News for hackers. Stuff that matters.
Re:Tailscale doesn't want your password by woodruffw on Thursday June 08, 2023 @01:31AM (#36237628)
This is indistinguishable from the "I don't trust my computer" threat model. Apple could also surreptitiously scrape your screen or copy your processes' memory.
Re:Tailscale doesn't want your password by eastbound on Thursday June 08, 2023 @02:12AM (#36237914)
It’s not, because law enforcement considers your computer as private property, while anything you upload on the cloud is seizable without warrant. I’m not joking, it was rapported on HN at the time of the Snowden leaks that NSA can legally monitor your data as long as you transmit it over the wire.
Re:Tailscale doesn't want your password by croes on Thursday June 08, 2023 @02:13AM (#36237921)
The difference is the effort it takes. Deactivating E2E is just a flag.
Re:Tailscale doesn't want your password by afiori on Thursday June 08, 2023 @06:21AM (#36239566)
There is no need to mess with the E2E, the client installed on your machine is downloaded form their servers, they can just copy the data when it is decrypted locally.

I does not make sense to use a proprietary internet connected application on your machine and worry that that the servers might be nefarious.

Re:Tailscale doesn't want your password by neurostimulant on Thursday June 08, 2023 @05:16AM (#36239169)
If your threat model includes getting hacked by the government, then your only choice of OS would be some hardened open source OS with fully reproducible builds and no proprietary driver blobs installed.
Re:Tailscale doesn't want your password by newscracker on Thursday June 08, 2023 @07:47AM (#36240272)
And in which you have personally audited every line of code for extra confidence. /s