Tailscale
For teams who want secure, private networks without weeks of setup and configuration, Tailscale makes it easy. Unlike existing corporate VPNs, Tailscale has no upfront cost, minimal latency, and works with their existing services.www.tailscale.com
402
MENTIONS
113
EPISODES
83
PODCASTS
Search complete. 402 mentions across 113 episodes found for "Tailscale".
Oct 27, 2026
EconoalchemistHOST
And then you kind of gather some more details about it and find out that like it requires like physical access to the device or like, you know, some some like crazy circumstance that is just like totally unreasonable to find the average user in.
ScottHOST
Yeah, there was a set of 11 vulnerabilities that made headlines this weekend because it was in Tailscale.
ScottHOST
Tailscale is like remote access to your servers.
ScottHOST
So a lot of people use it in production.
ScottHOST
And just a lot of machines provide remote access to authorized users via Tailscale.
ScottHOST
So that's a huge target.
ScottHOST
This researcher kind of made headways because they didn't do responsible disclosure or anything.
ScottHOST
but not as severe as it would initially seem.
Michael HouschHOST
At the same time, we're seeing persistent challenges in patch management, particularly with widely used tools.
Michael HouschHOST
A newly disclosed unpatched SSH vulnerability in Tailscale is a case in point.
Michael HouschHOST
This flaw allows an attacker with access to a single compromised device to escalate privileges all the way to root.
Michael HouschHOST
For organizations relying on Tailscale for secure remote access, this is a high-risk scenario.
Michael HouschHOST
There's no patch available yet, so immediate mitigations are critical.
Michael HouschHOST
Restrict SSH access as much as possible and increase monitoring for any signs of anomalous activity.
7 MINS LATER
Michael HouschHOST
Static policies and controls are no longer sufficient.
Michael HouschHOST
Organizations need to be able to pivot quickly as new threats and technologies emerge.
Barrett LyonGUEST
And then there's And then it just went crazy with it.
Barrett LyonGUEST
So yeah, it competes with Tailscale really easily.
Barrett LyonGUEST
Tailscale doesn't provide exit nodes, really, at all.
Barrett LyonGUEST
So yeah, you've got the privacy thing.
Barrett LyonGUEST
But the other interesting stuff is we have a whole bunch of different communications channels to get into us.
OptiHOST
And in this context, not with the overall protocol itself, but with tail scale, I believe it was.
OptiHOST
You know, some nodes are using Tailscale to connect to the SSH.
OptiHOST
Seems like there was a vulnerability in that.
OptiHOST
I think I did see a vulnerability in Electrum be exposed over the weekend as well.
speaker_0NARRATOR
Lab findings suggest one compromised device could become a route to root access on other servers in a tail-scale network.
speaker_0NARRATOR
Tailscale hadn't confirmed the findings at publication.
speaker_0NARRATOR
The reported chain requires Tailscale SSH with port forwarding, plus access rules that let the hacked device reach a target.
speaker_0NARRATOR
No security bulletin, identifier or fixed version was available.
speaker_0NARRATOR
The tests covered tail scale 1.104.2 and head scale 0.29.5, and they weren't observations of real-world attacks.
speaker_0NARRATOR
If a device is compromised, re-imaging it isn't enough because copied keys may remain valid.
speaker_0NARRATOR
The device also needs to be removed from the control plane.
speaker_0NARRATOR
The immediate priority is to review every Tailscale SSH grant and replace broad permissions with tightly scoped device-to-device rules.
speaker_0HOST
She was looking at Tailscale.
speaker_2HOST
Yes.
speaker_2HOST
She analyzed unpatched vulnerabilities in Tailscale SSH version 1.104.2 and the self-hosted Headscale server version 0.29.5. To really understand why this is so critical, we have to look at how modern mesh networks operate compared to legacy systems.
speaker_0HOST
Because Tailscale SSH doesn't work like a traditional SSH server where you just type in a password, right?
speaker_2HOST
No, not at all.
speaker_2HOST
Traditional SSH servers check the connecting user's password or their cryptographic key.
speaker_2HOST
The initial trust is established.
speaker_0HOST
But the vulnerability detail in the report goes much deeper than just abusing that trust.
Jerry BellHOST
Keep session upload progress turned off in your PHP settings until the next release.
Jerry BellHOST
Seven, no fix yet, but a researcher showed one hacked device on a tailscale network can get root on other servers it's allowed to SSH into.
Jerry BellHOST
It works where Tailscale SSH allows forwarding because Tailscale's own service does the forwarding's route.
Jerry BellHOST
Instead of a key or a password, Tailscale SSH trusts the device.
Jerry BellHOST
Narrow your Tailscale SSH rules to named users and servers and turn off forwarding where you can.
Jerry BellHOST
8.
Jerry BellHOST
Windows Server 2016 gets its last security update on January 12th.
Barrett LyonGUEST
And then there's And then it's kind of like it just went crazy with it.
Barrett LyonGUEST
So yeah, it competes with Tailscale really easily.
Barrett LyonGUEST
Tailscale doesn't provide exit nodes really at all.
Barrett LyonGUEST
So yeah, you've got the privacy thing.
Barrett LyonGUEST
But the other interesting stuff is we have a whole bunch of different communications channels to get into us.
Michael GeistHOST
Now, over the last few months, we have seen a growing number of companies speak out.
Michael GeistHOST
You may recall that on this podcast earlier this year, we had CEOs from Tailscale and WindScribe both come on to express concerns about where this legislation was going.
Michael GeistHOST
In September, a broader coalition of companies that included both of those companies, but also added companies.
Michael GeistHOST
VPNs, companies like NordVPN, ExpressVPN, there were others like EasyDNS and 2Cows, all expressing concern in a public letter about the bill, some suggesting that they would leave Canada if it proceeds as is.
Julien BiscontiGUEST
Yeah.
Julien BiscontiGUEST
Yeah, and you use, you know, I mean, I'm not for VPN, but since then, the Wireshark technology, Tailscale, Netbird, whatever.
MattiasHOST
Cloudflare.
MattiasHOST
Cloudflare.
103 more episodes mention Tailscale.
Create an account to see the whole feed, search across every transcript, and follow the entities you care about.