[HN] Telegram Is Leaking User IP Addresses to Contacts

This is the best summary I could come up with:

The popular messaging app Telegram can leak your IP address if you simply add a hacker to your contacts and accept a phone call from them.

Denis Simonov, a security researcher, who is also known as n0a, recently highlighted the issue and wrote a simple tool to exploit it.

TechCrunch verified the researcher’s findings by adding Simonov to the contacts of a newly created Telegram account.

Simonov then called the account, and shortly after provided TechCrunch with the IP address of the computer where the experiment was being carried out.

The fact that Telegram leaks your IP address to people in your contacts during a voice call has been known for years, but it’s likely that new, less technical users may not be aware.

To avoid leaking your IP address, you have to go to Telegram’s Settings > Privacy and Security > Calls, and then select “Never” in the Peer-to-Peer menu, as shown below.

The original article contains 443 words, the summary contains 154 words. Saved 65%. I'm a bot and I'm open source!

2 comments

But... anything P2P does that, no?
This is the best summary I could come up with:
The popular messaging app Telegram can leak your IP address if you simply add a hacker to your contacts and accept a phone call from them.
Denis Simonov, a security researcher, who is also known as n0a, recently highlighted the issue and wrote a simple tool to exploit it.
TechCrunch verified the researcher’s findings by adding Simonov to the contacts of a newly created Telegram account.
Simonov then called the account, and shortly after provided TechCrunch with the IP address of the computer where the experiment was being carried out.
The fact that Telegram leaks your IP address to people in your contacts during a voice call has been known for years, but it’s likely that new, less technical users may not be aware.
To avoid leaking your IP address, you have to go to Telegram’s Settings > Privacy and Security > Calls, and then select “Never” in the Peer-to-Peer menu, as shown below.
The original article contains 443 words, the summary contains 154 words. Saved 65%. I'm a bot and I'm open source!