This is such a venerable and ancient class of bugs, going at least as far back as AIX 3. Glad to see they're still makin' 'em like they used to.
(If you had SSH access to a host in your Tailscale ACL, you could log in as `-i` and get a root login.)
tptacek
I’m a heavy Tailscale user, so I do trust them quite a bit, but I never used the Tailscale SSH feature.
I feel like OpenSSH’s security record is pretty unbeatable, not sure why I’d swap over for such a security-sensitive tool.
doublepg23
I'll stick to my 100% self-hosted Wireguard setup, thank you very much.
drnick1
So, giving access via tailscale but using OpenSSH is safe, right?
e40
>>> We would like to thank Anthropic and Ada Logics for reporting this issue.
it seems anthropic also use tailscale or it's just being discovered by the mythos model?
mintflow
pure logic error, the undergoing tailscale rust rewrite can't help this too:)
mintflow
Tailscale SSH has caused me other problems in the past because it takes over port 22. I'm not a fan.
modeless
tailscale ssh: replacing a 25-year-old battle-tested codebase with a startup's Go rewrite and then acting surprised when it has bugs
luciana1u
Why own numbering instead of CVE?
kbumsik
> "Tailscale SSH now rejects usernames with leading dashes."
Really? That's the fix?
A proper fix is to use "--" to separate arguments.
comments (10)
(If you had SSH access to a host in your Tailscale ACL, you could log in as `-i` and get a root login.)
tptacek
doublepg23
drnick1
e40
it seems anthropic also use tailscale or it's just being discovered by the mythos model?
mintflow
mintflow
modeless
luciana1u
kbumsik
Really? That's the fix?
A proper fix is to use "--" to separate arguments.
cyberax