
experimenting w/ ai agents & local ai prev lfx @pipecd_dev · ai @dar_global · 2x startups · open source 🩶
India
Joined November 2022
- Tweets2.6K
- Following177
- Followers288
- Likes5K
‼️ Tailscale SSH Flaws Could Let Hackers Gain Root Access Across Servers
Details: cybersecuritynews.com/tailsc…
A new security report warns that Tailscale SSH has flaws that could let a hacker move from one compromised device to root access on other servers. Tailscale SSH lets approved devices log in to each other over a private network. The report lists 11 findings in five groups.
They cover Tailscale’s SSH server, its serve and app connector features, the DERP relay client, and headscale, an open-source server that manages Tailscale networks.
The researcher tested Tailscale 1.104.2 and headscale 0.29.5 between October 22 and October 24, 2026. The most serious group involves Tailscale SSH. Its SSH server runs inside tailscaled, a background program with full root privileges on the machine.
#cybersecuritynews
Readers added context they thought people might want to know
The flaws require an already-approved device in the Tailscale network with SSH rules permitting access/forwarding; they enable post-compromise lateral movement and escalation inside the tailnet, not unauthenticated remote access from outside.
tailworm.com
brandefense.io/security-news/…
tailscale.com/security-bulle…
x.com/mmaunder/statu…
Mech interp is such a beautiful thing , really wanna deep dive but so much time constraints. Still, I can't wrap my head around how people even discover things at this level :/
Now u just need a uncensored model running locally, and u can fuck most of the internet sites or services and blackmail bucks
Some of my websites are in railway, but I am too lazy 😭
October has been an absolute nightmare for software
> Railway - customer secrets exposure
> LiteLLM - malicious PyPI + Docker releases
> Zeabur - infrastructure breached
> OpenCode - AI API keys exposed
> OVHcloud CLI - official binaries backdoored
> Rank Math PRO - malware in official plugin
> TeamUpdraft - customer data compromised
> ConnectWise - cloud backup identities compromised
> Tensorlake - npm package infected
> SubQuery - backdoored npm package
> GhostAction - GitHub repos with malicious workflows
> PHP - critical RCE vulnerabilities
> Node.js - security vulnerabilities patched
> eMudhra - certificate authority keys compromised
> Tailscale - eMudhra incident
At this point, the biggest security risk might not be the code we write, but the code we trust...
Sagnik retweeted
‼️ BREAKING: 8 Private keys belonging to eMudhra intermediate certificate authorities (CA) have been compromised.
Chrome and Firefox blocked the affected certificates within hours. Go, NSS, and other software have issued fixes.
Full details - thehackernews.com/2026/10/ei…
bangerrrrrrrrrrrr
🚀 Introducing DeepInfer, our in-house inference framework, now fully open source!
Powering DeepSeek-V4.1-Flash at scale with high throughput and low latency. We’re sharing our production stack to help the community lower compute costs, reduce energy use, and make AI more affordable.
🔗 github.com/deepseek-ai/DeepI…
1/4
Sagnik retweeted
🚀 Introducing DeepInfer, our in-house inference framework, now fully open source!
Powering DeepSeek-V4.1-Flash at scale with high throughput and low latency. We’re sharing our production stack to help the community lower compute costs, reduce energy use, and make AI more affordable.
🔗 github.com/deepseek-ai/DeepI…
1/4
The spy they all are talking about:
A quote took me back to Class 4.
মহালয়া জিনিসটা আসলে কী?
ঈশ্বরচন্দ্র বিদ্যাসাগর একবার বলেছিলেন
সাধারণত পিতৃপক্ষের অবসানে, যখন মাতৃপক্ষ বা দেবীপক্ষ শুরু হয়, সেই শেষ সময়টাতে পূর্বপুরুষদের উদ্দেশ্যে তর্পণ, অর্থাৎ শ্রদ্ধাজ্ঞাপনেরই সেরা তিথি হচ্ছে এই মহালয়া।
















