Hacker Newsnew | past | comments | ask | show | jobs | submit | bsmith's commentslogin

All big tech companies are mandating employees to use AI for tasks. Unless there's a similar movement to open source that is AI-free, you're going to need to be tech-free of you want to avoid companies that use AI.

I don't understand why people are still using Tailscale after the issue they had where two independent tunnels were connected together.


Never heard of it, could you send us a reference? What do you use instead?


I use almost plain old wireguard, hosting a wg-easy container that has a nice web gui wrapper that makes it easy with QR codes, no configuration files to create like just wireguard. It's the technology that Tailscale uses, so why would you complicate it, adding more risk?

The incident seems like it was never exploited, and it was fixed within 24 hours. However, in my opinion, the fact that this COULD happen, let alone that id DID happen, is too much risk, and why I switched immediately after hearing about it.

AI overview of the incident:

TS-2023-001:

Node Sharing Across Tailnets Without Authorization (January 2023) A bug in Tailscale's node sharing logic allowed the creation of sharing invitations by unauthorized users. A malicious individual who knew a target node's database ID could generate and accept a sharing invite for that node without being an admin of the target node's tailnet — for any node in any tailnet. Circl So in practice, a node from one unrelated tailnet could be pulled into another person's tailnet without the owner's consent. A node's ID is only visible in the API or admin console, by admins of either the node's tailnet or a tailnet to which that node has already been shared Circl — which limited exploitability, since you'd need to already know the target's internal database ID (a random 64-bit integer, not easily guessable). Tailscale fixed it server-side on 2023-01-12 and stated they verified it was never exploited. The bug reporter (Benjamin Roberts, HN user tsujamin) noted it was discovered accidentally while managing their own tailnet. The Hacker News thread praised Tailscale for deploying a fix within 24 hours:

https://news.ycombinator.com/item?id=34420142

TS-2024-002:

ACL Overwrites Across Tailnets (May 2023 – July 2024) There's also a second related incident that's perhaps even more alarming in concept: an admin user could overwrite the ACLs of one tailnet with ACLs from another tailnet. Any user who was an Admin in multiple tailnets and edited ACLs in the admin console between May 22, 2023 and July 17th, 2024 could trigger this bug after switching the active tailnet. Tailscale This one involved the tailnet-switching feature in the admin console accidentally "bleeding" policy configuration between separate, unrelated tailnets.


I've been rocking the Dygma Defy since it came out and it's been amazing. Their software has been buggy though, and left me rebuilding key maps more than once. I just wished it had a rotary dial


Have you upgraded recently? Dygma's software is nowadays much more solid.


Don't forget regex!


Yeah, that is also quite good.


https://spanara.app

Spanara - A word game inspired by the "license plate game" my wife taught me while we lived in Finland. License plates in Finland always start with 3 letters, so out on our walks we'd try to come up with a word quickly, and got more kudos for "good" words. This was a first attempt at a personal project using AI.

I am currently working on a new mode that is more like what played walking around: a few rounds in rapid fire, very little time to think before the next round.


Seems like a really small dictionary. Many/most of my guesses (and Gemini's) don't work.


Yeah, sorry about that, and thanks for the heads up!

I've struggled with the dictionary a few different times. Here's to hoping the 12dicts wordlist 2of12inf is a better choice than my previous ones :D

The new dictionary is live!



Thanks, but the Defy lacks Function keys.


These kinds of keyboards are programmable, function keys can be added to a custom layer, just as any other keys. The entire point is to make it so you don't constantly have to be reaching for keys, to bring them closer to your fingers (which can stay relatively still).


Thanks for trying it out! And thanks for the word example, I'll have to find a better dictionary.

And your game was fun. I noticed it gave me a letter (A) when it still could have been another (F) https://imgur.com/a/7EU7XAo.


No, the green sticks mean they are part of letter. So in this case it must only be A. The sticks turn black when the letter is found. But the game is to figure out in fewest sticks so you don't want to turn them black. You want to use you "negative" aka wrong sticks to help deduce things.


Yeah, just guess I'm a bit confused, because the green sticks I've chosen are valid for both A and F, so I'm not quite getting how F got ruled out in that instance.


Just remember the rule that if the letter sticks are green (even tho the green sticks make a letter) then you didn't find the letter.


I have a dictionary I complied years ago from all scrabble dictionaries UK & US which contains all the words you'd ever want. My original wordGlyph game used it. I can send it to you if you want to use it. Goto the bottom of WordGlyph instructions to contact me.


"Woooo" Slaps chalk board. "Are you pumped for today's lesson?!" -Brock

Best classes ever.


GLASS

IN

YOUR FACE


Using AI to debug code at 2am sounds like pure insanity.


They're suggesting you'll be up at 2am debugging code because your AI code failed. Not that you'll be using AI to do the debugging.


the new normal


Considering orthodontic treatments, no. I imagine you could damage the connective tissues under the gums though.


Consider applying for YC's Summer 2026 batch! Applications are open till May 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: