Internet
Telegram Desktop App Found to Be Leaking IP Addresses When Initiating Calls, Company Fixes Bug
Instant messaging app Telegram, known for its end-to-end encryption features, was found to contain a bug that would leak users’ IP addresses. A security researcher discovered that the Telegram desktop app was leaking public and private IP addresses of users during voice calls. Additionally, users did not have an option to turn off the feature that could potentially leave them vulnerable to cyber-attacks. However, Telegram has reportedly fixed the bug in its latest updates. Notably, the company’s security team has awarded the researcher EUR 2,000 (roughly Rs. 1,68,900) for reporting the bug in the app.
Security researcher Dhiraj Mishra reported the Telegram bug, which he says was causing the desktop app to be leaking both public and private IP addresses during voice calls to be made over a P2P (peer-to-peer) framework. While smartphone users have the option of turning off P2P calls by changing the settings to other options by going to Settings > Privacy and security > Calls > Peer-To-Peer, there was no such option available for Telegram users on the desktop.
Photo Credit: Dhiraj Mishra/ InputZero
The voice calling feature in Telegram works by establishing a direct P2P connection between the users, thereby exchanging data packets between the two directly. Such a connection is said to directly expose the IP addresses of the users. As mentioned, Telegram app users on mobile can choose to prevent their IP addresses from being revealed by changing the settings to Nobody. According to Mishra, this option was absent on Telegram’s desktop client. This could result in all calls initiated from the desktop version potentially leaking the users’ IP addresses.
Notably, the company has now fixed the issue in the 1.3.17 beta and 1.4 versions of Telegram by adding the Nobody option in its desktop client settings. The IP address leak has received the CVE-2018-17780 vulnerability identifier and as mentioned, the company has rewarded a bounty to Mishra for his bug report. Users can now go to Settings > Privacy and security > Calls > Peer-To-Peer and set the option to Nobody.
<!–
–>
Source link
While the Galaxy Z Fold 3 had notable upgrades, like the S Pen support, it was also heavily criticized for its disappointing cameras. As if the 4MP under-display camera weren’t bad enough, the main cameras on the phone’s back haven’t actually moved forward since the Galaxy Z Fold 2. Compared to the Galaxy S21 Ultra from earlier this year, that … Continue reading
Just like working from home, learning from home is a new normal these days. As educational institutions have remained distant from children for the best part of two years, students have become immensely dependent on smartphones and laptops for coursework and entertainment. Even now when many schools and colleges are conceding to a hybrid model – a mix of in-person … Continue reading
The world today revolves around digital data and its processing, from the content we view on the Web to the new breeds of cryptocurrencies disrupting the financial status quo. While local data storage has become important even in the age of the cloud, data backups have become even more critical because of our dependence on our files for entertainment and … Continue reading
Galaxy Z Fold 3 cameras found an ally in DxOMark
While the Galaxy Z Fold 3 had notable upgrades, like the S Pen support, it was also heavily criticized for...
Pixel 6 can’t fly some DJI drones because of an incompatible app
It’s not really that unusual for some mobile apps to stop working on newer phones, especially if the app hasn’t...
Galaxy Note production has reportedly ended
As if Galaxy Note fans needed more reason to be glum this year, more news just dropped over the weekend...
The green future of big rigs is almost here
Anyone who has driven the highways in their part of the country has seen semi-trucks out delivering goods and other...
Like to shift gears? Here are some vehicles you can still get with a manual transmission
Years back, it was easy to find vehicles with manual transmissions. Most models had a budget-friendly manual-transmission option that many...
-
Social2 years agoCrashPlan for Small Business Review
-
Gadgets3 years agoA fictional Facebook Portal videochat with Mark Zuckerberg – TechCrunch
-
Mobile3 years agoMemory raises $5M to bring AI to time tracking – TechCrunch
-
Cars3 years agoWhat’s the best cloud storage for you?
-
Social3 years agoiPhone XS priciest yet in South Korea
-
Security3 years agoGoogle latest cloud to be Australian government certified
-
Social3 years agoApple’s new iPad Pro aims to keep enterprise momentum
-
Cars3 years agoSK Telecom and Samsung to collaborate on 5G for enterprise