aborsy

I often use "AuthenticationMethods publickey" which would disable all authentications except public key.

Isn't this safer than "PasswordAuthentication no", even if it's a different setting?

It would be the opposite. While old backdoors will be patched (if easier ones are not switched off or upgraded already), new far more sophisticated ones will be added with AI that only few states will have.

On desktop, Debian stable has been excellent as of Debian 13. Ubuntu was good until 2018, and has since been sluggish and slighy buggy.

I highly recommend Debian. Breath of fresh air and freedom, compared to windows and MacOS.

Isn't embracing AI expected in a software company?

Those who don't catch up will lose.

See my comments in this thread.

Tailnet owner may not trust all their devices to the same extent. Here is a concrete example.

I install tailscale on my cloud vps which I use for downloading torrents. I want my laptop to talk to this node, but I don't want this vm talk to my laptop, which is the whole purpose of ACLs. My ACL is deny by default, so that is great and easy to set. But now this node can still send arbitrary files to my laptop. If I don't remember to tag it, I'm vulnerable. If I do, there is still a window that this node can send me files until I tag it (I can't install tailscale to a tag).

Sending a file otherwise normally requires an app listening to a port, so taildrop permissions should be same as network permissions set by ACL.

BTW, last year or so tailscale advertised a position for someone to manage complexity of tailscale. Founder was talking about this issue. They seem to be aware of the problem.

I backup my different devices to my NAS. The user is a restricted backup user seeing only their own directory. I obviously don't want my torrent computer gets root on my NAS.

I personally use openssh, but someone else may use tailscale SSH.

There are too many features, and lines of code (probably more than OpenVPN). I'm pretty sure there are all kinds of zero days in it, with this attack surface and feature set.

I use it extensively, and I would rather pay them a fee if they could review thr code.

A possibility is a lock down mode, disabling risky features.

I just want a VPN for connrctiviy, no taildrop, taildrive, SSH, funnel, services, DNS, node sharing, ...They are disabled in my admin console, but the code runs on my devices and they can be enabled by mistake.

A question. Taildrop enables unauthenticated input and doesn't even obey ACLs. I'm not quite sure about this, but couldn't malware in a low trust device send a file to my Synology NAS, which will then automatically process it for indexing things like thumbnail, leading to potential code execution? Why doesn't it obey ACLs, and why isn't the recipient approval needed before the file exits the sender's device? I use tags, but I'm the owner not the tag.

Science is getting out of the reach of the majority of people. In particular, EU is out of it mostly.

And what will happen to all these software engineers who are laid off, and to massss who are graduating in CS (because the same CEOs told them it's a good carrier)?

Is it known if this is AI related?

Or perhaps, as Zack noted, Musk showed them the way?

Why?

Some of these vulnerabilities are critical. One compromised node with ssh can get root every other node.

Calling it slop, AI, conveys nothing, 10000 words does not help. They provide practical demonstration, and explain the cause.

In my opinion tailscale needs to focus on secure networking. File sharing, DNS, SSH, Funnel, ... can be handled by dedicated tools.

How many lines of code is tailscale client nowadays?

Syncthing apps for example. Search for example comments of Synctrain app developer in syncthing forum.

France also regulates encryption in applications. Some percentage of apps are not available in France, because apps don't comply with the rules imposed by bureaucrats or more often developers find procedures cumbersome or unfamiliar

Would Dirac get a job these days?

The interfaces of arr stack are ugly, and linking qbit to indexer manager to arr app is needlessly complex. Maybe there could be plugins in one app like qbit.

Prices in Amazon in my area are significantly less than in local shops. Amazon has improved the life greatly for us!

Julia should have been adopted for numerical computation and ML by places like Google.

They went with python and it's just too general and verbose.

The battery powered device is a client to a remote exit node. Normal VPN basically

I would like less battery usage with exit node.

Yes , you are supposed to do. That doesn’t change the fact that he has no insight into technology, and is a bandwagon person.

If I’m a mathematician, I can write public posts on math. Extensive posts about politics, AI, crypto, … are not useful without expertise in those domains

Mr. Tao is an excellent politician. Lots of awards and texts, yet no major problem solved.

It seems now that NS is solved he is mobilizing the community to convince taxpayers continue to pay even though AI may do a better job in his work.

Also, his opinion of AI has continually changed in the past years, after the capabilities were demonstrated.

You should compare battery consumption of TS exit node with something like WG app which low

Agree!

Questions: can new research like this be done using publicly available models?

Or will access to internal frontier models provide a big boost?

The best backup solution that I found is ZFS send (even if it’s not strictly a back up tool).

ZFS send raw encrypted stream from laptop to a server automatically. Encrypted compressed incremental. No need to verify: if snapshot exists at destination, there is no error. If a problem is encountered, restore from redundancy. Errors can be detected and corrected.

Restic has also been working great. The problem is that, it has no redundancy to correct errors. The assumption is that, server holding repository will have redundancy, but then I can replicate directly to that server. I worry that at some point, there will be an error in repository. I may loose 5 years of snapshots (restic has some functionality to remove involved snapshots and rebuild the index, but may not succeed).

Kopia has error correction, with Reed Solomon.

Borg2 has perpetually remained in beta. Looking forward to test it.

I stay away from sync: problems with permissions, git repo, conflict, incomplete sync status in syncthing etc.

Disable password authentication and ignore the noise.

Find, fzf, vim, ssh, …

SFTP is just simpler and better, if available.

Thanks!

GNOME Remote Login runs an RDP server, and RDP indeed isn’t fast enough, although is TLS-encrypted.