注册并分享邀请链接,可获得视频播放与邀请奖励。

Peter Dedene
@dedene
AI & Tech Explorer · 15+ years building meaningful software · Founder & Engineer at @zenjoy · Building
加入 April 2009
603 正在关注    10.1K 粉丝
I got community noted, muted and insulted on Sunday for trying to warn people. Yes, you need tailnet access first. But an approved user getting privileges they shouldn't have is still bad. Hope everyone that called me a retard took a second look at their Tailscale config 👇
显示更多
‼️ UPDATE - Tailscale confirms the Tailworm SSH flaws are real. Its new investigation page says most of what it found is privilege escalation and calls the issues “serious.” Fix targeted within 24 hours — no CVE or patched version out yet. Mitigate now: → Set TS_SSH_DISABLE_FORWARDING=1 in the tailscaled service and restart → Tighten SSH access rules to the users/devices that need them Read:
显示更多