3 ms·

How were the credentials stolen?

• free652 2mo ago
  Read from the ENV variables of a container.
  • ahofmann 2mo ago
    And someone was stupid enough to put a reusable tailscale auth key in there.
    • selfmodruntime 2mo ago
      I'm willing to bet that 95% of people using tailscale for CI have a 90 day (max days) ephemeral, reusable auth key somewhere in their setup.