Ukulungiswa kwe-Tailworm ye-Tailscale, i-Mac git nezitifiketi ze-eMudhra, ushintsho lokusesha kuwebhu kwe-Discord kanye namasuti ababhali ngokumelene ne-Anthropic: izindaba ezine zabathuthukisi ku-Daily Diff eyodwa

Lokho okuhlanganiswa yile vidiyo

• I-Tailscale (okuthunyelwe kubhulogi, Okthoba 28, 2026) ithi yamukele umbiko we-Tailworm, oshicilelwe umcwaningi u-Erica Windisch we-Cyberdione Labs, ekuseni ngoMgqibelo, Okthoba 24, nokuthi umcwaningi wawushicilela emahoreni amabili kamuva. Izingosi ezihlolwe kwakuyi-Tailscale 1.104.2 ne-headscale 0.29.5. Ukulungiswa kwe-Tailscale kuseku-version 1.104.4, ngezibukeli ezine zokuphepha ezinenombolo TS-2026-014 kuya ku-TS-2026-017.
• Isaziso se-Tailscale mayelana nokudlulisa kwe-SSH Unix socket sithi iseva ye-SSH kunqubo ye-tailscaled enelungelo le-root iqinisekise izindlela zesokhethi ngokusho kwamagama kodwa yenza imisebenzi njenge-root, okuvumele ukudayela okunezilungelo ngokudlulisa kwendawo, ukusula amasokhethi aphethwe i-root ngokudlulisa okukude, kanye nomjaho lapho i-kernel ixazulula kabusha indlela ngemuva kokuhlola. Izinhloso ezifinyelelekayo zihlanganisa i-Docker socket kanye ne-tailscaled local API. I-Tailscale manje idlulisa amasokhethi njengomsebenzisi oqinisekisiwe. Kuze kube kusha, ukusetha i-TS_SSH_DISABLE_FORWARDING variable yemvelo ebhaliwe ku-1 kukhubaza ukudlulisa ngaphandle kokukhubaza i-Tailscale SSH.
• I-Tailscale ithi ukuxhaphazwa kudinga indawo esivele ikhona kudivayisi egunyaziwe ku-tailnet, ngokufinyelela kwe-SSH nokudlulisa okuvunyelwe umgomo, nokuthi indlela ukuhamba okuphansi okukhawulelwe ekuxhumaneni okuvunyelwe umgomo, futhi akuchazi isikelemu esizizalelayo. Ikhasi lomcwaningi lithi iziphambeko zatholakala ngomzamo omncane.
• Isayithi lomcwaningi eliqhutshwa u-Dennis Jackson nabanikeli bomphakathi lithi i-Apple yazisiwe ngesigameko sesitifiketi esiphakathi se-eMudhra ngo-Okthoba 17 nokuthi, kusukela ngo-Okthoba 28, i-git, i-curl ne-python3 ezithunyelwe nge-macOS zisazamukela izitifiketi eziphuliwe; liphinde lithi i-macOS 27.2, ekhishwe ngo-Okthoba 26, ayizange ilungise le nkinga futhi yachitha izixazululo zezandla. Ikhasi lokusekela le-Apple liqinisekisa ukuhlukaniswa: kusukela ngo-Okthoba 19 i-Safari, i-Mail nezinhlelo zokusebenza kuma-framework e-Apple ziyawavimba izitifiketi, kuyilapho amathuluzi afana ne-curl, i-git, i-python3, i-ruby, i-perl ne-openssl ahlola /etc/ssl/cert.pem asengawamukela kuze kube isibuyekezo esizayo. Ikhasi le-Apple linikeza izinyathelo zokuzikhethela zezandla futhi liyaxwayisa ukuthi isibuyekezo singashintsha ifayela.
• Okuthunyelwe kubhulogi kwe-Discord (Okthoba 27, 2026) kuthisha zonke Izinkonzo Ezitholakala Ngokushesha, ezidinga okungenani amalungu angu-1,000 futhi anenani elingaphezu kwama-63,000, zizoba nekhasi leWebhu leseva elisemthethweni kusukela ngoNovemba 16, 2026, ngezifinyezo zesiteshi ezizenzakalelayo ezikwazi ukuqala ngosuku olufanayo. Kusukela maphakathi noZibandlela 2026, imilayezo evela eziteshini zomphakathi ezivunyelwe abaphathi ingavela Emakhasini Ewebhu Weseva nasekusesheni kuwebhu ngaphandle kwamagama abasebenzisi noma ama-avatar. Uma abaphathi bengashintshi lutho, iziteshi zomphakathi zihlala zivuliwe. Izilawuli zabaphathi (Izilungiselelo Zeseva, Ukuba Khona Kuwebhu) kanye nokushintsha kwamalungu (Izilungiselelo Zomsebenzisi, Idatha Nobumfihlo) kuyatholakala manje; isilungiselelo samalungu sicinyiwe ngokuzenzakalela e-EU, UK, Canada, Brazil, Australia naseNingizimu Korea, futhi ama-akhawunti entsha awafakiwe.
• I-Stanford Daily (Okthoba 27, 2026) ibika ukuthi oprofesa abahlanganisa u-Tobias Wolff baphume esivumelwaneni sika-$1.5 billion sase-Bartz v. Anthropic, esihlanganisa imisebenzi ecishe ibe ngu-500,000 ebhalisiwe nge-$3,000 ngomsebenzi ngamunye, futhi bamangalela i-Anthropic ngokwehlukana, befuna ukulalelwa ngamajaji, izinxephezelo zomthetho ezifika ku-$150,000 ngomsebenzi ngamunye kanye nomyalelo wokuvimbela ukuqeqeshwa ezincwadini zabo. Isihloko sifingqa isinqumo sangaphambili sikaJaji u-William Alsup njengokuthola ukuqeqeshwa ezincwadini ezitholwe ngokusemthethweni kusetshenziswa ngendlela efanele futhi ukwakha umtapo wezincwadi ohlala njalo kumakhophi aphangiwe kungafaneleki. Amasuti amasha angamasolwa; akukho sinqumo esitholakele ezimangalomweni zabo.

