Post #2338411
2025-06-10 07:20 UTC
Replies (11)
-
@rysiek@mstdn.social 2025-06-10 07:26
As part of the investigation, I have looked closely at Telegram's protocol and analyzed packet captures provided by IStories. I have also done some packet captures of my own. I dive into the nitty-gritty technical details of what I found and how I found it on my blog: Telegram is indistinguishable from an FSB honeypot https://rys.io/en/179.html Yes, my packet captures and a small Python library I wrote in the process are all published along. #Telegram #InfoSec #Privacy #Surveillance #Russia
-
@misterscience@mastodon.world 2025-06-10 12:13
@rysiek@mstdn.social TL;DR Don't use Telegram unless you're comfortable giving Russian authorities and intelligence operatives access to all your activity on that platform.
-
@zetabeta@mastodon.social 2025-06-10 12:27
@rysiek@mstdn.social i have said this for some other big tech companies. as i need another reason to boycott telegram, too any strikes already.
-
@Orca@nya.one 2025-06-10 13:53
@rysiek@mstdn.social I tried getting people off Telegram a few times. Every f- time their answer is "but everyone I chat with is on Telegram!" even when I said it once had a "very backdoor looking bug". ...... 😬
-
@david01928@mastodon.social 2025-06-10 14:26
@rysiek@mstdn.social даже по первому предложению статью не читая всю статью могу сказать что информация верная. Людям стоит перестать воспринимать этот сервис как приватный и конфиденциальный если хотят приватности. Уважаю автора.
-
@rtlc@mindly.social 2025-06-10 15:33
@rysiek@mstdn.social we definitely need more articles like this. Thank you for posting. When you think about it Telegram has so many red flags for an app that is supposed to be secure.
-
@whynothugo@fosstodon.org 2025-06-10 18:41
@rysiek@mstdn.social This has been well-known for many years. The thing is, people will flock to whatever is most convenient, and don't really care much about these things. Telegram has a far more polished UX and is easier to use than Signal, and even more so than XMPP or any user-centric or privacy-respecting protocol.
-
@RaulV@cyberplace.social 2025-06-10 19:36
@rysiek@mstdn.social Does the article state that all Telegram comms get routed through infrastructure physical located in Russia?
-
@DemFighter@mastodon.online 2025-06-10 20:33
@rysiek@mstdn.social I've always been calling it FSBgram. Durov has banned exactly zero pro-Kremlin propagandist channels, no matter how notorious and hateful. Meanwhile, there were many cases where the owners of the supposedly anonymous opposition channels were somehow suddenly "identified" and persecuted by the regime. It happens less often now because almost all the remaining opposition is either in jail or in exile, but ~5 years ago it was a very common occurrence.
-
@pft@infosec.exchange 2025-06-11 05:54
@rysiek@mstdn.social I posted your blog entry in our company's slack yesterday and got a very sloppy response: "Durov cannot be cooperating with FSB, otherwise he wouldn't have lost his billion $ company and home and moved to another country". Although I don't agree with that statement, it would also be interesting to follow the money here as well. I can imagine that Durov is still being paid by shady entities all over the world.
-
@Orca@nya.one 2025-06-11 10:45
@rysiek@mstdn.social That said, I did a brief lookup on Hurricane Electric's BGP toolkit and it seems none of the BGP AS Telegram ("Telegram Messenger Inc") owned have peered with any BGP AS owned by GNM ("Global Network Management Inc") so it's unlikely GNM is doing the routing for Telegram... 🤔 Update: Also HE looking glass reported it's the BGP neighbor of Telegram Messenger 🤔