55 results for “tails”
The Tailworm report highlights potential Tailscale SSH flaws that could let attackers escalate privileges nd move between servers after compromising an authorized device.
AWS DevOps engineers should review SSH access policies, disable unnecessary forwarding, audit privileged permissions nd monitor suspicious activity to limit lateral movement across their infrastructure.
A researcher reports unpatched Tailscale SSH flaws enabling a compromised tailnet device to gain root SSH access on other servers. This matters because it breaks zero-trust device assumptions and enables silent lateral movement to critical systems. #Tailscale #SshSecurity #PrivilegeEscalation
https://cyberworldops.eu/en/researcher-reports-tailscale-ssh-flaws-that-could-turn-one-compromised
Tailscale engineering on tailworm: https://www.reddit.com/r/Tailscale/comments/1xekjpd/tailworm_tailscale_vulnerabilites/19rlvxvp9vn7m/
Tailscale SSH users: review who can connect to your computers.
Reported flaws could let an authorized user gain administrator control under certain conditions.
Tailscale’s VP of Engineering says on Reddit that fixes are in progress; the company isn’t recommending everyone disable SSH.
No confirmed real-world attacks found in our Oct. 25 review.
https://www.reddit.com/r/Tailscale/comments/1xeoj1l/recent_tailscale_vulnerability_reports/
Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers
https://thehackernews.com/2026/10/unpatched-tailscale-ssh-flaws-could-let.html
Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers https://thehackernews.com/2026/10/unpatched-tailscale-ssh-flaws-could-let.html
Use Tailscale SSH? Review access permissions.
Tailscale’s VP of Engineering says on Reddit that fixes are in progress. No confirmed real-world attacks found in our Oct. 25 review.
https://www.reddit.com/r/Tailscale/comments/1xeoj1l/recent_tailscale_vulnerability_reports/
Hacker News: Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers https://thehackernews.com/2026/10/unpatched-tailscale-ssh-flaws-could-let.html #news #IT
there's a tailscale ssh vuln(?) out there and i sent a "pls dont exploit me please im too lazy to turn it off" message in the group chat (my friends are on my tailnet)
but now (in church, distracted, i know) i'm thinking,,,"wait wait all tailscale ssh does is make it annoying to ssh to my server from my laptop--throwing up a qr code and everything when i already have a keypair, have i ever *actually* needed this??"
and i mean like, it's neat that i CAN ssh in from like, my browser, but if i'm on my laptop then i can do that anyways?
the only usecase is for getting to a shell on my phone, but I cannot recall ever doing that--
There are these repeated injuries in hadrosaur tails. There were a few theories on this, but one of them stands out. No easy way to say this: some dinosaurs were really into rough sex.
Link: https://www.cell.com/iscience/fulltext/S2589-0042(25)02000-0
🚨 Researcher publishes 11 unpatched security flaws affecting Tailscale and headscale
Erica Windisch of Cyberdione Labs skipped coordinated vulnerability disclosure and publicly released details for 11 flaws tested against Tailscale 1.104.2 and headscale 0.29.5.
The reported issues involve Tailscale SSH, Unix socket forwarding, App Connectors, Serve and Funnel. The most serious could allow an authorized Tailscale SSH user to gain root-level capabilities on a destination system through port forwarding.
⠀
Windisch said the findings were reported but not coordinated with Tailscale before publication.
Tailscale confirmed it received the report and had independently identified issues it is now working to fix. The company said the full scope remains under investigation and is not currently advising everyone to disable Tailscale SSH.
