to do with eMudhra certs, which again, is not an issue specific to them, or something they had any say on it... there is literally no escape these days it would seem.
replytailscale got hacked recently? sources?
replythey had a priviledge escalation vulnerability that requires the attacker to already be a part of the tailnet, and more specifically allows a user-to-root escalation devices the attacker can tailscale ssh to.
> Not trying to play down the vuln (its important), but its not a free-for-all RCE that some ppl are acting like it is. [1]
eMudhra/TLS certificates have nothing to do with this (?).
I think you've just explained why people rent infrastructure.
replyThis is probably correct if you aren’t a target at all, e.g. you aren’t running a business
reply