{"id":2754,"date":"2021-08-06T19:26:57","date_gmt":"2021-08-06T13:56:57","guid":{"rendered":"https:\/\/xiarch.com\/blog\/?p=2754"},"modified":"2021-08-06T19:45:20","modified_gmt":"2021-08-06T14:15:20","slug":"telegram-for-mac-flaws-allow-you-to-save-self-destructing-messages-forever","status":"publish","type":"post","link":"https:\/\/xiarch.com\/blog\/telegram-for-mac-flaws-allow-you-to-save-self-destructing-messages-forever\/","title":{"rendered":"Telegram for Mac Flaws Allow you to Save Self-destructing Messages Forever"},"content":{"rendered":"\n
Investigators have recently found a way for users on Telegram for Mac to preserve specific self-destructing messages forever or view them without even the sender\u2019s knowledge. Telegram provides an optional \u2018Secret Chat\u2019 mode that increases the privacy of chats by allowing a variety of additional functionality.<\/p><\/p>\n\n\n\n
When you initiate a Secret Chat with another Telegram user, the connection will become end-to-end encrypted, and all the messages, attachments, and media will be set to automatically self-destruct and be deleted from all the devices after a certain period. <\/p><\/p>\n\n\n\n
Although, new bugs found by Reegun Richard Jayapaul, Trustwave SpiderLabs\u2019 LeadThreat Architect, permit Telegram for Mac users to save self-destructing messages and attachments forever.<\/p><\/p>\n\n\n\n
When media files, other than attachments, are sent in a message, they are preserved in a cache folder located at the following path, with the XXXXXX unique number associated with an account.<\/p><\/p>\n\n\n\n
In Which Version of Telegram the Bug was fixed? <\/strong> <\/h2>\n\n\n\n
Telegram will not download attachments (documents like text, doc, or pdf files, and Audio and video) unless a recipient attempts to launch them. This is likely done due to the larger size of attachments.<\/p><\/p>\n\n\n\n
When a receiver reads the message or views the content, the self-destruct timer will initiate, and when finished, the content will be automatically be deleted.<\/p><\/p>\n\n\n\n
Moreover, Reegun founded that the self-destructing media was not removed from the cache folder, and a user could save it to another location on their hard drive.<\/p><\/p>\n\n\n\n
This flaw was fixed by Telegram for macOS in version 7.7 (215786) or later after it was responsibly reported, but there is an additional error that permits you to save self-destructible media.<\/p><\/p>\n\n\n\n
How to Copy Unopened Self-Destructing Media?<\/strong><\/h2>\n\n\n\n
<\/figure><\/div>\n\n\n\n
As video messages, images, voice recordings, or location sharing images are automatically downloaded to the cache, Reegun founded that a user could simply copy the media from the cache folder before viewing it in the program.<\/p><\/p>\n\n\n\n
\u201cBob transmit a media message to Alice (whether voice recordings, images, video messages or location sharing). Without opening the message, since it may self-destruct, Alice instead goes to the cache folder and access the media file,\u201d Reegun also describes in his report.<\/p><\/p>\n\n\n\n
\u201cShe can also delete the messages from the folder without reading them in the application. Regardless, Bob will not know whether Alice has read the message, and Alice will retain a permanent copy of the media.\u201d<\/p><\/p>\n\n\n\n
Telegram told Reegun that this second error would not be fixed as there is no way to secure direct access to the application\u2019s folder. <\/p><\/p>\n\n\n\n
“Please note that the primary purpose of the self-destruct timer is to serve as a simple way to auto-delete individual messages. However, there are some ways to work around it that are outside what the Telegram app an control (like copying the app\u2019s folder), and we clearly warn users about such circumstances: https:\/\/telegram.org\/faq#q-can-telegram-protect-me-against-everything” – Telegram.<\/p><\/p>\n\n\n\n
Reegun also told our experts that he denies and that Telegram could resolve the flaw by treating all self-destructing media the same way as attachments and not download them to the local file system until they are launched.<\/p><\/p>\n\n\n\n
