Watch the video, transcript and sources
+ Tailscale 1.104.4 fixes the Tailworm socket-forwarding bugs in Tailscale SSH
- Mac git, curl and python still accept the compromised eMudhra certificates (researcher site)
+ Discord: Server Web Pages on Nov 16, channel messages in web search from mid-December
- Opt-out authors are suing Anthropic over Claude training (allegations, Stanford Daily)A Tailscale SSH login keeps you inside your own user account. A report published on Saturday describes sessions reaching sockets only root should touch, and Tailscale shipped fixes this week. There is also a reason Tailscale pushes back on the name of that report. I will save it for the end. Tailscale links your machines into one private network, and Tailscale SSH is its built-in SSH server, which checks your Tailscale identity instead of a key file. It runs inside a process with root privileges. Think of a doorman who also holds the master key.
Story one. Security researcher Erica Windisch tested Tailscale one point one oh four point two for three days and published a report called Tailworm. Tailscale says the report reached it on Saturday morning, and the researcher published two hours later. The main finding is socket forwarding. Tailscale's own bulletin says its SSH server runs as root, checked socket paths by their text, and then did the work as root. That gave three routes: a connection to a root-only socket, a remote forward that deletes a root-owned socket, and a race where the kernel resolves the path again after the check. Tailscale says an attacker needs a foothold on a device already in the tailnet, with SSH and forwarding both allowed by policy. The fix is version one point one oh four point four, and forwarding now runs as the logged-in user. If you cannot update today, the bulletin documents a service setting that turns forwarding off.
Story two. Last Wednesday I covered the eMudhra certificate keys, and I said the deployed client's trust still needed checking. More than a week after Apple was told, a researcher site run by Dennis Jackson says git, curl and python on a Mac still accept certificates from those intermediates. Apple's own support page describes the split. Safari, Mail and apps on Apple's networking frameworks block the certificates, and have since October nineteenth. But command line tools such as curl, git and python read a certificate file in the system folder, and they skip Apple's block until a future update. The researcher site adds that macOS twenty seven point two, released Monday, did not fix it and undid the manual workaround. Apple's page does say an update can replace that file, and I found no date for the fix. Tailscale's bulletin on these keys, from October twenty first, explains that its client trusts whatever the system store trusts.
If you build on a Mac or run Mac CI runners, run the researchers' check against your own git, then follow Apple's steps, which remove up to two root certificates from that file. Apple warns that can break some sites, and an update can undo it, so check again after every update.
Story three. On Tuesday Discord announced that discussions in Discoverable Servers will become easier to find in web search. Those are its most public servers, with at least a thousand members, and Discord counts more than sixty three thousand of them. Here are the dates. Admin and member controls started rolling out Tuesday. On November sixteenth every Discoverable Server gets a public web page, and automated channel summaries can start appearing on it. From mid December, messages from public channels can show in web search too, without usernames or avatars, if the server's admins allow it.
The defaults matter. If an admin changes nothing, public channels stay on. Members get a switch in Data and Privacy settings. It starts on in most places and off by default in six, including the European Union and the United Kingdom. Teen accounts are excluded, and messages from before mid December do not count. Two details to watch. The member switch covers messages, while channel summaries are generated separately and stay on unless an admin turns them off. And a message sent while the switch was on stays up unless you delete it. If you run a community, open Web Presence in server settings before November sixteenth.
Story four, and I will stick to what is documented. On October twenty sixth I covered the Anthropic filing, which lists a one point five billion dollar settlement with authors. The Stanford Daily reports that professors including Tobias Wolff opted out of that settlement and are suing separately.
According to the Daily, the settlement works out to about three thousand dollars per work, across nearly five hundred thousand works. The opt-out suit asks a jury for statutory damages of up to one hundred fifty thousand dollars per work, fifty times more, plus an order against training on the plaintiffs' books. The ruling underneath is narrower than the headline. Judge Alsup found that training on legally acquired books was fair use, and that building a permanent library from pirated copies was not. The new suits allege pirated copies, and I found no ruling on their claims. In September, the OpenAI LibGen files raised the same question about another lab. If you assemble training data, keep a record of where each file came from. The ruling separated legally acquired books from pirated copies, so the source of the copies is the question you will be asked.
Back to the name. Tailscale says nothing in the report spreads on its own. It calls the path lateral movement, limited to connections the tailnet policy already allows, and only from a device the attacker already holds. The researcher's page replies that the flaws were found with low effort. Both can be true, and the fix is out either way.
Verdict: NEEDS REVIEW — Four live items: update, check, opt out, watch the docket.
Sources
https://tailscale.com/blog/tailscale-ssh-findings-fixes
https://tailscale.com/ssh-investigation-update
https://tailscale.com/security-bulletins
https://tailworm.com/
https://emudhra.we-have-a-problem.com/apple.html
https://support.apple.com/en-us/149555
https://news.ycombinator.com/item?id=50264857
https://news.ycombinator.com/item?id=50271640
https://discord.com/blog/making-content-from-discoverable-servers-easier-to-discover
https://stanforddaily.com/2026/10/27/professors-books-pirated-to-train-claude/
And that's the diff for today. I'm Niko from Axrisi. Merge responsibly.
YouTube · Newsletter · thedailydiff.dev · forward this to the intern who deployed on Friday.