Telegram Messenger plugs loophole that leaked users’ IP addresses during calls

By Digit NewsDesk | Updated 3 Oct 2018
Telegram Messenger plugs loophole that leaked users’ IP addresses during calls
  • The bug was found by security researcher Dhiraj Mishra in Telegram for Desktop and has been fixed in 1.3.17 beta and 1.4.0 versions.

Telegram has fixed a bug that was leaking IP addresses of users who were placing calls using the Telegram for Desktop app. The bug was found by security researcher Dhiraj Mishra who said that a default setting led the app leak the above-mentioned information during voice calls. As per Bleeping Computer, when using Peer-to-Peer (P2P) to initiate Telegram calls, IP address of the receiver will appear in the Telegram console logs.

advertisements

Telegram Messenger is a communication app that allows users to use encrypted chats and phone calls over the Internet. Under the settings menu (Settings --> Private and Security --> Voice Calls --> Peer-To-Peer) you can see that the app gives users an option to prevent their IP address from being revealed by changing the default setting “Always” to “Never”. If a user does this, the calls will be routed through Telegram's servers, which would then hide the IP address but there will also be a drop in the audio quality. But this is only on iOS and Android. PCs powered by Linux or Ubuntu OS, the official Telegram for Desktop and Telegram Messenger for Windows applications did not offer the same ability.

Mishra illustrated how the IP address were leaked during the calls in a Proof of Concept video. After alerting Telegram about the loophole in Telegram for Desktop and Telegram Messenger for Windows applications, Dhiraj was awarded a bounty of €2,000 (approx Rs 1.70 lakh) and the issue has been fixed in the 1.3.17 beta and 1.4.0 versions of Telegram for Desktop, which bring the option of disabling P2P calls in the app.

advertisements
Digit NewsDesk
The guy who answered the question 'What are you doing?' with 'Nothing'.
advertisements
ASK DIGIT

Recent Questions

google passwords leaked
t ruth pushpalatha
Sept 11, 2014
Responses 5
Vivek Bhatt
Sept 15, 2014
shivani chowdhary
Sept 15, 2014
Animesh Kant
Sept 15, 2014
Aditya Malpure
Sept 15, 2014
CHRISTIANA JOHN
Sept 19, 2014
Comments
Be the first one to post the comment
Post a New Comment
You must be signed in to post a comment
advertisements