Forwarded from Pavel Durov
Some media reported on a “massive” hacker attack on Telegram in Iran. Here's what really happened:
https://tg-me.sbs/blog/15million-reuters
https://tg-me.sbs/blog/15million-reuters
Telegram
Keep Calm and Send Telegrams!
Some media reported on a "hacker attack" on Telegram in Iran. Here's what really happened.
Telegram 3.11 - New features:
✳️ Trending Stickers
✳️ Personal storage (cloud)
✳️ Group Previews
✳️ Android Camera
Official announcement at Telegram Blog
✳️ Trending Stickers
✳️ Personal storage (cloud)
✳️ Group Previews
✳️ Android Camera
Official announcement at Telegram Blog
Telegram
Trending Stickers, Storage and More
Trending Stickers, personal storage and more in the new Telegram update.
🔥 Official patch notes - version 3.11:
- Trending stickers. Check out and install noteworthy sticker packs from the new tab in Settings.
- Archived stickers. Unused stickers are now archived automatically when you go over the 200 limit.
- Group previews. Preview groups before joining them via invite link – see who else is in the group before joining.
- Personal storage. Keep messages, media and any other stuff in the new storage chat with yourself, accessible through the redesigned contacts screen.
- New improved camera interface (4.1.+).
- Preview bot content before sending (4.1.+).
- Download large media and files 2-4x times faster.
ℹ️ @geeksChannel
- Trending stickers. Check out and install noteworthy sticker packs from the new tab in Settings.
- Archived stickers. Unused stickers are now archived automatically when you go over the 200 limit.
- Group previews. Preview groups before joining them via invite link – see who else is in the group before joining.
- Personal storage. Keep messages, media and any other stuff in the new storage chat with yourself, accessible through the redesigned contacts screen.
- New improved camera interface (4.1.+).
- Preview bot content before sending (4.1.+).
- Download large media and files 2-4x times faster.
ℹ️ @geeksChannel
▶️ Telegram TIP
You can edit your own messages (the ones sent to "chat with yourself") whenever you want.
The 2 days restriction to edit messages doesn't work here.
ℹ️ @geeksChannel
You can edit your own messages (the ones sent to "chat with yourself") whenever you want.
The 2 days restriction to edit messages doesn't work here.
ℹ️ @geeksChannel
🚀 Today we would like to show you TgChans.com: An automatical Telegram channels database with accurated TOP channels lists.
TgChans has been developed by Roman, a php-coder and telegram-user from Russia/Moscow.
How it works? TgChans engine search @usernames in channel posts and joins the new channels to search for more @usernames (like googlebot crawler). They also detect channels post language with YandexTranslatorAPI.
They got 35.000 channels in the database and every day they add 500-1000 new channels.
The channels stats (members, description, title, photo) are updated every 1-5 days.
ℹ️ More info @tgchanscom | TgChans.com
TgChans has been developed by Roman, a php-coder and telegram-user from Russia/Moscow.
How it works? TgChans engine search @usernames in channel posts and joins the new channels to search for more @usernames (like googlebot crawler). They also detect channels post language with YandexTranslatorAPI.
They got 35.000 channels in the database and every day they add 500-1000 new channels.
The channels stats (members, description, title, photo) are updated every 1-5 days.
ℹ️ More info @tgchanscom | TgChans.com
Here you can take a look to the TOP channels:
📊 Global TOP Channels list
🇬🇧 TOP 100 English channels
🇪🇸 TOP 100 Spanish channels
🇮🇹 TOP 100 Italian channels
🇩🇪 TOP 100 German channels
🇷🇺 TOP 100 Russian channels
@geeksChannel is the 31st channel of the English TOP, awesome!
📊 Global TOP Channels list
🇬🇧 TOP 100 English channels
🇪🇸 TOP 100 Spanish channels
🇮🇹 TOP 100 Italian channels
🇩🇪 TOP 100 German channels
🇷🇺 TOP 100 Russian channels
@geeksChannel is the 31st channel of the English TOP, awesome!
✳️ TELEGRAM | SECURITY ✳️
▶️ Security researchers have found a vulnerability that could allow attackers to send massive messages on Telegram bypassing its limitations.
Due to a programming error, a sender can gain control of the size of messages and send them with arbitrary length: Ghaf and his fellow researchers were able to send a message with 30000 bytes, exceeding the 4096 byte limit, and another which was empty breaching the one byte minimum.
You can see the Proof of Concept messages at @poc_sadghaf channel: That includes the 30000 bytes long text message and a second one empty.
🎥 Youtube: Proof of Concept
💡 Original Source: Sad Ghaf Security Team
#security #telegram #researchers #vulnerability
ℹ️ @geeksChannel
▶️ Security researchers have found a vulnerability that could allow attackers to send massive messages on Telegram bypassing its limitations.
Due to a programming error, a sender can gain control of the size of messages and send them with arbitrary length: Ghaf and his fellow researchers were able to send a message with 30000 bytes, exceeding the 4096 byte limit, and another which was empty breaching the one byte minimum.
You can see the Proof of Concept messages at @poc_sadghaf channel: That includes the 30000 bytes long text message and a second one empty.
🎥 Youtube: Proof of Concept
💡 Original Source: Sad Ghaf Security Team
#security #telegram #researchers #vulnerability
ℹ️ @geeksChannel
Telegram
SadGhaf
POC
Pavel Durov's answer to the vulnerability:
They started talking about it (the vulnerability) recently after being quiet for some time, but couldn't show any proofs or something that confirms vulnerability.
There has always been server restriction for sent messages. Their outcoming message looked big only because their client app showed it that way. If you look at it in another app, both sender and recipient will see this message cut.
They though that they were sending megabytes. When in reality they found a way to send 35 KB instead of 16 KB which didn't affect anything. (You cannot really overload anything this way).
Our two cents: Seems that Sad Ghaf Security Team never sent more proofs to Telegram. We tried to reach them via Telegram but we got no answer...
🇷🇺 Answer in russian (from vc.ru)
🌐 Google Translate version
They started talking about it (the vulnerability) recently after being quiet for some time, but couldn't show any proofs or something that confirms vulnerability.
There has always been server restriction for sent messages. Their outcoming message looked big only because their client app showed it that way. If you look at it in another app, both sender and recipient will see this message cut.
They though that they were sending megabytes. When in reality they found a way to send 35 KB instead of 16 KB which didn't affect anything. (You cannot really overload anything this way).
Our two cents: Seems that Sad Ghaf Security Team never sent more proofs to Telegram. We tried to reach them via Telegram but we got no answer...
🇷🇺 Answer in russian (from vc.ru)
🌐 Google Translate version
It's Telegram's birthday today ✌
The iPhone app hit the store exactly three years ago: August 14, 2013.
ℹ️ @geeksChannel
The iPhone app hit the store exactly three years ago: August 14, 2013.
ℹ️ @geeksChannel
💡 How old is Telegram?
Telegram for iOS was launched on August 14, 2013. The alpha version of Telegram for Android officially launched on October 20, 2013. More and more Telegram clients appear, built by independent developers using Telegram's open platform.
ℹ️ @geeksChannel
Telegram for iOS was launched on August 14, 2013. The alpha version of Telegram for Android officially launched on October 20, 2013. More and more Telegram clients appear, built by independent developers using Telegram's open platform.
ℹ️ @geeksChannel