Темно-серая зона экосистемы Telegram

[root]

Dark gray zone of the Telegram ecosystem​

This city of assassins, city of whores and thieves
As long as we believe in it.
And if we open our eyes, he is no longer there
And we again stand at the beginning of the century.
... Mother of the gods

In this article, the reader will not be imposed on the postulates about the Telegram ecosystem, or a discussion of the individual qualities of the messenger owner. I'll write down the points of the dark gray Telegram zone from my own experience:

1. free Dark Traffic Telegram (DTT);
2. open piracy;
3. depressing bug "bounty".

You can share your experience in the comments to the article.

Free DTT​

Last year 2019, when the developers of the Telegram messenger introduced a new feature: geo-chats (by the way, which is easy to fake with Fake GPS Location) ... It was at that very time that the hucksters perked up and climbed out of the dark depths of the Internet. IMHO spoiled the reputation of the messenger itself: a drug geography was created everywhere.

A few days ago, I sent dozens of reports / complaints to the Telegram team about such communities, and also complained to TP volunteers in anticipation of a "shooting", but the shooting did not follow, no one bothered to "reload the rifle", destroy such chat channels, no obvious reaction (normally) from the government forces Telegram-Dubai did not follow.

This screen and the excerpt quoted above are from my 2019 entry.

Since the time of the visible and invisible struggle, no less than 1.5 years have passed. Now 2021 is on the nose. Let's see how the Telegram moderators in God 'mode conducted their "blitzkrieg": contractionary fire on the lawless.

If you enter the name of the city in the Telegram search, then, as before, in the results you will receive, among other things, chats / channels offering illegal goods and services, which are often found on the darknet, because in the civilized web such parasites are usually caught or banned, but just not on Telegram.

December 2020

This Telegram policy applies not only to drug trafficking (the devil's harvest) ", But also for other illegal and questionable services:

محتوى مخفي: prostitution

محتوى مخفي: resale of personal data

محتوى مخفي: fakes

محتوى مخفي: документы

محتوى مخفي: cybercrimes

محتوى مخفي: weapon

محتوى مخفي: murders

UPD: In the comments report , Thank you Flashget , the DTT problem covers not only the CIS.

"Thanks to Telegram, every smartphone becomes a darknet."
... Quote from the source above

Open piracy​

In Telegram channels and bots, you can download music, films, unlicensed software, audio / books for which copyright holders did not give their permission for "similar" use and distribution for free.

Yesterday I came out on Habré about this news

“The European Commission has published a new list of resources that promote piracy and can benefit from it. It includes resources located outside the EU. For the first time Telegram and Vkontakte appear in the report.

From the very report , translation / quote.

A) "Telegram claims that they do not tolerate any malicious content on their platform and remove within 24 hours when reported by Autorità per le Garanzie nelle Comunicazioni AGCOM or interested parties via email."

B) "Telegram also indicated that their efforts to combat malicious content on their platform have been very successful in other areas."

Truth?

An example of a real story I encountered: an attacker began distributing pirated content (my piece) on the Telegram network. According to telegram.org/faq

I have sent a signed evidence report to dmca@telegram.org ... After 24 hours, according to the Telegram report, the pirated content was supposed to be covered up, but in fact I did not receive an answer. More than three months have passed since the DMCA report, and I still have not received any positive or negative decision from Telegram on my problem. Sometimes I ping "them", but to no avail.

A similar report was sent to other platforms where pirated content went. For example, Gitlab checked the facts and removed not only pirated materials in + - 48 hours, but also blocked the scammer's account (Now) without the possibility of recovery.

And statistical accounting of opinions on piracy in Tg 4.5 years ago

A source

Years later, the bots mentioned in the survey still work today.

Depressing bug "bounty"​

Some of the readers may have heard about bugs and vulnerabilities in Telegram, to which the management of the messenger did not react in any way or interpreted / awarded gifts to the researchers in their own way, and some of the Habr users themselves found bugs and features in the Telegram ecosystem.

