How to see sensitive content on telegram android
Fixing This Channel Can’t Be Displayed in Telegram
Telegram channels can be a great way to keep up with the latest updates on politics, sports, business, or any other topics that interest you. As a channel subscriber, you can participate in discussions, share multimedia content, and meet new people with similar interests. For these reasons, it may be frustrating to realize you can’t locate a beloved channel anymore.
If you’re wondering what the “This channel can’t be displayed” message is all about, you’ve come to the right place. Keep reading to learn why you can no longer see a Telegram channel and how you can fix this issue.
This Channel Can’t Be Displayed
Telegram channels can be a great platform to share content on a large scale, as there’s no limit to how many subscribers there can be. The sheer volume of potential channel members makes it difficult to keep track of all the shared content to ensure it’s legal and appropriate.
As a result, some members may spread illegal or explicit content, pirated media, or messages inciting hate and violence. If Telegram discovers a channel is used for such activities, it may hide it from general view or ban it altogether.
If a Telegram channel is taken down, you’ll see the “This channel cannot be displayed” message when you open it. Depending on the reason, you might be able to tweak some settings and go back to see the channel’s content.
Telegram Channel Can’t Be Displayed Because of Sensitive Content
When a channel is used for exchanging sensitive content, Telegram might take it down. Sensitive content primarily refers to images and videos that are not safe for work.
However, suppose no illegal activities are taking place within the channel. It may still be active, just hidden from the general view. If that’s the case, you’re probably seeing the “This channel can’t be displayed” message because your sensitive content filter is enabled.
If you’re over 18, you can turn the filter off, after which you should be able to view and join the desired channel.
Telegram This Channel Can’t Be Displayed Because It Was Used to Spread – Android
A message warning you about explicit subject matter shared in a Telegram channel will block you from being able to view its content.
You can disable your sensitive content filter if you’re adamant about accessing that channel.
A feature called the Nicegram Bot might be able to help you in your endeavor. You can contact this bot a couple of ways.
- By typing “Nicegram bot” in the Telegram search bar and tapping the option with “bot” written under its name
- Following this link
Once the Nicegram Bot chat has launched, follow these steps to turn off your sensitivity filter.
- Tap the “Start” button at the bottom of your screen.
- If you don’t see any options at the bottom, click on the link under “Nicegram Web.”
- Select the “Log in with Telegram” option.
- Toggle both the “I’m 18+ years old” and “Show content that may be sensitive” options on.
- Hit “Save” to complete the process.
A pop-up message will then prompt you to restart the Nicegram Bot. For the changes to take effect, you should restart the Telegram app by force-closing it.
If this is the first time you’re using Telegram Widgets, you’ll have to authorize the log-in before turning the filter off.
After successfully completing the process and relaunching the app, check if the previously inaccessible content is now visible. If not, you can try the alternative approach to disabling the filter.
Unfortunately, this can’t be done using your Android device. Instead, you’ll need to access the Telegram web or desktop client.
- Click the three horizontal icon in the upper-left corner.
- Select “Settings” from the overflow menu.
- Press the “Privacy and Security” icon.
- Scroll down to the “Sensitive content” section.
- Tap the “Disable filtering” box to turn it on.
Now go back to your smartphone and check if the channel is there. If you still can’t access it, the channel has probably been banned completely, deleted by the creator, or restricted in your country.
Telegram This Channel Can’t Be Displayed Because It Was Used to Spread – iPhone
When a Telegram channel is used to spread explicit content, the app will inform you with a message and stop you from seeing the subject matter.
If the explicit content isn’t illegal, the channel is probably hidden rather than banned. In that case, your sensitive content filter is most likely in the way.
You can turn off this filter on your iOS device using the Nicegram Bot.
The first step is to contact the bot. You can do this in two ways.
- Type “Nicegram bot” in the Telegram search bar and click on the option with “bot” written under its name
- Follow this link
When a chat window appears, follow these steps to get rid of the sensitivity filter.
- Press the “Start” button at the bottom of your screen.
- Tap both the “I’m 18+ years old” and “Show content that may be sensitive” buttons to enable them.
- Press “Ok” in the pop up menu, then restart telegram.
The final step is to go back to the desired Telegram channel and check if you can access its content now. If it’s still unavailable, it’s time to try an alternative method.
There is another way to switch off the sensitivity filter, but it requires the Telegram web or desktop client.
- Press the three horizontal icon at the bottom-left corner.
- Select “Settings.”
- Tap the “Privacy and Security” button.
- Scroll down to the “Sensitive content” section.
- Click on the “Disable filtering” box.
The channel’s content should now be visible on your iPhone or iPad. If the issue persists, the channel will likely be deleted, either by Telegram or the creator. Alternatively, it may be unavailable due to country limitations.
Telegram Channel Can’t Be Displayed Due to Country Limitations
Telegram might apply content restrictions to channels originating in countries where content is heavily filtered. As a result, you won’t be able to access the channel unless you’re in that particular country.
A VPN app is most commonly used to sidestep such restrictions. The app allows you to set your location almost anywhere in the world, so you can set it to the channel’s country of origin. Give it a few hours if you can’t access the channel right away.
After Telegram registers the changed IP address, you should be able to join the desired channel.
This Channel Can’t Be Displayed Because It Violated Local Laws
Some country limitations Telegram imposes can be avoided by using a trustworthy VPN. However, a channel welcoming you with a “This channel can’t be displayed because it violated local laws” message is probably a lost cause.
Such channels are usually terminated for spreading hateful, inflammatory, or otherwise illegal content. Although you might still be able to see the channel, its content will remain inaccessible forever.
Change the Channel
Most mainstream online platforms do their best to moderate the posted content. Since some Telegram channels aren’t created with the best intentions, it’s not surprising they aren’t allowed to stay active.
If the methods outlined in this article haven’t helped you access the desired channel again, the channel is probably gone for a good reason. In that case, it’s best to steer clear of similar channels moving forward.
Has a Telegram channel you visited ever disappeared? Did you manage to get it back? Let us know in the comments section below.
How To See Sensitive Content On Telegram 2022? Step By Step Guide To Enable Sensitive Content On Telegram
Telegram
A cross-platform, cloud-based, freemium IM service, Telegram is available everywhere. Additionally, the service offers optional end-to-end encrypted video calling, chats, VoIP, file sharing, and other capabilities. It debuted on iOS on August 14, 2013, and Android on October 20, 2013. While Telegram's operating centre is situated in Dubai, United Arab Emirates, its servers are dispersed across the globe in five distinct data centres. For desktop and mobile platforms, numerous client apps are available, including official ones for Android, iOS, Windows, macOS, and Linux (although the registration of this software requires an iOS or Android device and a working phone number). Additionally, the Telegram protocol is used by various unauthorized clients and the two official web twin apps for Telegram, WebK and WebZ.
How To See Sensitive Content On Telegram 2022?
Although this approach is quite successful, its success rate is low. Use a different account and use that one for your messaging needs if you haven't activated this functionality on your Telegram account. The sensitive content filter should then be disabled, and the application should be reinstalled. By using this technique, you can avoid having your discussions screened. Additionally, you must utilize this filter whenever you are online.
How To Enable Sensitive Content On Telegram?
Sensitive Material Settings
Use Nicegram Bot to enable sensitive content.
In the Telegram site settings, select the "Disable filtering" switch.
Employ Telegram while in an unconstrained nation.
Make use of another gadget.
Pay attention to the networks you watch.
What Is Sensitive Content On Telegram?
Turn off the sensitive material filter on the channel, as mentioned above, if privacy concerns are a concern.
If not, Telegram will keep blocking these channels. It's crucial to know that Telegram filters out channels with hate speech and pirated content. On Telegram, there are numerous ways to enable sensitive content. You can still alter your location using various apps if you don't use the internet. In addition, you can activate two-factor authentication once the filter has been configured.
Sensitive Content Prevents Display Of Telegram Channel
Telegram may delete a channel if it is used to exchange sensitive information. Images and films that are inappropriate for work are the most common examples of sensitive content.
Assume, however, that no illicit activities are occurring in the channel. It might still be operational; it's just hidden from public view. If that's the case, your sensitive content filter is probably turned on, which is why you're noticing, "This channel can't be seen."
If you're older than 18, you can disable the filter, allowing you to watch and subscribe to the desired channel.
Development Of Telegram
Nikolai and Pavel Durov, brothers, founded Telegram in 2013. The two had previously launched the Russian social network VK, which they abandoned in 2014, claiming the government had taken control of it. Pavel Durov resisted government pressure and sold his remaining VK stock before leaving Russia. The MTProto protocol, on which the messenger is based, was developed by Nikolai Durov, with the assistance of Pavel Durov, whose Digital Fortress fund provided funding and infrastructure. Despite claiming that its ultimate objective is not to make money, Telegram Messenger is not set up as a non-profit.
About Telegram
| SPECIFICATIONS | DETAILS |
| Developers | Telegram FZ LLC Telegram Messenger Inc. |
| Initial release | August 14, 2013 |
| Written in | C++ , C , Java |
| Platform | Android, iOS, Windows, macOS, Linux, Web platform |
| Available in | 66 (officially 12) languages |
| Type | Instant messaging |
Telegram - Software
How To See Sensitive Content On Telegram 2022
What Is Sensitive Content On Telegram
Sensitive Content Prevents Display Of Telegram Channel
Development Of Telegram - Software
About Telegram
Disclaimer: The above information is for general informational purposes only.
All information on the Site is provided in good faith, however we make no representation or warranty of any kind, express or implied, regarding the accuracy, adequacy, validity, reliability, availability or completeness of any information on the Site.
How To See Sensitive Content On Telegram 2022 - FAQs
1. What is the app Telegram about?
A cross-platform, cloud-based, freemium IM service, Telegram is available everywhere.
2. What are the additional software created by Telegram?
Additionally, the Telegram protocol is used by various unauthorized clients as well as the two official web twin apps for Telegram, WebK and WebZ.
3. When did the app Telegram make its debut?
It debuted on iOS on August 14, 2013, and on Android on October 20, 2013.
4. Who are the developers of the app Telegram?
The developers of Telegrama re Telegram FZ LLC and Telegram Messenger Inc.
15 useful Telegram features that not everyone knows about
March 31 Android iOS
Settings, options and tools that will allow you to use the messenger to the fullest.
1. Video Avatars
Yes, you can put a short video on your Telegram avatar — up to 9 seconds long. It will play when you open your profile.
You can record an emotion or a funny face, or use any clip on your device. Retouching tools, signature, animated stickers and various settings are available. nine0003
You can also put your favorite gif on the avatar, after converting it to MP4. The Convertio or FileZigZag services will help with this.
To set a video as an avatar, on Android, in the profile window, press the button with the camera icon and then select a file from memory or switch to shooting mode.
On iOS, a video avatar is done in much the same way, through the profile menu and clicking on the photo. Then "Edit" and "New photo or video."
2. Grouping chats and channels into folders
Folders allow you to get rid of chaos in the list of chats and channels. With their help, work correspondence can be separated from communication with friends, and news channels from publications of favorite bloggers, for example.
We talked about this useful feature in a separate article. Everything is simple there: create a tab, give it a name and add only what you need there.
3. Hashtags in chats
If you often look for information inside a particular chat or in Favorites, then you need to use hashtags. They can mark certain topics or important messages. nine0003
If this is a working correspondence, then you can use the tags #order, #report or #agreement - come up with any convenient designation.
If you then type the tag in the chat search, all the messages you have tagged will be displayed. By clicking on a tag, you can open a global search for all your chats and channels.
4. Color themes for chats
The color themes of the interface in Telegram are familiar to many, but not everyone knows that with one of the updates it became possible to choose a specific theme for each personal chat. nine0003
Eight options to choose from, each available in dark and light styles.
The selected theme is installed immediately for both chat participants and will be displayed on all devices.
To select a theme on Android, open the desired chat, click on the "⋮" in the upper right corner and select "Change Colors". On iOS - through the chat profile icon of the interlocutor and the "More" button.
5. Translation of message text
Any message in a chat or channel can be translated into the language set in Telegram by default. This option can be disabled in the settings - activate it in the "Language" section ("Show "Translate" button"). nine0003
After that, by clicking on a message in a foreign language, the "Translate" item will be available in the context menu.
6. Text formatting
In Telegram, it has long been possible to highlight words in bold or italics, as well as strike through or underline them. There is a convenient built-in panel for this, which we talked about in a separate article.
With one of the updates in the messenger, a new formatting option became available - hidden text that will be visible only when you click on it.
Great option for spoilers or some mysteries. nine0003
7. Automatic deletion of messages
The function of automatic deletion of messages for all participants is available in any chat. Messages can be deleted every 24 hours, 7 days or every month.
To enable it on Android, press "⋮" in the desired chat, select "Clear history" and specify the desired time interval. On iOS, hold your finger on any message, tap Select, then Delete Chat in the top-left corner of the screen, and then tap Set up auto-delete.
8. Deleting correspondence for a certain period
You can also delete messages in the chat only for a certain period of time. To do this, you need to open the calendar by clicking on the date plate, which is visible when scrolling through messages in the chat.
Next, click "Select days" and mark the days or the whole month for which you want to delete messages. Then confirm the action. This cleaning works only in private chats.
9. Hiding Your Online Status
Telegram allows users to see when their friends have been online - or how long ago they've been online.
If you don't want to be followed, you can hide your online status in the app. nine0003
This is done through the "Last activity" in the privacy settings. More details in a separate article.
10. Quick search for media files
By clicking on the chat or channel icon, you can go to the menu of media files that were in the messages. To find the right picture, sometimes you have to scroll for a very long time.
You can speed up the search using the zoom gesture, that is, the pinch: it allows you to change the scale of the image presentation - as in Google Photos. You can also drag the slider itself or click on it, which will allow you to immediately jump to the desired date through the calendar. nine0003
11. QR code to your profile or channel
You can add someone to Telegram using a nickname, a direct link to an account or a phone number if it is not hidden, but it can also be done through a QR code.
If you are next to a person, then it will be enough for you to show your code for the camera of his smartphone to read.
The code is available in the profile menu on Android and iOS. We have already talked about this too.
12. Broadcast your location
In the mobile application, you can not only send your location in the chat, but also constantly broadcast your location. This feature will be useful, for example, when you are going to meet friends somewhere. nine0003
Telegram will allow you to observe not only a point on the map, but also the direction of movement. You can also set up a proximity alert to make sure you don't miss each other.
The broadcast is started via the attachment menu in the message. Just click on the paperclip and select a location.
13. Secret Chat
For the most important and confidential business, financial or potentially compromising matters, Telegram has an end-to-end encrypted secret chat. It can only be created on a smartphone and only for communication between two people. nine0003
To do this, open the correspondence with the desired contact in the application and click on his name at the top.
Next, press "⋮" and select "Start Secret Chat". More details in a separate article.
14. Transferring chats from WhatsApp
If you move from WhatsApp to Telegram, the messages in the conversation can also be transferred. On Android, for this, inside the WhatsApp chat, you need to press "⋮" and "More", then select "Export chat", and then select Telegram and a specific chat.
On iOS, just open the contact or group information page, click Export Chat, and select Telegram from the Share menu. nine0003
15. Close Telegram remotely on another device
If you use the messenger not only at home, but also at the office, and forgot to close the application on your work PC, you can do it remotely.
To do this, on your smartphone, open the Telegram side menu, go to settings and click "Devices". There you will see all active sessions. Any of them can be disabled in three clicks. You can also block the reception of calls on other devices.
