The biggest case for building bespoke software is that you drop your attack surface area and it’s not as lucrative to hack one person. Don’t even expose it to the internet if you don’t need to and just run Tailscale.
Someone will inevitably spin up a large swath of agents running an abliterated pareto curve model and point them at the internet.
Not to mention your bespoke tool is likely way less hardened than the existing player in the space.
And keep private and public personal hosted services in different contexts.
they had a priviledge escalation vulnerability that requires the attacker to already be a part of the tailnet, and more specifically allows a user-to-root escalation devices the attacker can tailscale ssh to.
> Not trying to play down the vuln (its important), but its not a free-for-all RCE that some ppl are acting like it is. [1]
eMudhra/TLS certificates have nothing to do with this (?).