News for hackers. Stuff that matters.
Re:Tailscale state file encryption no longer enabled by default by johncolanduoni on Thursday January 08, 2026 @12:54PM (#46544127)
A warning doesn’t help at all. The main threat model for FDE is that someone steals your device and dumps the disk. If you don’t protect the boot process somehow, then you’re just storing the encryption key next to the data.

If you don’t care about that (which is not “military level security”, laptop thieves stealing creds is a thing), just don’t use FDE or use it with an on-boot password every time. No point in the theater.

Re:Tailscale state file encryption no longer enabled by default by themafia on Thursday January 08, 2026 @04:21PM (#46546650)
> laptop thieves stealing creds is a thing

Two factor is a thing. FDE is such a 1990s idea.

Re:Tailscale state file encryption no longer enabled by default by johncolanduoni on Thursday January 08, 2026 @07:36PM (#46548603)
Wow. That’s a new one. Where exactly do you think the authentication tokens you obtain using 2FA are stored?