> Could a part-time programmer like my father write small-business software today? Could he make it as safe and productive as our LAN was? Maybe. If he was canny, and stuck to old-fashioned desktops of the 90s and physically isolated the machines from the internet. But there is no chance you could get the records onto a modern phone safely (or even legally under HIPPA) with the hours my father gave the project.
Sure.
> We can have the LAN-like experience of the 90’s back again, and we can add the best parts of the 21st century internet. A safe small space of people we trust, where we can program away from the prying eyes of the multi-billion-person internet. Where the outright villainous will be kept at bay by good identity services and good crypto.
> The broader concept of virtualizing networks has existed forever: the Virtual Private Network. New protocols make VPNs better than before, Wireguard is pioneering easy and efficient tunneling between peers. Marry the VPN to identity, and make it work anywhere, and you can have a virtual 90s-style LAN made up of all your 21st century devices. Let the internet be the dumb pipe, let your endpoints determine who they will talk to based on the person at the other end.
OK, but we have VPNs now. The problem with keeping your medical records on a modern computer isn't that your modern computer isn't connected to your other computers. The problem is that it is! It's connected to your other computers just like it's connected to everybody else's computers. Your simulated LAN is not safe in the way the old LAN was until -- as the article already noted -- you disconnect it from the internet so it's an actual LAN.
So Tailscale has diagnosed the problem and recognized the solution. And they propose... to do something different. It's not clear what. How does their proposed solution address what they say is the problem?
-----
Side note:
> (or even legally under HIPPA)
The relevant regulation is actually named HIPAA. I've always pronounced this as "hee-pah", which would make sense given the spelling. But that is not normal usage. People in medical fields universally seem to pronounce it as if were spelled "hippa". It's interesting to see that circle back the other way.
There's something strange about the flow "I don't know how to pronounce this. I'll pronounce it as if it were a different word." -> "This spelling is inappropriate. I'll spell it like it's pronounced." You end up with a spelling and a pronunciation that are both completely unrelated to the word you're notionally using. Eventually people will start to ask "how does HIPPA stand for Health Insurance Portability and Accountability Act?".
It's like when people ask "what does wifi stand for?" and I have to tell them "high fidelity".