Telegram Messenger plugs loophole that leaked users’ IP addresses during calls

The bug was found by security researcher Dhiraj Mishra in Telegram for Desktop and has been fixed in 1.3.17 beta and 1.4.0 versions.

By Digit NewsDesk | Published 01 Oct 2018 22:11 IST
HIGHLIGHTS
  • The bug was found by security researcher Dhiraj Mishra in Telegram for Desktop and has been fixed in 1.3.17 beta and 1.4.0 versions.

Telegram Messenger plugs loophole that leaked users’ IP addresses during calls
Telegram Messenger plugs loophole that leaked users’ IP addresses during calls

Telegram has fixed a bug that was leaking IP addresses of users who were placing calls using the Telegram for Desktop app. The bug was found by security researcher Dhiraj Mishra who said that a default setting led the app leak the above-mentioned information during voice calls. As per Bleeping Computer, when using Peer-to-Peer (P2P) to initiate Telegram calls, IP address of the receiver will appear in the Telegram console logs.

Telegram Messenger is a communication app that allows users to use encrypted chats and phone calls over the Internet. Under the settings menu (Settings --> Private and Security --> Voice Calls --> Peer-To-Peer) you can see that the app gives users an option to prevent their IP address from being revealed by changing the default setting “Always” to “Never”. If a user does this, the calls will be routed through Telegram's servers, which would then hide the IP address but there will also be a drop in the audio quality. But this is only on iOS and Android. PCs powered by Linux or Ubuntu OS, the official Telegram for Desktop and Telegram Messenger for Windows applications did not offer the same ability.

Mishra illustrated how the IP address were leaked during the calls in a Proof of Concept video. After alerting Telegram about the loophole in Telegram for Desktop and Telegram Messenger for Windows applications, Dhiraj was awarded a bounty of €2,000 (approx Rs 1.70 lakh) and the issue has been fixed in the 1.3.17 beta and 1.4.0 versions of Telegram for Desktop, which bring the option of disabling P2P calls in the app.

Digit NewsDesk
Digit NewsDesk

Email Email Digit NewsDesk

Follow Us Facebook Logo Facebook Logo Facebook Logo

About Me: Digit News Desk writes news stories across a range of topics. Getting you news updates on the latest in the world of tech. Read More

Advertisements

Trending Articles

Advertisements

LATEST ARTICLES View All

Advertisements

Hot Deals View All

AGARO 33511 MAGMA Air compression leg massager with handheld controller, 3 massage mode and intensity for feet, calf and thigh Massager  (Black)
AGARO 33511 MAGMA Air compression leg massager with handheld controller, 3 massage mode and intensity for feet, calf and thigh Massager (Black)
₹ 6199 | $hotDeals->merchant_name
IRIS Fitness Leg and Foot Massager  (Red)
IRIS Fitness Leg and Foot Massager (Red)
₹ 10999 | $hotDeals->merchant_name
ARG HEALTH CARE Leg Massager for Pain Relief Foot, Calf and Leg Massage with Vibration and Heat Therapy (Golden)
ARG HEALTH CARE Leg Massager for Pain Relief Foot, Calf and Leg Massage with Vibration and Heat Therapy (Golden)
₹ 15499 | $hotDeals->merchant_name
HP 15.6 LAPTOP BAG Backpack  (Black, Black, 25 L)
HP 15.6 LAPTOP BAG Backpack (Black, Black, 25 L)
₹ 275 | $hotDeals->merchant_name
ah arctic hunter Anti-Theft 15.6 inches Water Resistant Laptop Bag/Backpack with USB Charging Port and for Men and Women (Black)
ah arctic hunter Anti-Theft 15.6 inches Water Resistant Laptop Bag/Backpack with USB Charging Port and for Men and Women (Black)
₹ 2699 | $hotDeals->merchant_name
DMCA.com Protection Status