alt Hacker News> I use it but feel uncomfortable, that it has large attack surface and LLMs will find exploits in it
Doesn't this apply to any application you use? How would it be different with plain wireguard?
Replies
traceroute66 • yesterday at 8:47 PM
> How would it be different with plain wireguard?
Seriously ?
You do realise that of all the security tools on the planet, plain wireguard most likely has the smallest attack surface of them all, right ?
The problem here is as the other poster said. Tailscale is a security tool and yet the guys at Tailscale seem to be insistent on dumping everything INCLUDING the kitchen sink into it as a "feature".
That sort of attitude is not going to end well. You end up with a large bloated code base, which equals large attack surface.
➕ show 1 reply
No. If software is small enough, it can be proven.
There is formal verification of the protocol and aspects of code:
https://www.wireguard.com/formal-verification/
The code is small enough that can be reviewed.