Haha there's a whole ass website
https://tailworm.com/
RT: https://friedcheese.us/objects/bfe8ce64-4cd6-4e82-a3a3-38e2b88fde9a
Used to hang out with Erica in IRC back in the day. Glad she's doing well. Fuck your coordinated disclosure
Discussion
Haha there's a whole ass website
https://tailworm.com/
RT: https://friedcheese.us/objects/bfe8ce64-4cd6-4e82-a3a3-38e2b88fde9a
Used to hang out with Erica in IRC back in the day. Glad she's doing well. Fuck your coordinated disclosure
> Connector translates traffic to attacker-chosen destinations with no validation; network ACLs are never consulted for the true destination
Haha I knew it. I suggested this as a possible problem a long time ago and people said "but that can't happen every node will apply the network wide ACLs!"
Guess they don't ๐ฎโ๐จ
> on headscale v0.29.5 forwarding cannot be disabled โ it is granted unconditionally on every accepted session, so until fixed, treat every headscale SSH grant as root-equivalent.
Yikes 
Does 'coordinated disclsore' in this case mean "we're withholding disclosure and fixing certain bugs glacially slowly so our buddies in the SiS can make ample use of them?"
Also, are they a bunch of wokies?