Crucial vulnerability in Telegram Leaks User Ip dresses ByNitish Singh-October 1 2018.426 Figure 1 Picture Courtesy of Telegram A weakness has been found due to a voice call flaw in the Telegram message app. User Ip addresses appeared in the logs that were stored for hours on telegram servers instead of being encrypted. Also users had no option to turn off P2P which could have prevented the problem. .427 Figure 2 Photo Courtesy of Bleeping Computer Telegram has already addressed this issue, and Eur 2000 was awarded to the researcher who noticed the issue. The messaging app released an official statement “We found the problem our tester had, and fixed it. It turns out the Api did not return any value for the option during the sign in process. Then the right default value returned immediately after the user was signed into the Api. But refreshing this setup could take up to several hours for the client. So before we fixed this, the apps could display “everyone” after a fresh login in the settings for an hour or two.”.428.428 Figure 3 Bleeping Computer Image Courtesy as stated in the previous thread. I’m sorry there is something not right here. — Lawrence Abrams (@LawrenceAbrams) September 29, 2018 Edition of the latest 1.3.17 beta and 1.4 versions of the app has been fixed. Users were asked to update the app and move to Settings> Confidentiality and Protection> Calls> Peer-To-Peer Choosing the Nobody menu option would prohibit the use of P2P technology for calls to safeguard users.

Crucial vulnerability in Telegram Leaks User Ip dresses ByNitish Singh-October 1 2018.426 Figure 1 Picture Courtesy of Telegram A weakness has been found due to a voice call flaw in the Telegram message app. User Ip addresses appeared in the logs that were stored for hours on telegram servers instead of being encrypted. Also users had no option to turn off P2P which could have prevented the problem. .427 Figure 2 Photo Courtesy of Bleeping Computer Telegram has already addressed this issue, and Eur 2000 was awarded to the researcher who noticed the issue. The messaging app released an official statement “We found the problem our tester had, and fixed it. It turns out the Api did not return any value for the option during the sign in process. Then the right default value returned immediately after the user was signed into the Api. But refreshing this setup could take up to several hours for the client. So before we fixed this, the apps could display “everyone” after a fresh login in the settings for an hour or two.”.428.428 Figure 3 Bleeping Computer Image Courtesy as stated in the previous thread. I’m sorry there is something not right here. — Lawrence Abrams (@LawrenceAbrams) September 29, 2018 Edition of the latest 1.3.17 beta and 1.4 versions of the app has been fixed. Users were asked to update the app and move to Settings> Confidentiality and Protection> Calls> Peer-To-Peer Choosing the ‘ Nobody ‘ menu option would prohibit the use of P2P technology for calls to safeguard users.