Mastodawn

2d ago

Раньше ФСБ-шники могли только определить, кто с кем общается. Теперь у 5 миллионов человек установлен троян, дающий полный доступ к переписке.

Будь ты хоть трижды супер-пупер защищённым конспиратором, спецслужбы теперь могут:

Шаг 1. Вычислить твой круг общения. Да, даже если ты прячешься за Tor, ведь инфраструктуру телеграма обслуживает российская компания.
Шаг 2. Найти из него пользователей "Телеги".
Шаг 3. Прочитать историю переписки с тобой и отправить фишинговую ссылку.

(2/2)

@cybertailor Телега — это отдельный клиент, верно?

Это также отдельный сервис от Telegram? Или нет?

2d ago

@rysiek "Telega" is a third-party client developed with close ties to VK. It is not affiliated with Telegram, although it's a big question why Telegram tolerates the DC substitution.

There is more info in the report by RKS Global:
https://rks.global/en/research/alt-telegram-clients/
https://files.rks.global/telegram_alt_test_en.pdf

Alternative Clients: Are There Safe Substitutes for Telegram?

Analysis of 8 alternative Telegram clients for Android

@cybertailor thank you. I do understand Russian so I am also reading the original links you posted.

So, tl;dr is, as I understand it: third party Telegram client called Telega is now MitMing connections between Telega app and Telegram servers, by pushing them through their own infrastructure.

RE: https://floss.social/@foxy/116263870432293353

@rysiek

@foxy has compared "Telega" with Telegram clones developed by the Iranian goverment in 2018. They were removed from Google Play but Telegram itself has refused to take action besides issuing a mere warning.

https://iranhumanrights.org/2018/12/why-did-telegram-warn-users-that-iranian-versions-of-app-telegram-talaeii-and-hotgram-are-unsafe/

@cybertailor @foxy right. That's super sus.

One thing I don't get is how is Telegram being blocked if alternative clients can still reach its infrastructure? What am I missing here?

Is it a "users in Russia vs. users outside of Russia" thing? Or is Telegram "blocked" by being removed from the Play Store only, not on the network level? Or do these alternative clients not work from within Russia (well, apart from Telega I guess)?

2d ago

@rysiek @foxy Russia blocks Telegram on the network level
https://explorer.ooni.org/ru/chart/mat?probe_cc=RU&test_name=telegram

Alternative clients also don't work without a proxy or VPN.

OONI Explorer - Open Data on Internet Censorship Worldwide

OONI Explorer is an open data resource on Internet censorship around the world consisting of more than a billion measurements on network interference.

@cybertailor @foxy right. Thanks!