Privacy

32424 readers

307 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
Don't promote proprietary software
Try to keep things on topic
If you have a question, please try searching for previous discussions, maybe it has already been answered
Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
Be nice :)

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago

MODERATORS

Is there a downside to using Tailscale when it comes to privacy? (fedia.io)

submitted 2 months ago by Treedrake@fedia.io to c/privacy@lemmy.ml

30 comments fedilink hide all child comments

As in, would they be able to access your server?

you are viewing a single comment's thread
view the rest of the comments

[–] thfi@discuss.tchncs.de 49 points 2 months ago (2 children)

If you do not trust Tailscale as a company, here is an open source re-implementation of the server called headscale. Some/all clients are open source as well. So, you can review all components yourself or pay for a professional third-party review. Otherwise, if you take a binary blob from any origin, including Tailscale, and have it run with privileges on your server, there are few limits on what this blob can do. Yes, backdoors are technically possible, but probably bad for Tailscale's business if that ever came to light.

[–] jqubed@lemmy.world 6 points 2 months ago (1 children)

I’ve never heard of professional third-party review of open source code. That’s a service people offer?

[–] SteveTech@programming.dev 6 points 2 months ago

I've heard of it, but I didn't think it was financially viable for an individual to pay for though.

[–] Tinkerer@lemmy.ca 4 points 2 months ago (2 children)

I've always wanted to do this however do I understand it correctly that I need to host headscale on a vps server that is not in my tailnet/home network?

[–] uzay@infosec.pub 5 points 2 months ago

It can be on your home network, but it needs to be reachable via HTTPS through the internet. So yeah, a vps is probably the best option.

[–] Lemongrab@lemmy.one 2 points 2 months ago

I dont think so. It would just require some ports open.