IT Security Stack Exchange
IT Security Stack Exchange

Questions tagged [telegram]

Use for questions about Telegram, the messaging app, and it's bot API.

What is this tag about

This tag is for Telegram, the messaging app.

What should be tagged

  • Questions about the security of Telegram
  • Questions about securely using the clients
  • Questions about connecting to the bot API securely
26 questions
242
votes
6 answers

Is Telegram secure?

There is a new WhatsApp-killer application called Telegram. They said that it's open source and that it has a more secure encryption. But they store all the messages in their servers and WhatsApp doesn't store any messages in any server, only a…
ilazgo
  • 2,743
  • 4
  • 12
  • 10
11
votes
1 answer

Private messaging for protesters

Hello I am a protester in Hong Kong. Many protesters use telegram group. I have heard recently from the News that a group admin was tricked by the police to unlock their phone (police cannot force one to unlock their phone under the law of HK) and a…
hkprotester
  • 111
  • 4
8
votes
1 answer

Security and privacy issues with Telegram

Recently I signed on Telegram using my TextNow number. When I signed in, I was assigned the profile of an existing user! I have access to the profile of this user, including the contact list of the user, subscribed channels, and session history with…
antonio
  • 845
  • 2
  • 8
  • 15
7
votes
2 answers

Is Telegram E2E Still Insecure?

This was already asked here, but I have questions about the answer. https://security.stackexchange.com/a/49802/118071 I'm not sure if that answer applies to the full E2E mode. Another answer states: Diffie-Hellman End-to-end encryption is known to…
Jesse Adam
  • 167
  • 1
  • 5
5
votes
1 answer

Can WhatsApp, Signal or Telegram be hacked through a SIM SWAP attack?

In Cuba the telecoms/ISP monopoly, Etecsa, works with the political police to spy on dissidents, journalists and others. A common attack in Cuba is therefore SIM Swapping which is easy for them. It is also effective in order to eavesdrop on phone…
Pedro
  • 51
  • 3
4
votes
1 answer

Do the Secret Chats of Telegram really support Perfect Forward Secrecy?

In the Telegram API it is stated that Telegram support Perfect Forward Secrecy in their "secret chats". It is also stated that official Telegram clients will initiate re-keying once a key has been used to decrypt and encrypt more than 100…
ayyyda
  • 41
  • 2
4
votes
3 answers

Is it possible to decrypt Telegram messages from a private chat?

Assuming you have access to another person's device, set up a SOCKS5 proxy, install a root certificate to parse the SSL traffic, and take a screenshot of the private key of a private chat. Is it now possible to use the proxy to record a message and…
Manni
  • 141
  • 1
  • 4
4
votes
1 answer

MTproto Proxy Security in Telegram App

In Telegram messenger, latest update, there is an option to set connection type to MTProto Proxy. Note: There is a detailed description by Telegram team on MTProto. Now telegram officially announced that the Data encrypted in MTProto Proxy can not…
Ramon
  • 41
  • 1
  • 2
3
votes
0 answers

What secure mobile messaging app is publicly known to be the most frustrating for state intelligence to read?

I imagine like either leaked or otherwise published official memos on efforts and signals intelligence programs to intercept and crack different types of communications either lamenting or chronicling the technical difficulties in doing so and…
Jackie FJA
  • 39
  • 4
3
votes
2 answers

How does Telegram's secret-splitting scheme work?

The Telegram FAQ's state that they are not able to comply with court orders from one country alone because they "split the encryption keys and spread them over multiple jurisdictions". To protect the data that is not covered by end-to-end…
deiShie0
  • 43
  • 2
2
votes
0 answers

Is there any way to de-link a secure messenger (Telegram/Signal/WhatsApp) from phone number?

I understand, that mobile phone verification is probably the most convenient way to validate real users and avoid spam, but those "secure/private" messengers are afterward still bound to phone numbers, and this has inherent vulnerabilities with…
T.Todua
  • 2,677
  • 4
  • 19
  • 28
2
votes
3 answers

How to prevent Apple and Google from accessing Telegram messages

Telegram is completely blocked in my country (entire IP range and domain of telegram is blocked), and I cannot access messages by telegram app. However, notifications for newly received telegram messages are being displayed on my android phone and…
M6299
  • 129
  • 3
2
votes
2 answers

How can I sniff Telegram packets before they get encrypted?

How can I sniff packets that are being sent from my computer to their server and from their servers to me using a sniffing app like Wireshark? Right now when I use Wireshark, they are all encrypted, but obviously I should be able to sniff it…
Richard Jones
  • 497
  • 1
  • 6
  • 9
2
votes
1 answer

Phone Number Appears to Have Been Temporarily Hijacked

What Happened: At 8:40am Telegram sends me a login code via the Telegram desktop app. At 8:44am Telegram informs me that someone has logged into my account via ip address #1 (appears to be PIA vpn) I immediately go and revoke access and begin the…
rhythmthumper
  • 21
  • 1
2
votes
1 answer

Security in unofficial telegram apps(that use Telegram API)

I was wondering that can developers of an unofficial Telegram apps gain access to media and files that users send over the app? (Unofficial Telegrams use the Telegram API and connect to Telegram servers).
Tee Pee
  • 21
  • 1
1
2