Umbhalo obhaliwe ohunyushwe

Kuhunyushwe kusuka ekulandiseni kokuqala kwesiNgisi. Umsindo namazwibela atholakalayo alawulwa yi-YouTube.

Ukuvula okubandayo: iseshini ye-Tailscale SSH nama-socket e-root-kuphela

0:00 Ukungena nge-Tailscale SSH kukugcina ngaphakathi kwe-akhawunti yakho yomsebenzisi. Umbiko oshicilelwe ngoMgqibelo uchaza izikhathi zokufinyelela kuma-socket kuphela i-root okufanele ifinyelele, futhi i-Tailscale ikhiphe ukulungiswa kuleli sonto. Kule vidiyo, izindaba ezine. Yini iseshini ye-Tailscale SSH engakufinyelela? Kungani i-git ku-Mac isathemba izitifiketi ezihoxisiwe? Yini ezoshintsha kumaseva omphakathi e-Discord ngoNovemba ishumi nesithupha? Futhi yini ababhali abayifunayo kumasuti abo ngokumelene ne-Anthropic?

0:27 Kukhona futhi isizathu esenza i-Tailscale ikuhoxise igama lalo mbiko. Ngizokugcina ekugcineni. NgoLwesithathu, Okthoba amashumi amabili nesishiyagalombili, futhi lokhu yi-The Daily Diff. I-Tailscale ixhuma imishini yakho kwinethiwekhi eyodwa yangasese, futhi i-Tailscale SSH iyiseva yayo ye-SSH eyakhelwe ngaphakathi, ehlola i-Tailscale yakho ubunikazi esikhundleni sefayela lokhiye. Isebenza ngaphakathi kwenqubo enamalungelo e-root. Cabanga ngomlindi ophethe nokhiye oyinhloko.

Indaba yokuqala: lokho iseshini ye-Tailscale SSH engakufinyelela

0:50 Indaba yokuqala. Umcwaningi wezokuphepha u-Erica Windisch uhlole i-Tailscale eyodwa kuya kweyodwa kuya kwayisithupha okukhethwa kukho okubili izinsuku ezintathu futhi washicilela umbiko obizwa nge-Tailworm. I-Tailscale ithi umbiko wayifinyelela ngoMgqibelo ekuseni, futhi umcwaningi wawushicilela emahoreni amabili kamuva. Okutholakele okuyinhloko ukudluliswa kwesokhethi. Isaziso se-Tailscale sithi iseva yayo ye-SSH isebenza njenge-root, yahlola izindlela zesokhethi ngombhalo wayo, yabe isenza umsebenzi njenge-root. Lokho kwakunikeza izindlela ezintathu: ukuxhumana ne-socket ye-root-kuphela,

1:16 ukudlulisa okukude okususa isokhethi eliphethwe i-root, kanye nomjaho lapho i-kernel ixazulula indlela futhi ngemuva kokuhlola. I-Tailscale ithi umhlaseli udinga indawo yokubamba kudivayisi esivele ikwi-tailnet, nge-SSH nokudlulisa kokubili kuvunyelwe inqubomgomo. Ukulungiswa kunguqulo eyodwa kuya kweyodwa kuya kweyisishiyagalombili kuya kwezine, futhi ukudlulisa manje kusebenza njenge umsebenzisi ongene ngemvume. Uma ungakwazi ukubuyekeza namuhla, isaziso sibhala isilungiselelo senkonzo esivula

1:42 ukudlulisa kucisha. Indaba yesibili.