Did you know about all the possibilities listed above? Write in the comments.
nine0110
Read also 🧐
- How to clear cache in Telegram
- How to create a bot in Telegram
- How to make video stickers for Telegram
Telegram users privacy violated again. Representatives of the messenger demand not to disclose details / Sudo Null IT News
On the beautiful, artistic cover for the press release of the new version of the Tg-messenger, users see a basket with a timer and destroyed data, and also see the main characters from the cult hacker series Mister Robot. But is it really as cool with clearing tracks as it is on the show? nine0003 Mr. Robot. Cleanup.
Telegram prepared something from the security area for users, and these meticulous researchers immediately pricked up their hands. A detailed verbalization of one ‘bug bounty’ is described in the text below...
Quote from the press release:
Automatic deletion of messages
For several years now, Telegram users have been able to delete messages without a trace for all participants in the conversation.
Secret chats from 2013 also have a self-destruct timer that prevents you from manually deleting messages. nine0003
Starting today, automatic deletion of messages for all participants is available in any chat . In this mode, messages disappear after 24 hours or 7 days after being sent.
Also, information about the sec-function is mentioned in three points in the official changelog-e Tg.
-
Set messages to be automatically deleted for everyone after 24 hours or 7 days after they are sent.
-
Manage auto-delete settings in any of your chats, as well as in groups and channels in which you are an administrator. nine0003
-
To enable auto delete, right click on a chat in the chat list > Clear history > Enable auto delete.
I tested the innovation in Telegram on Android and found nothing suspicious. Everything security-declared by Tg worked as it did on the cover. After only a few days (the minimum, honest term for auto-deleting messages is 24 hours), having shown diligence, I achieved what I was looking for: messages that should be auto-deleted from participants in personal and private group chats /Storage/Emulated/0/Telegram/Telegram Image .
The verification test itself is very simple: set the auto-delete timer for 24 hours. (in PM or group chats) ; we exchange pictures. We are waiting for a day. We check the path /Storage/Emulated/0/Telegram/Telegram Image, the pictures were automatically deleted. We cancel auto-delete and again set the timer for 24 hours and repeat the initial steps. Usually, auto-delete does not work for 2..4 times. As soon as the pictures remained in the cache (a bug with auto-deleting messages has been released), you can leave the timer on the chat alone, all subsequent days only the message window in the messenger will be cleared, and the pictures will remain in the cache .
Tested on various Android 7-10 gadgets (Xiaomi; Samsung; Asus) , the found bug depreciated the functionality: auto-delete messages for users, allowing in the future to exploit the vulnerability in their personal and harmless interests. nine0003
Knowing about the negative attitude of Telegram towards researchers (including on its previous experience) , as well as finding interesting information in the media that for a similar bug Telegram paid the researcher 2.
5k green rustlers, and subsequently: the vulnerability was assigned CVE-2019-16248 with a high base severity rating of 7.5 points (upd: after the publication of this article, the vulnerability was revised to 5.5 points) :
The "delete for" feature in Telegram before 5.11 on Android does not delete shared media files from the Telegram Images directory. In other words, there is a potentially misleading UI indication that a sender can remove a recipient's copy of a previously sent image (analogous to supported functionality in which a sender can remove a recipient's copy of a previously sent message),
i decided to work with Telegram again. According to the bug bounty program on Hackerone
5.03.21 I sent a vulnerability report to [email protected]. To my surprise
03/07/21 I received the answer (hereinafter, the punctuation and spelling of the messages are fully preserved) We will send you an update soon.
All the best, Telegram Support
After ~a month of silence (another update of the messenger was released, in which the "auto-delete messages" vulnerability was still not fixed), and I again reminded Telegram about my letter.
04/3/21 received the following response:
Hello,
Thank you for your email and sorry for the long wait. We will reply soon.
All the best, Telegram Support
I did not receive any updates in the near future (I saw that Tg messenger was updated again and the problem still persists) and after a month again reminded Tg about his relevant report 2- x months ago. nine0003
05/9/21 received a response that I already received:
Hello,
We are sorry for the long wait. We will send you an update soon.
All the Best, Telegram Support
Such a letter had an effect and after a few hours
05/14/21 received a response:
Hello,
We don't have automatic responses here.
