3 ms·
> Telegram has, according to Reuters, been actively compromised by people working for oppressive regimes (Iran, in particular). I just wanted to add some deta
by codedokode 10y ago
> Telegram has, according to Reuters, been actively compromised by people working for oppressive regimes (Iran, in particular).
I just wanted to add some details: someone checked the Iranian phone numbers range at Telegram servers and learned which of them are registred with Telegram. Message contents or contact lists were not obtained.
I guess this attack could be done with other apps that use phone numbers and phone contact lists for identification.
- haffenloher 10y agoI think tptacek was talking about actual takeovers of Telegram accounts. AFAIK there have been documented cases of this in Iran and Russia. See e.g. https://www.fredericjacobs.com/blog/2016/01/14/sms-login/ https://www.fredericjacobs.com/blog/2016/01/14/sms-login/
- codedokode 10y agoThen it is a serious problem for Telegram and any app that relies on SMS or some phone identity to restore access to an account.
- jhasse 10y agoNot a problem for Telegram, as you can protect your account with a password.
- wruza 10y agoTelegram sends activation code to known devices, no sms (and I don't remember when it happened, maybe 4 years ago, probably for all other competitors). Also creators of telegram told everyone to use secret chats if conversations are secret to ensure p2p and forward secrecy. And to check key fingerprints to identify peers. As usual, security threads consist of ancient beliefs, non-users and stories of low-conscious people using high-tech software. And there is always someone who mentions whatsapp as an alternative. Things like wickr are not even mentioned here.
- jhasse 10y agoPrivate chats and your contact list can't be accessed by accessing your Telegram account though.
- Aoyagi 10y agoNothing in that article proves that the accounts were actually directly hacked or mentions whether they had 2FA enabled or not.