You're right about the docs, and we'll fix it we fixed it.
As for the timing, unfortunately the entire Internet is under attack, including many Tailscale exploitable vulnerabilities and there just wasn't the normal amount of time available that normal "unshipping" a feature would take.
We would loved to have given you a 30 day warning that we were going to remove a potential security vulnerability, but...we did not believe that was an available option.
A thought for the future. Add a feature to the clients and the server to show a message when there is something of importance. A number of apps do this.
As someone who works in IT and knows a lot about this stuff I also have a master's in cybersecurity @maddox is absolutely right, and removing this feature immediately was the right call. Honestly, if you're complaining about this feature being removed with no notice, you have no idea what's going on right now and how serious it is, and maybe you should do some research and read. The entire internet, like he said, is under attack right now, and there were multiple CVEs related to Tailscale last week. So yeah, the Channels team did you a favor and didn't take something away from you.
I feel your pain but you can easily get back on tailscale with a couple of lines. It's not something you have to do brain surgery with.
Removing the tailscale feature was the right call due to security reasons and doing it right away was a good idea IMO.
Sorry for chiming in here, but given your expertise in this kind of stuff @mackid1993 what are your recommendations for all our container based projects, like ah4c, fastchannels, etc.? Also @bnhf @KineticMan same question.
Are you all looking at the implications in our community projects, not just tailscale.
Thought id get your thoughts before opening a can of worms and starting a dedicated thread on this whole issue. Surprisingly, the community has been pretty quiet about all the projects. . Im no security expert, but i started down the path with claude last week on my ubuntu linux box that just has fastchannels and olivetin running.
It took me down a rabbit hole looking at certifications, package verifications, etc and I could see it turning into a black hole, so gave up for now.
Any thoughts?
Use actual tailscale.
It still works. Its only the internal tool that Channels have is that is removed but using the normal tailscale tool will work with those tools
Could we have discussions somewhere else? Unlike OP (and some others on Discord), I've got the Announcements forum set to send me notifications when the devs have something to announce (like this). I'm getting recurring e-mails now due to people treating the announcement as a chat room.
Actually, that may be a good idea.
You are on the correct track, they could have and probably should have sent an email to all of us while also shutting down as they felt is was necessary. If they could not send out instructions continue to function immediately, they could have stated that instructions would follow shortly.
Unfortunately those that were away from there server at the time of the shutdown might be down for some time and I can see how frustrating this would be for them.
Omg anyone who can't understand the severity of these issues. Please unplug your router. Stop using a computer. The landscape has changed since 2015. There were major TS related CVEs. This was done for everyone's security without time to make an announcement. Without any due respect if you are too illiterate to understand please for the love of God listen to those who do, stop whining, or learn how modern technology functions in the age of agentic AI. Like OMG @maddox did all of you fools a favor and all you do is whine in your own ignorance. Either educate yourselves, stop complaining, or unplug your router. I hear VTech makes some really user friendly tablets.
Chiming in on this. DO NOT EXPOSE THESE TOOLS TO THE INTERNET. KEEP YOUR KERNEL AND NETWORKING STACK PATCHED. These tools are not designed to be security first. They are designed to operate on a LAN behind a residential firewall. Access them with a modern VPN and utilize zero trust principles when possible.
The tone of this post is uncalled for. No need to be abusive or dismissive.
Did you even read what I wrote. The tone of the comments criticizing the devs are ignorant, uncalled for, and infuriating to read. For the love of god please listen to those who understand the severity enough to be frustrated with those who are complaining. The entire world is under attack right now and no one seems to know or care. It's happening right under your nose and those complaining are living in ignorant bliss.
Where can we read about this attack for our own edification?
Nothing is safe anymore. This is the world we live in now. The first line of defense is whatever is between the keyboard and chair which is usually the first problem.
I mean for the entire world being under attack.
Or, maybe the current AI capabilities are ahead of the curve.
