5 ms·
The bigger problem is, people casually look at the code and find such major vulnerabilities in Tailscale. It doesn’t instill confidence in the rest of the code.
by aborsy 4y ago
The bigger problem is, people casually look at the code and find such major vulnerabilities in Tailscale. It doesn’t instill confidence in the rest of the code.
This is a security product, and zero days in the code should be taken more seriously. Perhaps make the product all paid, and use the money to hire people to audit the code?
- thwarted 4y agoThe bug was introduced on 2022-09-14, reported to us on 2023-01-11, and remediated on 2023-01-12. I don't know how much more seriously it could have been taken considering it was resolved within 24 hours of being reported.
- wmf 4y agoTailscale would have no money without the free tier. You can't just squeeze money out of users like that.