Indaba yesibili: kungani i-git ku-Mac isathemba i-eMudhra

1:44 NgoLwesithathu olwedlule ngahlanganisa izinkinobho zesitifiketi se-eMudhra, futhi ngathi ukwethenjwa kweklayenti elishiyiwe kusadinga ukuhlolwa. Ngemuva kwesonto lonke ngemuva kokuthi i-Apple yatshelwe, isayithi lomcwaningi eliqhutshwa u-Dennis Jackson lithisha i-git, i-curl ne-python ku-Mac zisazamukela izitifiketi ezivela kulabo abaqhubekayo. Ikhasi lokusekela le-Apple lichaza ukuhlukaniswa. ISafari, i-Mail nezinhlelo zokusebenza ku- Ama-framework wokuxhumana enethiwekhi e-Apple avimba izitifiketi, futhi kusukela ngo-Okthoba ishumi nesishiyagalolunye.

2:08 Kodwa amathuluzi omgwaqo womyalo afana ne-curl, i-git ne-python afunda ifayela lesitifiketi ku- ifolda yesistimu, futhi ayasikhipha isivimbelo se-Apple kuze kube isibuyekezo esizayo. Isayithi lomcwaningi liyanezela ukuthi i-macOS amashumi amabili nesikhombisa okukabili, ekhishwe ngoMsombuluko, ayizange ikulungise futhi yachitha ukuxazulula ngezandla. Ikhasi le-Apple lithi isibuyekezo singashintsha lelo fayela, futhi angitholanga usuku lokulungiswa. Isaziso se-Tailscale ngalezi zikhiye, kusukela ngo-Okthoba amashumi amabili nanye, ichaza ukuthi iklayenti layo lithemba noma yini isitolo sesistimu esiyethenjayo.

2:38 Uma wakha ku-Mac noma usebenzisa Ama-Mac CI runners, sebenzisa ukuhlolwa kwabacwaningi ngokumelene i-git yakho, bese ulandela izinyathelo ze-Apple, ezisusa izitifiketi ezifika ezimbili ze-root kulolofayela. I-Apple iyaxwayisa ukuthi lokho kungaphula ezinye izindawo, futhi isibuyekezo singakuchitha, ngakho hlola futhi ngemuva kwesibuyekezo ngasinye.

Indaba yesithathu: I-Discord idlulisa amaseva omphakathi ekusesheni kuwebhu

2:54 Indaba yesithathu. NgoLwesibili i-Discord yamemezela ukuthi izingxoxo ku-Discoverable Amaseva azoba lula ukuwathola ekusesheni kuwebhu. Lawana ngamaseva ayo omphakathi kakhulu, anamalungu okungenani ayinkulungwane, futhi i-Discord ibala ngaphezu kwamashumi ayisithupha nantathu ezinkulungwane zawo. Nawa amadethi. Izilawuli zabaphathi namalungu zaqala ukukhishwa ngoLwesibili. NgoNovemba ishumi nesithupha wonke i-Discoverable Server ithola ikhasi lewebhu lomphakathi, futhi izifinyezo zesiteshi ezizenzakalelayo zingaqala ukuvela kulo.

3:18 Kusukela maphakathi noZibandlela, imilayezo evela eziteshini zomphakathi ingavela ekusesheni kuwebhu nayo, ngaphandle kwamagama abasebenzisi noma ama-avatar, uma abaphathi beseva beyivumela. Izilungiselelo ezizenzakalelayo zibalulekile. Uma umphathi engashintshi lutho, iziteshi zomphakathi zihlala zivuliwe. Amalungu athola iswishi kuzilungiselelo zeDatha Nobumfihlo. Iqala ivuliwe ezindaweni eziningi futhi icishiwe ngokuzenzakalela ezindaweni eziyisithupha, kuhlanganise ne-European Union kanye ne-United Kingdom. Ama-akhawunti entsha awakhiphiwe, futhi imilayezo evela ngaphambi kwaphakathi noZibandlela ayibali.

