Skip to main content

#ISW, May 8 assessment: "Reports indicate that there is an available open-source tool that allows people to search by specific coordinates for Telegram users who have enabled a certain location-sharing setting."

But of course there is. The russian-engineering, roll-your-own-crypto, cryptocoin-shilling, encrypted-but-not-encrypted messaging app to have a zero-day exploited privacy flaw exposing users' location? I can't imagine where such failures would come from.

#telegram #zeroday #privacy

Russian opposition outlet Meduza reported on May 8 that this tool allows people to input coordinates to discover all Telegram users who have enabled the "find people nearby" setting located within 50–100 meters of the coordinates.[31] Meduza noted that the "find people nearby" setting usually only allows users to find other Telegram users within 50–100 meters of their current location. Users can enable or disable this location-sharing setting in the "contacts" settings of the application.
#privacy #telegram #ISW #zeroday
in reply to Osma A

Mikołaj Hołysz
Mikołaj Hołysz
• •
Why is this news? Of course a "find people nearby" feature lets you find people nearby, and it should be obvious to anybody with even a passing knowledge of cybersecurity that it's impossible for any app to protect itself against malicious users spoofing their location. If you're on Android, you don't even need a special tool for that, there's a way to set a gps-spoofing app right in developer settings.
⇧