Ubiquiti Guru - Grandstream Certified Expert - Grandstream Certified Trainer - Synology Guru - Owner of Willie Howe Technology

Peoria, IL
Joined June 2009
Willie Howe retweeted
researcher Erica Windisch is calling it "Tailworm" and i don't think people realize how serious this is in 3 days of testing there have been 11 Tailscale flaws found in her lab and made public before any fix. not in a year. not in a month. in 3 days the worst ONE of these would normally be big news on its own Tailscale SSH: in her lab, one hacked device with SSH access got full control (root) of another server in 0 seconds. it checks the device, never a user password rogue device: in her lab she stole the key that lets new machines join the private network, then added her own device under the victim's identity the worm: in her lab it spread on its own to every device the access rules allowed. under a second per jump. no passwords. no stolen keys experimental app connectors: an approved user could send traffic anywhere the connector can reach, even to cloud server credentials and every Kubernetes service. the network rules never checked the real destination headscale: if this free self-run server for Tailscale is open to the internet, anyone with no account can crash it. 1,024 tiny sign-ups stop new devices from joining tailscale serve: one line of setup can open a device's admin controls to other devices on the network and that's not the whole list she didn't wait for Tailscale to fix them. she says "infrastructure is vulnerable today". 6 of the 11 are rated high severity her report says the network turns one ordinary break-in into admin access across all your machines "at machine speed" if you use Tailscale SSH, run your own headscale server, or use the experimental app connectors you are potentially affected turn off SSH forwarding. give SSH access one device pair at a time. make device keys expire. lock down app connectors 11 flaws are public now, and Tailscale hasn't posted a security bulletin about them yet follow me if your company runs on Tailscale. i'm tracking all 11 until they're fixed
14
21
7
199
34,527
Willie Howe retweeted
Somewhere, a CTO just found out their servers still run PHP 5.6 💀
149
1,319
222
8,855
527,164
1
40
3
258
3,974
Should you host the @Ubiquiti UniFi Network Application or use a Cloud Gateway? Team Cloud Gateway for most cases here. To Host UniFi, Or Not Host UniFi? That's The Question! youtu.be/3jIEFK_zRoI
3
490
We’re excited to announce that Grandstream’s UCM Series IP PBX solutions have a certified integration with AttendIA, Jusan’s omnichannel conversational Agentic AI solution.   Read the press release below to learn more about this integration's features. hubs.la/Q04yw49W0
1
5
273
Hey @Leviton - went to Home Depot to get the last two switches I need to replace in our house. I love your lever edge series. Looks like the lever edge regular toggle light switches have been discontinued? Say it ain’t so!?!?
1
3
863
JUST IN: OpenAI and Anthropic reportedly exaggerated AI security threats to push the government to protect their market position
5
126
3,609
GDS Manager 2 is our on-site software platform for managing and monitoring our GDS3720 series of facility access systems. The platform includes comprehensive event logs and interactive maps for simplified device management.   Learn more on our tools page. hubs.la/Q04xHXx70
1
4
244
Willie Howe retweeted
284
1,059
196
9,084
394,585
Willie Howe retweeted
New mark. More speed. Sharper firewalling. 213 fixes. nfSensei 0.51.164 → 0.51.178 brings VPP fast path, zone-based policy, MAC matching, better diagnostics, routing/SD-WAN work—and a finished identity built around 忍. blog.nfsensei.org/a-new-mark… #nfSensei
2
6
1
60
3,393
Willie Howe retweeted
A server rack has 4 stages of life: 1. Empty 2. We have plenty of space. 3. Who installed this? 4. DON’T TOUCH ANYTHING True?
5
1
18
1,154
Can a $179 Wi-Fi 7 router really deliver? We teamed up with @WillieHowe for a hands-on look at the new MikroTik hAP be³ Media. 🎥 Full review: youtube.com/watch?v=Xk9S4PPT… #MikroTik #WiFi7 #hAPbe3
1
4
243
The GWN7672L is our new tri-band Wi-Fi 7 access point, built for small to medium-sized businesses. ✔️ 11 Gbps wireless throughput ✔️ Up to 175-meter coverage range ✔️ 384 Wi-Fi client devices, up to 2500 PPSKs   Visit our product page to learn more. hubs.la/Q04pH08V0
1
8
308
Ready to start choosing Grandstream products for your deployment? 💡🔍 Our Product Search Tool allows you to filter by product specifications and capabilities, then compare devices that meet your requirements. hubs.la/Q04pb_Kz0
1
5
286
Willie Howe retweeted
I co-founded pfSense. For the last year I've been building its successor. If you run pfSense today, you already know the reasons to look around: development you can't influence, a CE edition that feels like an afterthought, FreeBSD driver roulette on modern hardware, and a config workflow where one bad apply on a remote box means a drive. nfSensei is my answer. Built from scratch in Rust, on Linux, and designed around the things pfSense users actually complain about. Your config.xml imports. There's an importer that reads your pfSense config, shows you exactly what maps over and what needs attention, then applies it. You don't start from zero. You can't brick it from the couch. Changes stage as a candidate, diff before apply, validate through the real engines before anything is written, and auto-roll-back if you don't confirm in time. If a config ever fails at boot, the box falls back to the last good one on its own. The hardware works. Linux base means modern NICs and drivers just work — and the fast path compiles your rules to XDP at 40Gbps. Automation is native, not scraped. Everything the UI does is a documented API call — about 1,140 of them, with a built-in explorer. Your Ansible finally gets a real interface. The VPNs are current. WireGuard, IPsec, Tailscale, and self-hosted mesh — your own control plane, your keys — plus post-quantum key exchange where it counts. The experimental stuff has its own wing. Thirty-plus Labs features behind toggles: WAN bonding that fuses multiple cheap uplinks through a $5 VPS into one resilient pipe, per-flow SLA telemetry with tamper-evident audit chains, GeoDNS that steers traffic by live RTT and load, application-aware QoS, config push to a whole fleet of remote nodes, and an AI assistant on the box that reads your actual interfaces and logs using local models. Toggles are per-browser and can't touch your running config — flip things on, break them, tell me about it. Oh, and there is much more to mention here! Self-hosted, on your hardware, no cloud account, no subscription. It's NOW IN ACTIVE BETA (previously alpha) with about 40 testers, and bug reports typically get fixed in days. I want more people who know what pfSense does well and can tell me exactly where nfSensei falls short. If you are interested in testing please email me: [email protected]. Tell me about your pfSense setup and I'll get you access. Note: Affiliates and employees of Netgate are not invited.
149
315
29
2,661
191,023