this post was submitted on 12 Oct 2024
71 points (98.6% liked)

Privacy

31609 readers
312 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

As in, would they be able to access your server?

you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 47 points 3 weeks ago (2 children)

If you do not trust Tailscale as a company, here is an open source re-implementation of the server called headscale. Some/all clients are open source as well. So, you can review all components yourself or pay for a professional third-party review. Otherwise, if you take a binary blob from any origin, including Tailscale, and have it run with privileges on your server, there are few limits on what this blob can do. Yes, backdoors are technically possible, but probably bad for Tailscale's business if that ever came to light.

[–] jqubed 6 points 3 weeks ago (1 children)

I’ve never heard of professional third-party review of open source code. That’s a service people offer?

[–] [email protected] 6 points 3 weeks ago

I've heard of it, but I didn't think it was financially viable for an individual to pay for though.

[–] [email protected] 4 points 3 weeks ago (2 children)

I've always wanted to do this however do I understand it correctly that I need to host headscale on a vps server that is not in my tailnet/home network?

[–] [email protected] 5 points 3 weeks ago

It can be on your home network, but it needs to be reachable via HTTPS through the internet. So yeah, a vps is probably the best option.

[–] [email protected] 2 points 3 weeks ago

I dont think so. It would just require some ports open.