News for hackers. Stuff that matters.

A comment on Who's Attacking My Server?. Parent comment

Re:Who's Attacking My Server? by pengaru on Sunday March 13, 2022 @12:40PM (#30662946)
> I think a better solution now is something like Tailscale for anything administrative. I’ve been doing this for Minecraft servers for a year or two, and it eliminates a ton of BS.

All I'm hearing is that Tailscale is becoming an increasingly attractive bastion host to compromise, then use as a jump server to access heaps of poorly configured customer machines.

[ Parent | on HN ]
Re:Who's Attacking My Server? by anderspitman on Sunday March 13, 2022 @04:23PM (#30665351)
It's the classic VPN vs BeyondCorps debate. Tailscale is awesome tech but since my focus is on sharing self-hosted services with others BeyondCorps makes more sense for me.
[ Parent | on HN ]
Re:Who's Attacking My Server? by fomine3 on Sunday March 13, 2022 @09:21PM (#30667515)
I believe Tailscale is basically intended to be installed in every machine that want to be connected (no subnet routing, like BeyondCorps). They also have subnet routing for convenience and to support non installable devices.
[ Parent | on HN ]
Re:Who's Attacking My Server? by willstrafach on Wednesday March 16, 2022 @12:31AM (#30695336)
How would that work? Connections are mainly peer-to-peer with Tailscale. An attack (I suppose pushing new key pairs to specific peers and pointing them through a malicious endpoint?) would likely require a very noisy and detectable process.
[ Parent | on HN ]