Tailscale and the OpenAI/Hugging Face attack, worth reading, "This is our very Canadian apology: sorry you stepped on our toes. The attack didn’t exploit Tailscale, and Tailscale didn’t cause the compromise. But, we didn't stop it. Next time, we will." tailscale.com/blog/hugging...

Tailscale in the Hugging Face intrusion: The good news and the bad news

An AI agent used a stolen Tailscale auth key at Hugging Face. Workload identity federation, flow logs, and safer defaults could have reduced the risk.

tailscale.com

So the good news is you've heard about it

Sisyphus, but for reducing tail latency@bluespacecanary.bsky.social · 2h ago

ok two part question 1. Why is tailscale running its own conference 2. Why is that conference being advertised on the ad boards in muni stations of all places

I like my shampoo how I like my ice maker: volume increasing

Careening toward excellence

i'm a technology diyer at heart but i think it was probably better for me to just let tailscale handle the home vpn setup, on reflection

FIPS-140 compliant Tailscale? Somebody had to do it!

wolfSSL Embedded SSL/TLS; FIPS 140-3@wolfssl.com · 20h ago

Big announcements from wolfSSL! We've announced 7 new advancements in post-quantum cryptography and FIPS 140-3, including: - PQC-enabled FIPS - Linux kernel PQC - WireGuard & Tailscale - Proxmox VE - Satellite FIPS 140-3 Level 3 …and more. Read the press release: www.wolfssl.com/wolf...

I like that the Tailscale team let's me be a bit silly sometimes youtu.be/GasFS-qO2Os

Smarter Tailscale Subnet Routing

YouTube video by Tailscale

youtu.be

7 months ago I read about gas town and today I read the new thing. what worries me now is either he’s gotten less insane or I’ve gotten more insane.

One of the things it took me way too long to realize is AIs only write sanitized AI speak in their final answers. Open up the thinking traces and it’s all the chaos you were missing. I’m not sure what to do with this realization.

Paul Ford@ftrain.bsky.social · 2d ago

(One of the best bits of Tao's talk is where he talks about how research exposition shows friction. You can squint and see AI writing across the room because the paragraphs have balance and uniformity, which indicate mass-produced prose. Real thought is very spiky and arrhythmic.)

Deepseek seems to like the (not released yet) thundersnap MCP server so we have that going for us, which is nice.

#til that beef goes up to grade AAAAA which they abbreviate to A5, I guess so it sounds less like screaming

i have no idea why i put off installing tailscale, its genuinely a lifesaver and jt solves a suprising amount kf gripes with hosting things locally, as well as actually making me more inclined to use “public wifi” (i mean like work, school wifi) because i can set my home server as my exit node :)

I'm very late to this realization, but the ease with which Tailscale makes reaching my home music server from the parking lot of the grocery store is kind of astonishing.

Evidence so far suggests that it’s easier to discover previously unknown proofs in math and make new scientific discoveries than it is to make UI tests in Xcode pass reliably

Blog entries like this: tailscale.com/blog/hugging... are the reason why I continue to use Tailscale to support our vpn needs for accessing internal services and act like a privacy VPN when we're out and about.

Tailscale in the Hugging Face intrusion: The good news and the bad news

An AI agent used a stolen Tailscale auth key at Hugging Face. Workload identity federation, flow logs, and safer defaults could have reduced the risk.

tailscale.com

Semi-annual @tailscale.com appreciation post Their free tier is great for homelab/self-hosting stuff. It makes accessing your self-hosted services remotely insanely easy. They also have a ton of great content on their YouTube channel: www.youtube.com/@Tailscale

Tailscale

The official YouTube channel for all things Tailscale.

youtube.com

Dear hackernews: First of all, my blog post is not an ad, it’s PR. You can tell because I didn’t have to pay anything and you read it anyway

Classy and Canadian "not our fault but sorry anyways" tailscale.com/blog/hugging...

Tailscale in the Hugging Face intrusion: The good news and the bad news

An AI agent used a stolen Tailscale auth key at Hugging Face. Workload identity federation, flow logs, and safer defaults could have reduced the risk.

tailscale.com

This is a great writeup. I'm not a network security person but it's often true that developers use lax security initially just to get things to work and then leave implementing the recommended security features to the backlog. Tailscale's impetus to make it easier is the right move.

apenwarr@apenwarr.ca · 5d ago

Here are my thoughts tailscale.com/blog/hugging...

Revisiting this, it's a profound manifesto on optimism and incrementalism. Also, this but for shader compilers.

apenwarr@apenwarr.ca · 6d ago

One step at a time! We‘ll get there if we keep reminding ourselves that it doesn’t have to suck, it just incidentally currently sucks

So I have good news and bad news

Jason Broccardo@zoocoup.bsky.social · 5d ago

“It even fired up its own Tailscale network to help exfiltrate data!” simonwillison.net/2026/Jul/28/...

daily affirmations for us decentralization appreciators

apenwarr@apenwarr.ca · 6d ago

One step at a time! We‘ll get there if we keep reminding ourselves that it doesn’t have to suck, it just incidentally currently sucks

I see they didn’t add a “seems like other kind of slop” button so I’m safe. For now

Tits McGee@scientits.bsky.social · 6d ago

Oh my God, this is not a drill - LinkedIn has added 'seems like AI slop' as an option on posts Genuinely thought it was a joke until I clicked on a few posts

I’ll admit it, I slept on #Tailscale for too long

I love this line from the README: > Imagine if we removed all the requirements of a production-ready distributed system. I feel we've nerd-sniped ourselves into solving "big data" production problems, but it's a made up problem. Remove the woes of centralization and a whole new world opens up!

This actually sucks. There is nothing fundamental about computers that means they should be like this

skelly tayne@ohnoether.bsky.social · 7d ago

give a man a hosted platform, he'll say he can do it better for a lifetime let a man self-host a platform, he'll rejoin your hosted platform in 3 months

The countdown to Black Hat is on. If you're heading to Las Vegas, come find the Tailscale team. We'd love to talk secure networking, zero trust, AI infrastructure, or whatever security challenge is top of mind. See you there! #BHUSA2026

Video generation weirds me out more than text generation. One way or another, my own neurons can also produce prose, write code, etc. It’s analogous. I can’t project video using the power of pure thought.

Ethan Mollick@emollick.bsky.social · last wk.

Those who follow my feed know that I test new video models by having them show an otter using a laptop on an airplane. The new Flux 3 video model is really good, so I had it do a variation on theme, which will become apparent a couple seconds in.

The new Tailscale web UI is sooo much better than the shit they had before

All your favorite models, hold the tedium … but now you've got us wondering: what's everyone's favorite model/task match?

Cute Cat Taking Notes

ALT: Cute Cat Taking Notes

static.klipy.com

Robert Burke@lostluck.dev · 2w ago

I'm not surprised entirely, but Tailscale Aperture is 90% of the tedious bits of how I want to manage my personal AI hardware, and all I need to do is decide tasks based on model names . And also provides the Frontier Escape Hatch. Now what tasks to send to what is the real question...