Telegram for macOS can save self-destructing messages Trustwa | Telegram Info English

Telegram for macOS can save self-destructing messages

Trustwave experts have found that Telegram for macOS allows to save self-destructing messages from secret chats.

This issue was fixed in Telegram for macOS 7.7 (215786), after the researchers reported vulnerability to the developers. However, experts have found an additional error that also allows you to save self-destructing media.

The Telegram developers informed the researchers that the second error will not be fixed, since it is impossible to protect yourself from direct access to the application folder.

"Please note that the primary purpose of the self-destruct timer is to serve as a simple way to auto-delete individual messages. However, there are some ways to work around it that are outside what the Telegram app can control (like copying the app’s folder), and we clearly warn users about such circumstances " the developers said.

The researchers disagree with this explanation. In their opinion, Telegram can fix the error, for example, by processing all self-destructing media in the same way as attachments, that is, not uploading them to the local file system until they are opened.