📜 ⬆️ ⬇️

A bug in Telegram VoIP, which allows you to find out the address of the interlocutor

So hello everyone! After the appearance of VoIP in Telegram (while in mobile clients), I accidentally noticed one unpleasant thing, this is an open debug ...

Introduction


In general, it was evening, I made myself an application to control RPI from the series “Too lazy to get up and turn off the light”)

Consequently, the phone was connected via ADB so that you could see 2 unfortunate buttons for various tests and a friend called the telegram, while the phone was still in ADB, I decided to see the telegram logs for the sake of interest.
')
Further more interesting, there was information about the call and a comment about this kind of "Press 10 on the name of the subscriber to see the information about the call."

Without thinking twice, I clicked and saw interesting statistics:

image

Where [UDP_RELAY] / [UDP_RELAY_IN_USE] is the telegram server through which the traffic passes and the most interesting [UDP_P2P_INET] is the IP address of the interlocutor (if static - then you can already entertain)

Run to the support


Immediately I ran to write to the support and on Twitter , referring to the telegram tape, but the answer came very surprising ...

image

Then I thought a little and decided to find the buns the next day ... On the client for iOS, the debug window looks very interesting, as you can change the conversation settings.

image

This is all well and good, but if you look at the screenshot above, you will notice that editing the settings on the apple client is possible and you can turn off P2P and the address of the other party will not be visible.

And finally, Clear Voice and the bitrate up to 35 kbit - so myself)

Source: https://habr.com/ru/post/325752/


All Articles