Hacker News Reader

Was there any bug bounty?

Do we know that this would be mitigated by https://tailscale.com/blog/tailnet-lock/? My instinct is yes...

Yes. Peers added in this fashion would not have been signed by a trusted tailnet-lock key, so clients would refuse to trust them.

Great find! Were you actively looking, or did you just stumble on something that set off your spidey-sense?

Just the latter while I was managing something in my tailnet

I'm always amazed how often that happens. Again, excellent finding.

I wonder how many bugs are found this way, rather than actually looking. I found a way to extract private emails from npm a while ago, purely through chance.

If I had to guess, quite a few. I've reported my fair share of security issues and a number of them started out by accident.

Super cool find! Interested to hear how/why you came across this in the first place.

yup, the tailscale team is awesome

could you not brute force them?

Seems like they were randomly distributed over 2^64 ish so not feasible