If Telegram had hired any decent security company to go over their design, then this bug would have been caught, because this is a rookie mistake. One of the mo

If Telegram had hired any decent security company to go over their design, then this bug would have been caught, because this is a rookie mistake. One of the most basic security requirements for any app is that all network traffic is protected via SSL, so that would've been one of the first things that a decent appsec company would've checked. Telegram could hire an appsec company to analyze their design, but they're choosing not to.