5 ms·
I've looked without success for external audit reports of either Tailscale and Netbird, like Mullvad gets. While I don't approve of the sort of auditor box-tick
by gnufx 8mo ago
I've looked without success for external audit reports of either Tailscale and Netbird, like Mullvad gets. While I don't approve of the sort of auditor box-ticking we get at work, it would be reassuring to see a report from a proper security consultancy.
- somepleb 8mo agoNetbird has supposedly done a penetration test, but it is only supplied upon request [0]. I haven't bothered trying to get my hands on it since I don't use their product. I don't agree with gatekeeping the results instead of making them public. NetBird should also consider publishing an SBOM, similar to what Defguard does.[1]. [0] https://trust.netbird.io/ https://trust.netbird.io/ [1] https://defguard.net/sbom/ https://defguard.net/sbom/
- gnufx 8mo agoOh, I hadn't found that. Yes, it seems strange not to publicize something like that to give users confidence (assuming the audit/pentest isn't damning). It doesn't have to have been perfect initially, as long as appropriate fixes were made.