Please wait, we will send you an update soon.
All the best, Telegram Support
I agreed to wait, as usual. A month and a half later, Tg was again updated to a new version and again the vulnerability was not fixed. I wrote in Tg that the vulnerability in the new version of the messenger is still not fixed and
6/29/21 received the answer:
Hello,
I'm sorry for the delay. Thanks for the details.
Re: logs.
You can send the logs to Saved Messages, open the file and make sure that it does not contain any sensitive information.
All the best, Alex Telegram Support
7.07.21 I'm creating a private, group chat and inviting a Tg representative to join it for testing the bug and visibility. nine0003
8.07.21 get the answer:
Thanks for the details.
There are two different files on your screenshots: they have different names and sizes, and they have been sent in two separate chats.
All the best, Telegram Support
On the same day, a representative of Tg (in the future changing his name from 'support' to 'Nikolai') enters the chat and offers to resolve the issue with the bug in Russian in the future language. nine0003
Tests
Testing the messenger according to my plan, according to his plan. I clearly show that the problem is not fictitious, when picture messages are not auto-deleted by 2/3 of the group chat participants in a random order and are not auto-deleted in personal chats. After ~ a month of testing the messenger on different clients / versions of Android-Telegram (official and third-party: Tg FOSS , Tg GP ) Nikolai admits the existence of a problem, and it would seem that the denouement is already close and the topic of the award is indirectly affected .
nine0003 Testing different Tg clients for Android (FOSS; GP) in group chat and PM.
Promised within a week beta-version of Tg with a fix was never sent, but later
08/23/21 was asked to wait a little more. I quote:
(We are delayed, but we remember about you.)
By the beginning of September, I was provided with a link to the beta version of Telegram. After working with her, I again reported that the problem of auto-deleting messages still persists. In addition, it was broken: “manual deletion of messages”, after such an illusory cleaning of data in the chat (clearing the client's message window) all files were not deleted from the user's gadget and were available in the cache in the same place: /Storage/Emulated/0/Telegram/* . There was also a problem with sending audio messages in .wma/.aac formats. Rejected. After running the next build beta version of Tg, I agreed that the problem of auto-deleting image messages was finally fixed.
"Oops! Something went wrong.”
All that remained was to resolve the issue with the award and put a tick in your track record. nine0003
5.09.21 an email arrives from [email protected]:
Hello,
Thank you for vert long wait. We would like to award you with a bounty of EUR 1,000 for your findings. Could you share the following info for the agreement please?
1. Your bank account details:
* your full name
* bank name
* account number or IBAN for Euro
* SWIFT code
2. Your full address including the postal code.
3. Date of birth.
Much appreciated!
All the best,
Alex
Telegram Support
In the response letter I specify: can I get paid by PayPal for example? I received an answer that no, I need my bank account in euros and personal data.
In a response letter, he provided Telegram with his personal data and his bank account in euros for crediting the reward of 1k euros. nine0003
17.09.21 I received an email from [email protected] in Russian:
Thank you! Please sign the contract on the last two pages and please send the entire document as a PDF. You can use DocuSign if you are not comfortable typing.
Sincerely,
Alex
Usually, when vulnerabilities are discovered, researchers and developers in programs like bug bounty are guided by a reasonable time clause for responsible disclosure of information, so that the developers have time to fix, and the researcher has his glory. For example, when I reported a vulnerability to Yandex, the silence period was 90 days. And after the expiration of the term, I still checked with Yandex about whether I could disclose technical details to the media? And then the employees of the transnational corporation gently reduced my request to ‘no’.
And I did not publish in the media (then 2020) , keeping communication with the Yandex team on a positive note. During the next 2021, I reported another Yandex vulnerability and received a reward without any problems, and also reserved the moral right to publish materials in accordance with the regulation on bug hunting. nine0003
But sometimes reputable companies try to play their games.
