buildOne report1 publisher Tailscale's install script exits on Ubuntu 26.10 because its apt repo has no stonking directory
Tailscale's apt repo returns 404 for Ubuntu 26.10 ('stonking'), so the standard install script refuses to run on a fresh server. A DEV Community author reports the 26.04 ('resolute') repo works as a stopgap.
Reality
- Evidence68
- Adoption
- Not scored
- Hype gap−5
- Incentives
- Not scored
- Confidence66
Andreessen Horowitz led a $38 million Series A for doxx.net, a Miami startup building private networks for AI agents. The cash funds an open beta resting on one disclosed metric, the company's own count of more than 38 million potential threats blocked.
Perspective Coverage
6 publishers
- Builder
- Builder 35%
- Operator
- Operator 30%
- Investor
- Investor 35%
Reality
- Evidence45
- Adoption12
- Hype gap+40
- Incentives75
- Confidence60
Meta launched its personal agent Muse on Tuesday for US adults, and in the company's own description the only party who approves a connector is the person holding the account. Tailscale and Plaid are on the list.
Reality
- Evidence40
- Adoption
- Not scored
- Hype gap+35
- Incentives70
- Confidence55
Kothamine RAT tunnels its commands through Tailscale's tailcat
Malwarebytes found Kothamine, an undocumented Windows RAT hidden in malicious npm packages, that takes its 30-plus commands over Tailscale's tailcat. The encrypted channel leaves no command-and-control domain to block, pushing detection onto the endpoint.
Reality
- Evidence60
- Adoption
- Not scored
- Hype gap+5
- Incentives
- Not scored
- Confidence58
Tailscale doubles its business customers to 40,000 since last November
The Toronto connectivity company's monthly active users have doubled to 2.5 million alongside those accounts, and the enthusiasm coming from Silicon Valley builders has no public revenue, valuation or funding figure to test it against.
Reality
- Evidence42
- Adoption68
- Hype gap+24
- Incentives58
- Confidence45
buildOne report1 publisher Tailscale's default 180-day key expiry ended with the resolver's boot volume on another VM
One Oracle micro VM held Pi-hole, the exit node and the tailnet's only resolver. When its node key came due at 180 days, both clients lost name resolution and every admin path into the box was already closed.
Reality
- Evidence62
- Adoption14
- Hype gap−8
- Incentives25
- Confidence58
buildOne report1 publisher A feature gate in Codex build 9922 hides a cloud runner that drafts its own environment
RuntimeWire's comparison of two shipped Codex desktop builds found a second cloud path whose new environments start at package-manager network access, then take on Tailscale keys, proxy-delivered secrets and OIDC cloud identities.
Reality
- Evidence62
- Adoption8
- Hype gap+9
- Incentives35
- Confidence58
Apollo's Watcher escalates a flagged agent action to a bigger AI before any human sees it
The independent review of the Hugging Face incident needed AI to read its own evidence, and the startups selling AI monitors are building on that premise. Simon Willison says a watched model can try to fool its watcher.
Reality
- Evidence55
- Adoption35
- Hype gap+25
- Incentives80
- Confidence55
Security practitioners put logging and permissions ahead of Amodei's audit plan
Every agent break-out in TechCrunch's account surfaced through a victim or through network traffic, and the security practitioners it quoted want the labs to turn on logs, permissions and session expiry before hiring outside verifiers.
Reality
- Evidence55
- Adoption30
- Hype gap+18
- Incentives72
- Confidence50
Nvidia's PAIR spreads one agent's model calls across whichever home PCs are idle
Nvidia's Apache 2.0 beta seizes the port Ollama or LM Studio was using and forwards each call to whichever machine is free, which makes local throughput a function of how many PCs you own. Hands-on testing found it serving an engine Nvidia does not list.
Reality
- Evidence55
- Adoption15
- Hype gap+10
- Incentives62
- Confidence48
buildOne report1 publisher Tailcat prices Tailscale's control plane by removing it
The open-source data plane does encryption and NAT traversal in userspace with no root and no TUN device, and it stops exactly where identity, policy and reliable relays begin. That boundary is now the buy decision.
Reality
- Evidence55
- Adoption15
- Hype gap+18
- Incentives78
- Confidence52
buildOne report1 publisher After closing port 22, disable Tailscale's 180-day key expiry to avoid server lockout
Putting sshd on a WireGuard tailnet and deleting the public firewall rule is a twenty-minute change. The part worth reviewing is the admin-console toggle that keeps a headless box from logging itself out.
Reality
- Evidence46
- Adoption
- Not scored
- Hype gap+8
- Incentives34
- Confidence52
buildOne report1 publisher Enabling CloudFront VPC Origins deleted the emergency reroute a public origin kept
AWS traced the July 16 CloudFront failure to a capacity limit in one Frankfurt availability zone. The customers it knocked offline had adopted the feature that failed as a security control, not a routing one.
Reality
- Evidence42
- Adoption58
- Hype gap+12
- Incentives55
- Confidence40
buildOne report1 publisher iOS has nowhere to put a proxy setting, so the proxy moves into the network
A Tailscale App Connector fronting a sing-box TUN turns plain TCP into SOCKS5 for any tailnet device. The steering is longest-prefix match, and it fails without complaining.
Reality
- Evidence58
- Adoption10
- Hype gap−8
- Incentives22
- Confidence45
buildOne report1 publisher Tailscale's 19 corrupt SQLite files show single-writer discipline is not corruption detection
Tailscale logged 19 corrupted shard databases in six months, and the first alarm came from a pipeline reading its S3 backups. Using SQLite correctly did not bound the failure.
Publishers:tailscale.com
Reality
- Evidence66
- Adoption58
- Hype gap+14
- Incentives78
- Confidence62
buildOne report1 publisher A VPN server that hosted its own iDRAC turned a failed reboot into a 500km problem
A healthcare admin lost every route to the controller he needed, then got back in through an endpoint agent nobody had designated as management. The lesson is failure domains, not Tailscale.
Reality
- Evidence20
- Adoption10
- Hype gap+35
- Incentives35
- Confidence32
buildOne report1 publisher Firecracker won't run on a Mac, so Encore rebuilt the Linux image toolchain to match
Encore's crackling drives Firecracker on Linux and Apple's hypervisor on macOS. Getting one set of images to boot on both meant re-implementing much of what Docker and a Linux host do for free.
Publishers:encore.dev
Reality
- Evidence56
- Adoption30
- Hype gap+12
- Incentives68
- Confidence60
buildOne report1 publisher A redaction placeholder became a primary key, and it closed other people's promises
One catch-all regex rewrote long task slugs to TOKEN_REDACTED, a ledger keyed accounts on that constant, and a single done line marked two owners' work finished.
Reality
- Evidence58
- Adoption
- Not scored
- Hype gap+12
- Incentives22
- Confidence55
buildOne report1 publisher Tailscale in unprivileged LXC: the green dot that answers nothing
The standard --tun=userspace-networking advice produces a tailnet member you cannot SSH into. The repair is two lines of container config, not a privileged container.
Reality
- Evidence52
- Adoption
- Not scored
- Hype gap+14
- Incentives30
- Confidence55