Tailscale bug allowed a person to share nodes from other tailnets to themselves

This page summarizes the projects mentioned and recommended in the original post on news.ycombinator.com

Our great sponsors
  • InfluxDB - Power Real-Time Data Analytics at Scale
  • WorkOS - The modern identity platform for B2B SaaS
  • SaaSHub - Software Alternatives and Reviews
  • headscale

    An open source, self-hosted implementation of the Tailscale control server

  • You can selfhost a server for tailscale clients if you feel extra tinfoil-hatty. I am doing it.

    https://github.com/juanfont/headscale

  • singularity

    A DNS rebinding attack framework. (by nccgroup)

  • Perhaps the biggest revelation from this is that Firefox doesn't implement rebinding protection, and that CGNAT DNS responses aren't dropped by most resolvers. Host validation is preferable anyway [1] but the second problem still has bad implications.

    1. https://github.com/nccgroup/singularity/wiki/Preventing-DNS-...

  • InfluxDB

    Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

    InfluxDB logo
  • wireguard-vyatta-ubnt

    WireGuard for Ubiquiti Devices

  • If the client is online when the server changes IPs, WireGuard's built-in roaming will handle it transparently: https://www.wireguard.com/#built-in-roaming

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project

Related posts