Tracking down the 16-year-old WAL-reset SQLite bug(tailscale.com)

1128 points by ropbear 2 months ago | 215 comments

Tailscale blog post describing how the team tracked down a 16-year-old SQLite bug related to write-ahead log (WAL) resets.

More Tailscale tricks for your jailbroken Kindle(tailscale.com)

377 points by Error6571 2 months ago | 107 comments

Tailscale blog post describing additional ways to run Tailscale on a jailbroken Kindle, covering proxy and TUN networking modes.

Tailcat: Tailscale Without Tailscale, by Tailscale(tailscale.com)

59 points by ricochet11 1 month ago | 4 comments

Making Tailscale Faster(tailscale.com)

209 points by yarapavan 1 month ago | 81 comments

Tailscale product blog post announcing work to make Tailscale faster, by Kabir Sikand and Kevin Purdy.

TS-2026-009: Insecure argument handling in Tailscale SSH permitted root access(tailscale.com)

201 points by jervant 3 months ago | 129 comments

Frequent reauth doesn't make you more secure(tailscale.com)

1175 points by ingve 1 year ago | 490 comments

Tailscale blog post arguing that forcing users to frequently re-authenticate does not improve security.

I hacked a dating app (and how not to treat a security researcher)(alexschapiro.com)

442 points by bearsyankees 1 year ago | 265 comments

A blog post by a security researcher describing vulnerabilities found in a dating app and the startup's poor handling of the disclosure.

There isn't an easy exploit for this PHP vulnerability(eliastaylor.com)

566 points by zkldi 5 days ago | 437 comments

Blog post arguing a newly disclosed PHP vulnerability is hard to exploit and that thousands of LLM-generated GitHub PoC exploits don't work against vanilla PHP.

Tailscale is pretty useful(blog.6nok.org)

736 points by marban 1 year ago | 353 comments

Personal blog post describing the author's experience starting to use Tailscale to access a simple server running on an old Raspberry Pi 1.

I'm just having fun(jyn.dev)

457 points by lemper 10 months ago | 209 comments

A blog post by jyn, a compiler engineer, arguing that programming isn't a competition and that they write about technical topics simply for fun.

Today's PHP security release, and how we're strengthening security(thephp.foundation)

761 points by ejohnso49 5 days ago | 394 comments

PHP Foundation blog post on a PHP security release fixing two critical RCE vulnerabilities, how they were found, the disclosure leak, and how PHP security work is being strengthened.

I found a Vulnerability. They found a Lawyer(dixken.de)

831 points by toomuchtodo 8 months ago | 381 comments

Blog post by a diving instructor and platform engineer recounting how reporting a security vulnerability led to a legal response from the affected organization.