Big shock to Telegram users
According to a team of researchers at the Royal Holloway at the University of London, the messaging app that replaces WhatsApp has major security issues. The problem is the opt-in end-to-end encryption that users provide for personal chats. This is where the biggest security flaw is found.
End to end encryption refers to the technology used to protect the contents of a chat. This is a system that does not show anyone except the sender and recipient. Applications that offer encryption protect chats from being read by related companies. WhatsApp and Signal is the service it currently provides.
Apps like Telegram, Skype and Facebook Messenger offer a kind of end-to-end encrypted chat, which means the user can switch to end-to-end encryption mode only if they are interested. One of the great benefits of these chats is that they protect users from Man-in-the-middle attacks. There an individual or group can read the chats in a group.
According to researchers, this is a bug that allows you to change the order of messages in the app. For example, if a user writes 'I Say Yes', 'to Pizza' and 'I say no' to 'to crime', it is possible for the attacker to rearrange the messages so that they can say 'I say yes to crime'. This kind of messages may invite cyber police authorities in your house. In fact, the report says it could be used when dealing with ‘bots’ in the telegram.
Moderated Groups Bots are telegram automated systems that can be used in groups to automate tasks. The researchers also found that chats could be extracted by attackers to read encrypted messages in apps for iOS, Android, and Telegram desktop applications.
The Telegram explained that the company had already fixed these security vulnerabilities. Researchers also say that update need to be included in any precautionary measures against the virus.
Comments
Post a Comment