For clarity, let's compare the description of the bug bounty Telegram programs with some open source project, for example, Veracrypt.

hackerone.com/telegram?type=team

A scanty description in 50 words for which holes Telegram is ready to pay baghunters "how much, for what and in what currency." The description of the entire bug "bounty" program for several years is even less than the description of some next messenger update, for example, the description of the update about animated stickers in Tg.

hackerone.com/ibb-veracrypt?type=team

You can also compare the bug bounty Telegram program with other incentive programs and see for yourself that the first one was made on an eccentric basis.

About the bug​

An example of a recent bug that I posted to security@telegram.org , adding to his track record, but as before, no response was received. In my opinion, I was in a hurry with the report, the bug looks more like a "scam" on the part of Telegram, and not a vulnerability.

The essence (until Telegram responds to the report, this is considered a bug, not a feature) : any user can access the blocked (e.g. pirate) "Remote" content on the Telegram network.

Case: for example, let's take a channel on which pirated content regularly appears. We will manually find such a plate that Telegram leaves by “deleting” this very content.

" This message couldn't be displayed on your device due to copyright infringement. "
t.me/freedomf0x/6842

This plate (via tool: search by channel - not searched) , this is a kind of "protection of two knights" from the messenger. A plaque means that there was "malicious content" in this place. The “remote” content is not available through the app.

We go to the Desktop Telegram version of the messenger, export the chat / channel history (by ticking the "files" checkbox and making restrictions on uploading a file to 2 GB) , choose a date (in this example, from March 21, 2020 to March 22, 2020) ... After the successful export of the history, the report of the html page will contain instead of a plate the same pirated content ...

A detailed example of the case is shown in the video below.



Why is this more like a "scam"? I think that Telegram is aware of all this orgy, the state of affairs at this point in time is simply satisfied with the management: "Well, how would we protect the content, because not everyone uses the Desktop version through which" remote content "is pulled out without any problems."

continued below

A source

 

[root]

Or here's another example.

We'll arm ourselves with the @flibustafreebookbot bot with which you can download books. This bot was blocked by Telegram, but an obvious loophole remained and allows downloading books. All you need to do is (replay system) : add the bot to your private chat and give "administrator" permission, after which the bot comes to life and works as if nothing had happened. By the way, this pirate bot runs on Desktop-e without any restrictions, which contradicts the very restrictions that TP with root access extended to it.

Right to left: @flibustafreebookbot is blocked (Android) ; bot @flibustafreebookbot (Android) works after a cheating trick; bot @flibustafreebookbot (Desktop) works without any tweaks.

Output​

Over the past year and a half, nothing has changed in the willow ecosystem, the scoundrels continue to trade, plant, evade responsibility. Telegram has remained a messenger whose management is fighting for the freedom and safety of its business values, without prohibiting the promotion of "dubious services" at its facilities.

Telegram's claims against malicious content are farce. Responsible persons on the part of the social network do not care about the things mentioned in this article, do not respond to user reports, but at the same time they justify themselves before the commissions and courts when they start to look after them and punish them for deceit, which they themselves know about.

 

[Матушкин Андрей Николаевич]

Dark gray zone of the Telegram ecosystem​

In this article, the reader will not be imposed on the postulates about the Telegram ecosystem, or a discussion of the individual qualities of the messenger owner. I'll write down the points of the dark gray Telegram zone from my own experience:

1. free Dark Traffic Telegram (DTT);
2. open piracy;
3. depressing bug "bounty".

Thanks for the extremely interesting material.

 

[Kiril Harchevnikov]

Interesting stuff!

 

[Частный детектив. Москва.]

It is not surprising that all the darkest things are in the Telegram

 

[частный детектив. Узбекистан. Ташкент.]

Is there a geo chat in the telegram? Did not know.

 

[Частный детектив. Москва.]

Is there a geo chat in the telegram? Did not know.

Upgrade your carts

 

[David Mamedov]

Thanks for the interesting article!

 

[alexsey1417]

Well this is a telegram. Nothing surprising or critical.

 

[Частный детектив Донецк]

It’s strange that I didn’t know this. The post turned out to be interesting!