Research: https://tailworm.com/
Tailscale response: https://www.reddit.com/r/Tailscale/comments/1xeoj1l/recent_tailscale_vulnerability_reports/
Android-клиент для DeepSeek Harness: как работать с агентом на ПК с телефона без облака и FCM
Как я сделал Android-клиент для DeepSeek Harness, который работает с агентом на компьютере без облачного сервера и FCM. Внутри — плагин в процессе DSH вместо WebView, привязка по QR-коду с пином сертификата и журнал квитанций, из-за которого телефон никогда не повторяет команды вслепую.
https://habr.com/ru/articles/1099110/
#android #sse #qrкод #nodejs #kotlin #jetpack_compose #tailscale #deepseek_harness
Arch, Texas stop tailspin in must-win vs. Ole Miss as Horns avoid another collapse https://www.nytimes.com/athletic/7721564/2026/10/24/ole-miss-texas-arch-manning-score-result-takeaways/ Ole Miss recovered an onside kick with 1:20 left, down 7, to give itself a final chance. #AmericanFootball
The #Toronto zoo is missing an opportunity in the gift shop by not selling ears, tails, and whatnot. 🦊 🐰 🐱
Things that I've gotten working so far on the NLS eReader: a braille shell, Tailscale networking, "Development Tools" submenu, editor package, working volume buttons, enhanced speech settings so you can toggle between more than the two voices that come with stock. Rewrote the unlocker to not use any proprietary Humanware drivers. Oh, right. The eReader doesn't ship with Acapela, so installing the "nls-speech" package will enable eSpeak which is included in all copies of Bread, for some reason. Then we have other packages for doubletalk, Dectalk, Pico and BestSpeech which will also work on non-NLS devices. The package manager is almost done, then I think I'll be ready for something for people to test and play around with.
After this week we just had, Cyberdione Labs thought they'd be cute and just publicly disclose a bunch of tailscale vulns, with zero notice to tailscale? Really??
> Regarding disclosure timelines, it is of the researcher's opinion that infrastructure is vulnerable today.
No shit. Same as every vulnerability.
Sounds like these folks just wanted to get their name out while everyone's looking.
This week's Linux and FOSS news
LINUX NEWS
Ubuntu rolls out php2shell, eMudhra certificate fixes:
https://www.omgubuntu.co.uk/2026/10/ubuntu-php2shell-emudhra-security-fixes
Canonical dev mocks up an Ubuntu launcher that uses AI:
https://www.omgubuntu.co.uk/2026/10/ubuntu-ai-launcher-prototype
Fedora Linux 45 Final NO-GO: Release Delayed to November 3, 2026:
https://www.linuxcompatible.org/story/fedora-linux-45-final-nogo-release-delayed-to-november-3-2026/
Fedora Linux 45 RC-1.2 Now Available for Testing:
https://www.linuxcompatible.org/story/fedora-linux-45-rc12-now-available-for-testing/
Linux Mint’s new system monitor does more than you’d expect:
https://www.omgubuntu.co.uk/2026/10/linux-mint-new-system-monitor
openSUSE Releases Agama 25 Installer with Web-Based Terminal, Exit Option:
https://9to5linux.com/opensuse-releases-agama-25-installer-with-web-based-terminal-exit-option
Alpine 3.21.9, 3.22.7, 3.23.7 and 3.24.3 Security Releases, Patches Critical PHP RCE:
https://www.linuxcompatible.org/story/alpine-3219-3227-3237-and-3243-security-releases-patches-critical-php-rce/
KDE neon 20261016 ships Plasma 6.8, released on KDE's 30th birthday:
https://www.linuxcompatible.org/story/kde-neon-20261016-ships-plasma-68-released-on-kdes-30th-birthday/
SparkyOS Unveiled as a Portable Arch Linux-Based SparkyLinux Flavor:
