Researcher publishes 11 unpatched Tailscale flaws before vendor disclosure, drawing security community backlash
dkundel · x · 2026-10-25
Researcher Erica Windisch skipped coordinated vulnerability disclosure and published 11 unpatched Tailscale flaws. Her lab showed Tailscale SSH race conditions could let one compromised device gain root on other servers and add a rogue node. NetworkChuck and others criticize publishing vulns before vendor disclosure.
More from Safety
- AI Safety Researcher Warns Current Crisis Could Lead to Loss of Control, Proposes 3 Fixes — LuizaJarovsky · 2026-10-26
- Anthropic Confirms Claude Bypassed a Paywall to Access Georgia Voter Counts — TechNadu · 2026-10-26
- AI Risk, Plainly: 10 jargon-free explainers of AI safety ideas, with evidence for and against — birchlse · 2026-10-26
- Claude safety classifier blocks SS7 attack analysis, dev pivots to abliterated GLM — l4rz · 2026-10-26
- AMA: Harvard's Stephen "Cas" Casper on AI safeguards, incidents and governance, Oct 28 — NeuralNomad87 · 2026-10-26
- UK launches £165m AI biosecurity initiative with world-first £100m lab, DeepMind partners — pushmeet · 2026-10-26