In February, security investigators founded the same vulnerability in the Secrete Chat feature that caused self-destructing media not to be deleted from recipients\u2019 devices.<\/p><\/p>\n\n\n\n
\u201cThis is a same error, but the media was left in the whole different file location. This researcher\u2019s findings were patched in Telegram v7.4, while our investigators were not absolutely patched until v7.7.\u201d <\/p><\/p>\n\n\n\n
Our experts have contacted Telegram about the error to ask why this flaw is not being instituted but have not heard back. <\/p><\/p>\n","protected":false},"excerpt":{"rendered":"
Investigators have recently found a way for users on Telegram for Mac to preserve specific self-destructing messages forever or view them without even the sender\u2019s knowledge. Telegram provides an optional \u2018Secret Chat\u2019 mode that increases the privacy of chats by allowing a variety of additional functionality. When you initiate a Secret Chat with another Telegram […]<\/p>\n","protected":false},"author":2,"featured_media":2756,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[6],"tags":[],"yoast_head":"\n
Telegram for Mac Flaws Allow you to Save Self-destructing Messages Forever - Xiarch Solutions Private Limited<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/xiarch.com\/blog\/telegram-for-mac-flaws-allow-you-to-save-self-destructing-messages-forever\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Telegram for Mac Flaws Allow you to Save Self-destructing Messages Forever - Xiarch Solutions Private Limited\" \/>\n<meta property=\"og:description\" content=\"Investigators have recently found a way for users on Telegram for Mac to preserve specific self-destructing messages forever or view them without even the sender\u2019s knowledge. Telegram provides an optional \u2018Secret Chat\u2019 mode that increases the privacy of chats by allowing a variety of additional functionality. When you initiate a Secret Chat with another Telegram […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/xiarch.com\/blog\/telegram-for-mac-flaws-allow-you-to-save-self-destructing-messages-forever\/\" \/>\n<meta property=\"og:site_name\" content=\"Xiarch Solutions Private Limited\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/xiarch\/\" \/>\n<meta property=\"article:published_time\" content=\"2021-08-06T13:56:57+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-08-06T14:15:20+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/08\/Telegram-for-Mac-Flaws-Allow-you-to-Save-Self-destructing-Messages-Forever-featured-image.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1000\" \/>\n\t<meta property=\"og:image:height\" content=\"525\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Xiarch Security\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@xiarch\" \/>\n<meta name=\"twitter:site\" content=\"@xiarch\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Xiarch Security\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/xiarch.com\/blog\/telegram-for-mac-flaws-allow-you-to-save-self-destructing-messages-forever\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/xiarch.com\/blog\/telegram-for-mac-flaws-allow-you-to-save-self-destructing-messages-forever\/\"},\"author\":{\"name\":\"Xiarch Security\",\"@id\":\"https:\/\/xiarch.com\/blog\/#\/schema\/person\/655d814a04eacce56942270cfdc5c59c\"},\"headline\":\"Telegram for Mac Flaws Allow you to Save Self-destructing Messages Forever\",\"datePublished\":\"2021-08-06T13:56:57+00:00\",\"dateModified\":\"2021-08-06T14:15:20+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/xiarch.com\/blog\/telegram-for-mac-flaws-allow-you-to-save-self-destructing-messages-forever\/\"},\"wordCount\":632,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/xiarch.com\/blog\/#organization\"},\"articleSection\":[\"Vulnerabilities\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/xiarch.com\/blog\/telegram-for-mac-flaws-allow-you-to-save-self-destructing-messages-forever\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/xiarch.com\/blog\/telegram-for-mac-flaws-allow-you-to-save-self-destructing-messages-forever\/\",\"url\":\"https:\/\/xiarch.com\/blog\/telegram-for-mac-flaws-allow-you-to-save-self-destructing-messages-forever\/\",\"name\":\"Telegram for Mac Flaws