https://9to5linux.com/sparkyos-unveiled-as-a-portable-arch-linux-based-sparkylinux-flavor
Omarchy 4.5 Expanding To AArch64 World With Snapdragon X & NVIDIA N1X Laptops:
https://www.phoronix.com/news/Omarchy-4.5-RC1
Omarchy Gets The Web Browser Launching Faster By Avoiding XDG Overhead:
https://www.phoronix.com/news/Omarchy-Faster-Web-Browser
Tails 7.15.1 Emergency Release Blocks Forged eMudhra Certificates:
https://www.linuxcompatible.org/story/tails-7151-emergency-release-blocks-forged-emudhra-certificates/
CutefishOS is Back With a Vibe-Coded Desktop That Doesn't Use Qt or GTK:
https://itsfoss.com/news/cutefishos-vibe-coded-desktop/
Debian-Based siduction 2026.1 “Big Crime” Released with Linux 7.2, KDE Plasma 6.7:
https://9to5linux.com/debian-based-siduction-2026-1-big-crime-released-with-linux-7-2-kde-plasma-6-7
(Yeah we Linux users commit "big crime" by not using a normie OS 😈)
Gentoo-Based MocaccinoOS 26.10 Released with COSMIC 1.10 and KDE Plasma 6.7.5:
https://9to5linux.com/gentoo-based-mocaccinoos-26-10-released-with-cosmic-1-10-and-kde-plasma-6-7-5
BakAndImgCD 53.0 Released: The Ultra-Tiny 85MB Linux Backup and Rescue Tool:
https://www.linuxcompatible.org/story/bakandimgcd-530-released-the-ultratiny-85mb-linux-backup-and-rescue-tool/
DietPi 10.8 Released with New Tool to Manage WireGuard Servers and Clients:
https://9to5linux.com/dietpi-10-8-released-with-new-tool-to-manage-wireguard-servers-and-clients
(Post 1/7)
#WeeklyNews #News #Linux #LinuxNews #Ubuntu #Fedora #LinuxMint #openSUSE #AlpineLinux #KDENeon #SparkyOS #Omarchy #TailsOS #CutefishOS #Siduction #MocaccinoOS #BakAndImgCD #DietPi #LinuxDistro #DistroRelease #FosseryTech
Немного P2P штук хозяйке на заметку:
☝️ две библиотеки для P2P взаимодействий. Одна сложнее, модульнее, поддерживает много языков и используется в IPFS, другая - проще и может быть удобнее для простых сценариев в основном на Rust.
sendme - аналог Magic Wormhole на Rust с использованием irohcroc - аналог Magic Wormhole использующий технологии Tailscale#p2p #soft #libraries #tools #MagicWormhole #log #Go #Rust #decentralization
Catra's tail doesn't lie
Full comic on Pa3on:
https://www.patreon.com/posts/136093315
Air to Ground Message:
POTH PMTC TAIL SWAP. BROKE PIN DURING PUSH
Area: Washington DC, USA
Type: Bombardier CRJ900
A: #a297079b0c1
F: #f6e6960b794
Air to Ground Message:
POTH PMTC TAIL SWAP. BROKE PIN DURING PUSH
Area: Washington DC, USA
Type: Bombardier CRJ900
A: #a297079b0c1
F: #f6e6960b794
A portret of a White-tailed Deer
Get it or see it bigger here: https://jan-luit.pixels.com/featured/white-tailed-deer-close-up-portret-jan-luit.html
#WildlifePhotography #Photography #NaturePhotography #fotografie #Arte #AYearForArt #BuyIntoArt #FediGiftShop #PhotographyIsArt #Fotografia #Wildlife #Art #Artwork #Nature #Natuur #mastoart #Fediart #GiveArt #Giftidea #Artist #WhiteTailedDeer #Deer
Being closely watched by a chanate (great-tailed grackle). Wonder if he finds us interesting. 🤔
OCTransfur is underway! Let's show off Ru as some other species!
This form is tubular!
For the twentyfourth day, a ferret!
Base is by https://toyhou.se/V0idL0ck
#shapeshifter #canine #tail #october #octransfur #ferret
OCTransfur is underway! Let's show off Ru as some other species!
I feel like a winner with this one
For the twentythird day, a garchomp!
Base is by https://www.furaffinity.net/user/godbird
#shapeshifter #canine #tail #october #octransfur #anthro #pokemon #dragon #garchomp #shark