News for hackers. Stuff that matters.

A comment on Tailscale didn't stop the Hugging Face intrusion. Parent comment

Re:Tailscale didn't stop the Hugging Face intrusion by tremon on Saturday August 01, 2026 @08:31AM (#49133858)
A short-lived credential would reduce the risk that the key is still valid when an agent gains access

How does that work? If the agent is reading the credential from the live configuration, how short does the lifespan of a key need to be to prevent it from being used by an unauthorized process?

[ Parent | on HN ]
Re:Tailscale didn't stop the Hugging Face intrusion by submitaticket on Saturday August 01, 2026 @12:42PM (#49135949)
Long enough to authenticate the node into the Tailnet. Short enough to revoke itself before the Agent can use it.
[ Parent | on HN ]