Willie Howe retweeted
researcher Erica Windisch is calling it "Tailworm" and i don't think people realize how serious this is
in 3 days of testing there have been 11 Tailscale flaws found in her lab and made public before any fix. not in a year. not in a month. in 3 days
the worst ONE of these would normally be big news on its own
Tailscale SSH: in her lab, one hacked device with SSH access got full control (root) of another server in 0 seconds. it checks the device, never a user password
rogue device: in her lab she stole the key that lets new machines join the private network, then added her own device under the victim's identity
the worm: in her lab it spread on its own to every device the access rules allowed. under a second per jump. no passwords. no stolen keys
experimental app connectors: an approved user could send traffic anywhere the connector can reach, even to cloud server credentials and every Kubernetes service. the network rules never checked the real destination
headscale: if this free self-run server for Tailscale is open to the internet, anyone with no account can crash it. 1,024 tiny sign-ups stop new devices from joining
tailscale serve: one line of setup can open a device's admin controls to other devices on the network
and that's not the whole list
she didn't wait for Tailscale to fix them. she says "infrastructure is vulnerable today". 6 of the 11 are rated high severity
her report says the network turns one ordinary break-in into admin access across all your machines "at machine speed"
if you use Tailscale SSH, run your own headscale server, or use the experimental app connectors you are potentially affected
turn off SSH forwarding. give SSH access one device pair at a time. make device keys expire. lock down app connectors
11 flaws are public now, and Tailscale hasn't posted a security bulletin about them yet
follow me if your company runs on Tailscale. i'm tracking all 11 until they're fixed
Willie Howe retweeted
Should you host the @Ubiquiti UniFi Network Application or use a Cloud Gateway? Team Cloud Gateway for most cases here.
To Host UniFi, Or Not Host UniFi? That's The Question!
youtu.be/3jIEFK_zRoI
Protect 7.3 is in RC. Wait until you see what @Ubiquiti has been up to!
williehowe.com/2026/10/03/un…
Willie Howe retweeted
We’re excited to announce that Grandstream’s UCM Series IP PBX solutions have a certified integration with AttendIA, Jusan’s omnichannel conversational Agentic AI solution.
Read the press release below to learn more about this integration's features. hubs.la/Q04yw49W0
Hey @Leviton - went to Home Depot to get the last two switches I need to replace in our house. I love your lever edge series. Looks like the lever edge regular toggle light switches have been discontinued? Say it ain’t so!?!?
Willie Howe retweeted
GDS Manager 2 is our on-site software platform for managing and monitoring our GDS3720 series of facility access systems. The platform includes comprehensive event logs and interactive maps for simplified device management.
Learn more on our tools page. hubs.la/Q04xHXx70
Willie Howe retweeted
New mark. More speed. Sharper firewalling. 213 fixes.
nfSensei 0.51.164 → 0.51.178 brings VPP fast path, zone-based policy, MAC matching, better diagnostics, routing/SD-WAN work—and a finished identity built around 忍.
blog.nfsensei.org/a-new-mark…
#nfSensei
Willie Howe retweeted
Can a $179 Wi-Fi 7 router really deliver?
We teamed up with @WillieHowe for a hands-on look at the new MikroTik hAP be³ Media.
🎥 Full review:
youtube.com/watch?v=Xk9S4PPT…
#MikroTik #WiFi7 #hAPbe3
Did MikroTik Just Build the Ultimate $179 Wi-Fi 7 Router?
youtu.be/Xk9S4PPTOQ4 @BalticNetworks @mikrotik_com
Willie Howe retweeted
The GWN7672L is our new tri-band Wi-Fi 7 access point, built for small to medium-sized businesses.
✔️ 11 Gbps wireless throughput
✔️ Up to 175-meter coverage range
✔️ 384 Wi-Fi client devices, up to 2500 PPSKs
Visit our product page to learn more. hubs.la/Q04pH08V0
Willie Howe retweeted
Ready to start choosing Grandstream products for your deployment? 💡🔍
Our Product Search Tool allows you to filter by product specifications and capabilities, then compare devices that meet your requirements. hubs.la/Q04pb_Kz0
Willie Howe retweeted
I co-founded pfSense. For the last year I've been building its successor.
If you run pfSense today, you already know the reasons to look around: development you can't influence, a CE edition that feels like an afterthought, FreeBSD driver roulette on modern hardware, and a config workflow where one bad apply on a remote box means a drive.
nfSensei is my answer. Built from scratch in Rust, on Linux, and designed around the things pfSense users actually complain about.
Your config.xml imports. There's an importer that reads your pfSense config, shows you exactly what maps over and what needs attention, then applies it. You don't start from zero.
You can't brick it from the couch. Changes stage as a candidate, diff before apply, validate through the real engines before anything is written, and auto-roll-back if you don't confirm in time. If a config ever fails at boot, the box falls back to the last good one on its own.
The hardware works. Linux base means modern NICs and drivers just work — and the fast path compiles your rules to XDP at 40Gbps.
Automation is native, not scraped. Everything the UI does is a documented API call — about 1,140 of them, with a built-in explorer. Your Ansible finally gets a real interface.
The VPNs are current. WireGuard, IPsec, Tailscale, and self-hosted mesh — your own control plane, your keys — plus post-quantum key exchange where it counts.
The experimental stuff has its own wing. Thirty-plus Labs features behind toggles: WAN bonding that fuses multiple cheap uplinks through a $5 VPS into one resilient pipe, per-flow SLA telemetry with tamper-evident audit chains, GeoDNS that steers traffic by live RTT and load, application-aware QoS, config push to a whole fleet of remote nodes, and an AI assistant on the box that reads your actual interfaces and logs using local models. Toggles are per-browser and can't touch your running config — flip things on, break them, tell me about it. Oh, and there is much more to mention here!
Self-hosted, on your hardware, no cloud account, no subscription.
It's NOW IN ACTIVE BETA (previously alpha) with about 40 testers, and bug reports typically get fixed in days. I want more people who know what pfSense does well and can tell me exactly where nfSensei falls short.
If you are interested in testing please email me: [email protected]. Tell me about your pfSense setup and I'll get you access.
Note: Affiliates and employees of Netgate are not invited.


















