๊ฐ€์ž… ํ›„ ์ดˆ๋Œ€ ๋งํฌ๋ฅผ ๊ณต์œ ํ•˜๋ฉด ๋™์˜์ƒ ์žฌ์ƒ ๋ฐ ์ดˆ๋Œ€ ๋ณด์ƒ์„ ๋ฐ›์„ ์ˆ˜ ์žˆ์Šต๋‹ˆ๋‹ค.

Peter Dedene
@dedene
AI & Tech Explorer ยท 15+ years building meaningful software ยท Founder & Engineer at @zenjoy ยท Building
๊ฐ€์ž… April 2009
603 ํŒ”๋กœ์ž‰ ์ค‘    10.1K ํŒฌ
I got community noted, muted and insulted on Sunday for trying to warn people. Yes, you need tailnet access first. But an approved user getting privileges they shouldn't have is still bad. Hope everyone that called me a retard took a second look at their Tailscale config ๐Ÿ‘‡
๋” ๋ณด๊ธฐ
โ€ผ๏ธ UPDATE - Tailscale confirms the Tailworm SSH flaws are real. Its new investigation page says most of what it found is privilege escalation and calls the issues โ€œserious.โ€ Fix targeted within 24 hours โ€” no CVE or patched version out yet. Mitigate now: โ†’ Set TS_SSH_DISABLE_FORWARDING=1 in the tailscaled service and restart โ†’ Tighten SSH access rules to the users/devices that need them Read:
๋” ๋ณด๊ธฐ