Allow you to Save Self-destructing Messages Forever - Xiarch Solutions Private Limited\",\"isPartOf\":{\"@id\":\"https:\/\/xiarch.com\/blog\/#website\"},\"datePublished\":\"2021-08-06T13:56:57+00:00\",\"dateModified\":\"2021-08-06T14:15:20+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/xiarch.com\/blog\/telegram-for-mac-flaws-allow-you-to-save-self-destructing-messages-forever\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/xiarch.com\/blog\/telegram-for-mac-flaws-allow-you-to-save-self-destructing-messages-forever\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/xiarch.com\/blog\/telegram-for-mac-flaws-allow-you-to-save-self-destructing-messages-forever\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/xiarch.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Telegram for Mac Flaws Allow you to Save Self-destructing Messages Forever\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/xiarch.com\/blog\/#website\",\"url\":\"https:\/\/xiarch.com\/blog\/\",\"name\":\"Xiarch Solutions Private Limited\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/xiarch.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/xiarch.com\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/xiarch.com\/blog\/#organization\",\"name\":\"Xiarch\",\"url\":\"https:\/\/xiarch.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/xiarch.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/06\/xi-logo-002.png\",\"contentUrl\":\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/06\/xi-logo-002.png\",\"width\":300,\"height\":300,\"caption\":\"Xiarch\"},\"image\":{\"@id\":\"https:\/\/xiarch.com\/blog\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/xiarch\/\",\"https:\/\/twitter.com\/xiarch\",\"https:\/\/www.linkedin.com\/company\/xiarch\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/xiarch.com\/blog\/#\/schema\/person\/655d814a04eacce56942270cfdc5c59c\",\"name\":\"Xiarch Security\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/xiarch.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/d33699ed91b76568586dc1ae278ea568?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/d33699ed91b76568586dc1ae278ea568?s=96&d=mm&r=g\",\"caption\":\"Xiarch Security\"},\"sameAs\":[\"https:\/\/xiarch.com\/blog\/\"],\"url\":\"https:\/\/xiarch.com\/blog\/author\/vector\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Telegram for Mac Flaws Allow you to Save Self-destructing Messages Forever - Xiarch Solutions Private Limited","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/xiarch.com\/blog\/telegram-for-mac-flaws-allow-you-to-save-self-destructing-messages-forever\/","og_locale":"en_US","og_type":"article","og_title":"Telegram for Mac Flaws Allow you to Save Self-destructing Messages Forever - Xiarch Solutions Private Limited","og_description":"Investigators have recently found a way for users on Telegram for Mac to preserve specific self-destructing messages forever or view them without even the sender\u2019s knowledge. Telegram provides an optional \u2018Secret Chat\u2019 mode that increases the privacy of chats by allowing a variety of additional functionality. When you initiate a Secret Chat with another Telegram […]","og_url":"https:\/\/xiarch.com\/blog\/telegram-for-mac-flaws-allow-you-to-save-self-destructing-messages-forever\/","og_site_name":"Xiarch Solutions Private Limited","article_publisher":"https:\/\/www.facebook.com\/xiarch\/","article_published_time":"2021-08-06T13:56:57+00:00","article_modified_time":"2021-08-06T14:15:20+00:00","og_image":[{"width":1000,"height":525,"url":"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/08\/Telegram-for-Mac-Flaws-Allow-you-to-Save-Self-destructing-Messages-Forever-featured-image.jpg","type":"image\/jpeg"}],"author":"Xiarch Security","twitter_card":"summary_large_image","twitter_creator":"@xiarch","twitter_site":"@xiarch","twitter_misc":{"Written by":"Xiarch Security","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/xiarch.com\/blog\/telegram-for-mac-flaws-allow-you-to-save-self-destructing-messages-forever\/#article","isPartOf":{"@id":"https:\/\/xiarch.com\/blog\/telegram-for-mac-flaws-allow-you-to-save-self-destructing-messages-forever\/"},"author":{"name":"Xiarch Security","@id":"https:\/\/xiarch.com\/blog\/#\/schema\/person\/655d814a04eacce56942270cfdc5c59c"},"headline":"Telegram for Mac Flaws Allow you to Save Self-destructing Messages Forever","datePublished":"2021-08-06T13:56:57+00:00","dateModified":"2021-08-06T14:15:20+00:00","mainEntityOfPage":{"@id":"https:\/\/xiarch.com\/blog\/telegram-for-mac-flaws-allow-you-to-save-self-destructing-messages-forever\/"},"wordCount":632,"commentCount":0,"publisher":{"@id":"https:\/\/xiarch.com\/blog\/#organization"},"articleSection":["Vulnerabilities"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/xiarch.com\/blog\/telegram-for-mac-flaws-allow-you-to-save-self-destructing-messages-forever\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/xiarch.com\/blog\/telegram-for-mac-flaws-allow-you-to-save-self-destructing-messages-forever\/","url":"https:\/\/xiarch.com\/blog\/telegram-for-mac-flaws-allow-you-to-save-self-destructing-messages-forever\/","name":"Telegram for Mac Flaws Allow you to Save Self-destructing Messages Forever - Xiarch Solutions Private Limited","isPartOf":{"@id":"https:\/\/xiarch.com\/blog\/#website"},"datePublished":"2021-08-06T13:56:57+00:00","dateModified":"2021-08-06T14:15:20+00:00","breadcrumb":{"@id":"https:\/\/xiarch.com\/blog\/telegram-for-mac-flaws-allow-you-to-save-self-destructing-messages-forever\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/xiarch.com\/blog\/telegram-for-mac-flaws-allow-you-to-save-self-destructing-messages-forever\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/xiarch.com\/blog\/telegram-for-mac-flaws-allow-you-to-save-self-destructing-messages-forever\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/xiarch.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Telegram for Mac Flaws Allow you to Save Self-destructing Messages Forever"}]},{"@type":"WebSite","@id":"https:\/\/xiarch.com\/blog\/#website","url":"https:\/\/xiarch.com\/blog\/","name":"Xiarch Solutions Private Limited","description":"","publisher":{"@id":"https:\/\/xiarch.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/xiarch.com\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/xiarch.com\/blog\/#organization","name":"Xiarch","url":"https:\/\/xiarch.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/xiarch.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/06\/xi-logo-002.png","contentUrl":"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/06\/xi-logo-002.png","width":300,"height":300,"caption":"Xiarch"},"image":{"@id":"https:\/\/xiarch.com\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/xiarch\/","https:\/\/twitter.com\/xiarch","https:\/\/www.linkedin.com\/company\/xiarch"]},{"@type":"Person","@id":"https:\/\/xiarch.com\/blog\/#\/schema\/person\/655d814a04eacce56942270cfdc5c59c","name":"Xiarch Security","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/xiarch.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/d33699ed91b76568586dc1ae278ea568?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/d33699ed91b76568586dc1ae278ea568?s=96&d=mm&r=g","caption":"Xiarch Security"},"sameAs":["https:\/\/xiarch.com\/blog\/"],"url":"https:\/\/xiarch.com\/blog\/author\/vector\/"}]}},"_links":{"self":[{"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/posts\/2754"}],"collection":[{"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/comments?post=2754"}],"version-history":[{"count":3,"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/posts\/2754\/revisions"}],"predecessor-version":[{"id":2763,"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/posts\/2754\/revisions\/2763"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/media\/2756"}],"wp:attachment":[{"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/media?parent=2754"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/categories?post=2754"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/xiarch.com\/blog\/wp-json\/wp\/v2\/tags?post=2754"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
![\"Telegram-for-Mac-Flaws-Allow-you-to-Save-Self-destructing-Messages-Forever-image1\"](\"https:\/\/xiarch.com\/blog\/wp-content\/uploads\/2021\/08\/Telegram-for-Mac-Flaws-Allow-you-to-Save-Self-destructing-Messages-Forever-image1-1024x624.jpg\")
<\/figure><\/div>\n\n\n\n