3:48 Imifanekiso emibili okufanele uyibuke. Iswishi yelungu ihlanganisa imilayezo, kuyilapho izifinyezo zesiteshi zakhiwe ngokwehlukana futhi zihlala zivuliwe ngaphandle uma umphathi ezicisha. Futhi umlayezo othunyelwe ngenkathi iswishi ivuliwe uhlala phezulu ngaphandle uma uwususa. Uma usebenzisa umphakathi, vula Ukuba Khona Kuwebhu kuzilungiselelo zeseva ngaphambi kukaNovemba ishumi nesithupha. Indaba yesine, futhi ngizobambelela kulokho okubhalwe phansi.

Indaba yesine: ababhali, i-Claude kanye nesiko lesibili

4:08 Ngo-Okthoba amashumi amabili nesithupha ngahlanganisa ukufakwa kwe-Anthropic, okubala isivumelwano sika-$1.5 billion nababhali. I-Stanford Daily ibika ukuthi oprofesa abahlanganisa u-Tobias Wolff baphume ku- leso sivumelwano futhi bamangalela ngokwehlukana. Ngokusho kwe-Daily, isivumelwano sisebenza cishe izinkulungwane ezintathu zamadola ngomsebenzi ngamunye, ezindabeni ezingamakhulu amahlanu ezinkulungwane zemisebenzi. Icala lokungaphumi licela ijaji izinxephezelo zomthetho ezifika kwikhulu namashumi amahlanu izinkulungwane zamadola ngomsebenzi ngamunye, amashumi amahlanu izikhathi ngaphezulu, kanye nomyalelo wokuvimbela ukuqeqeshwa kuma

4:37 izincwadi zabamangaleli. Isinqumo esingaphansi sincane kunesihloko. UJaji Alsup uthole ukuthi ukuqeqeshwa ezincwadini ezitholwe ngokusemthethweni kwakusemthethweni, nokuthi ukwakha umtapo wezincwadi ohlala njalo kumakhophi aphangiwe kwakungafaneleki. Amasuti amasha asola amakhophi aphangiwe, futhi angitholanga sinqumo ngezimangalo zabo. NgoSepthemba, amafayela e-OpenAI LibGen aphakamisa umbuzo ofanayo mayelana nomunye ilebhu. Uma uhlanganisa idatha yokuqeqesha, gcina irekhodi lokuthi ifayela ngalinye livela kuphi. Isinqumo sahlukanisa izincwadi ezitholwe ngokusemthethweni kumakhophi aphangiwe,

5:07 ngakho umthombo wamakhophi yilona mbuzo ozobuzwa. Emuva egameni. I-Tailscale ithi akukho lutho embikweni olusabalala ngokwalo. Ikubiza indlela ngokuhamba okungaqondile, okulinganiselwe ekuxhumaneni inqubomgomo ye-tailnet esivele ivumela, futhi kuphela kusuka kudivayisi umhlaseli aseyibambe. Ikhasi lomcwaningi liphendula ngokuthi iziphambeko zatholwa ngomzamo omncane. Kokubili kungaba yiqiniso, futhi ukulungiswa kuphumile noma kunjalo. Uma uthanda ukukufunda lokhu kunokungizwa ngikusho, umehluko ufika ebhokisini lakho le-imeyili

5:31 njalo ekuseni, mahhala ku-daily diff dot dev, isixhumanisi ngezansi. Ngakho isinqumo sanamuhla sithi KUDINGEKA UKUHLOLA KABUSHA.

Isinqumo: KUDINGEKA UKUHLOLA KABUSHA

5:37 Ngingakuhlola kabusha ngoba ukulungiswa kwe-Tailscale kuphumile kodwa amaseva akho awabuyekezwanga okwamanje, igebe lomugqa womyalo we-Apple lisavulekile, izilungiselelo ezizenzakalelayo ze-Discord zivuliwe ngoNovemba ishumi nesithupha, futhi izimangalo zababhali ziseyizinsolo. Futhi yilo mehluko wanamuhla. Ngingu-Niko wase-Axrisi. Hlanganisa ngokuzibopha.

Imithombo

1. Tailscale SSH: Findings and fixesTailscale
2. Tailscale SSH: Investigation and remediation updateTailscale
3. Tailscale security bulletinsTailscale
4. Tailworm: Tailscale vulnerabilitiesCyberdione Labs (Erica Windisch)
5. Apple's git still trusts the compromised eMudhra certificatesDennis Jackson and contributors
6. About the compromised eMudhra intermediate CAsApple Support
7. Making Content from Discoverable Servers Easier to DiscoverDiscord
8. Anthropic illegally trained Claude with Stanford professors' booksThe Stanford Daily