Having studied the contract sent by email by a representative of Telegram, I noticed that Telegram requires not to disclose any details of cooperation/technical details by default without its written approval, incl. checks, bank statements and publications in the media with the mention of the name of the company, etc. The contract with Telegram (in my case) turned out to be written on as many as 8 pages (attached at the end of the article) , and the public program itself has been shortened, to put it mildly.
Description of the entire bug bounty program (rules of what is possible and how it should be.
..). In a response letter, I asked questions about the contract (quote):
Hello Telegram representatives and developers!
Some issues under the contract:
in the contract p1.2. “Confidential Information” states that confidential information includes (including): technical information; and even levels of fees and commissions. And according to paragraph 9.one::. "The Consultant shall neither during the term of this Agreement, nor at any other time after its termination : 9.1.1. disclose or transfer any Confidential Information to any person 9.3 The Consultant shall not refer to the Company or any Group Company in any press release, advertisement or material without the prior written consent of the Company." nine0110
By default, it turns out that Telegram is against almost any disclosure of information without a special written request.
In addition, upon receipt of the fee, I must report to the tax authority and provide a check that will reflect the receipt of the fee (and this check also falls under confidential data, which is strange). Can we change the terms in clause 9.1 in the contract to a reasonable period of non-disclosure of any details?
If, nevertheless, the services/research rendered should not be publicly distributed anywhere and never in the media, etc., (in any case) can you reconsider the conscientious, financial fee regarding similar vulnerability , for which the researcher received a reward several times higher than what is offered in my favor under the contract and taking into account my persistent efforts to strengthen the confidentiality of the messenger?
Thank you! And in touch.
Above was the last ping with representatives of the Telegram company, after which they stopped communicating, cutting off communication.
09/27/21 and 09/28/21 I sent a reminder of the unanswered letter to Telegram and asked Nikolay in Tg to remind his colleagues about the correspondence. In addition, I added that the bugs that I found in the beta version of Telegram (including the broken 'manual deletion of messages', the bug for which the researcher received $2.5k in the past) moved to the official release (when switching from beta to the FOSS version and then to the Tg version from the off.site ). He read, but kept silent . And (a couple of weeks of silence) I decided to publish the available materials in the media.
Conclusions
The privacy of Telegram users is again under threat. Users hope/hoped for the declared security functionality: auto-delete of messages (images) , which didn't work as intended on Android devices prior to v8+ (didn't test the bug on other platforms) and misled them.
Helped developers to eliminate the vulnerability with auto-delete of messages in the messenger during the period of six months: from March 5 to September 5, 2021.
In the official press releases of the new versions of Telegram, there was never a mention of the existence and solution of the problem with auto-deleting messages. https://desktop.telegram.org/changelog https://telegram.org/blog
Since all my chats are set to auto-delete messages, sometimes I exploited a bug to restore data that users considered destroyed having faith in Telegram and did not even know about the problems, and in the future could not influence their elimination, for example, using manual chat cleanup.
I did not receive the promised reward from Telegram in 1000 euros or any other, but according to the classic
thumbs up. Unknown: how many vulnerabilities remain / will remain covered up due to Telegram NDA requirements "bribes for silence", not for rewards for bugs:: do not spread and indirectly about the problems of the messenger publicly without written approval from Telegram. But at the same time, P. Durov in the media urges his users not to take the word of the researchers, but to trust only the official information of the company, which is sometimes sensitive and is hidden / controlled by legal agreements concluded with the researchers.
We recommend that users do not rely on the media and wait for official announcements from Telegram. nine0537
>>> P. Durov
We don't want to pay journalists and researchers to talk about Telegram.
>>> P.Durov
I am enclosing an agreement that could be concluded between me and Telegram, but remained unaccepted (only my personal data was changed in it: full name and address).
Attached, very first (dated 5.03.21) and last (dated 28.09.21) video with playback of problem in Tg: auto-delete/manual clearing of chats.
UPD : A few days after article
was published, NPO MITER assigned the vulnerability CVE-2021-41861.
Since I worked with Tg on a self-promotion posted on HackerOne (the site is a guarantor), asked the latter to investigate the obfuscated Tg program for researchers on HO if possible.
