2 ms·
> The vulnerability was: If you pwn the server, you can join a group without being invited, which means subsequent messages would be plaintext to you. However,
by fwdpropaganda 9y ago
> The vulnerability was: If you pwn the server, you can join a group without being invited, which means subsequent messages would be plaintext to you. However, everyone gets notified of a new arrival.
If to you owning server => accessing group is not severe, then you should be happy with Telegram's default encryption: it's run of the mill SSL by default, just not E2E. If you own their servers you can read people's conversations too.
- CiPHPerCoder 9y agoAccessing the group means: 1. Announcing your intrusion 2. Only being able to read what people say after you joined That's a far better security proposition than server operators being able to silently spy on everything you ever send.