3 ms·

> I don't trust Tailscale... To be clear, nothing specific to Tailscale right? Just generic prudence?

• menaerus 3y ago
  Tailscale client is open source but server is not. Also, it is not a VPN service solely but it also allows remote access to your machine for admins. I don't like that at all.
  • OJFord 3y ago
    To be clear you're (as the person setting up Tailscale) the admin in that scenario - and you don't have to allow it. There is a third-party OSS server they let the official client work with. Similar to Bitwarden/Vaultwarden.
    • menaerus 3y ago
      Do you know how to disable the remote access to other people in your organization (by default)? I don't usually do admin stuff nor I unfortunately know much about network setups nor I know about the specifics of tailscale setup.
      • OJFord 3y ago
        https://tailscale.com/kb/1018/acls/ https://tailscale.com/kb/1018/acls/
      • p_l 3y ago
        In addition to setting ACLs, you can start the tailscale client in "shields up" mode, where it adds a local rule preventing connections from other nodes to yours. Of course that's not perfect (there are ways to avoid it that if blocked would in turn break legitimate uses by you) but it's there.