Telegram’s most important promoting level is that their chat community is safe and personal, however it seems the corporate has failed customers on the Mac on each accounts.
Security researcher Dhiraj Mishra has found that Telegram was not truly deleting so-called “self-destructing” movies on the MacOS computer systems of recipients.
The difficulty is that Telegram was saving all media to the identical listing, which was seen in common chats, however hidden in personal chats. The media was nonetheless nonetheless being saved in the identical location, which was accessible to the end-user, who may then merely view and duplicate the media from there.
Mishra additionally found a second vulnerability within the MacOS software program. Users can apply a passcode to open the app, however this password was being saved in plain textual content in a JSON file which could possibly be learn by anybody with entry to the pc.
Mishra has knowledgeable Telegram of the problems, they usually have fastened them with model 7.four of the app, however the difficulty displays very badly on the safety of the app typically.
