search

zhukov / webogram

Telegram web application, GPL v3
https://web.telegram.org
GNU General Public License v3.0
7.94k stars 2.36k forks source link

Censorship Achilles Heal #2051

Open f1linux opened 3 years ago

f1linux commented 3 years ago

As "the coalition for a safer web" emboldened by getting the Parler app removed by Google and Apple has now set Telegram in their sights for removal, I tested Telegram's web interface. Works beautifully, but there's a big Achilles heal I can see: the Security Code required to access the web interface is sent to the Telegram App.

So as you can see the problem: If there's no Telegram app- which is highly likely given Apple and Google's complicity in censorship, you can't login through the web interface either. This requires URGENT remediation. Thanks folks-

Aokromes commented 3 years ago

you can login with telegram desktop without having to install application on smartphone.

f1linux commented 3 years ago

But when I attempted to login to Telegram through the web browser, I was asked for my mobile number and then an auth code was sent to Telegram on my phone. Seems to be a bit of a catch-22 going on here unless I'm missing something.

d-Rickyy-b commented 3 years ago

@f1linux The login screen even tells you that you can request a code via SMS after a certain period of time if you are not able to view the code within any other Telegram app.

bugnano commented 3 years ago

I don't know what happened, but the instance hosted on web.telegram.org no longer has the request code via SMS option (or if it exists, it is well hidden). This is a serious issue, as I used to use only Telegram Web, but this Tuesday, after I reinstalled my Operating System, I could not login into Telegram, as the code has been sent to my previous Telegram Web instance, and I didn't find the option to send the code via SMS. I tried a couple more times, and now I'm banned from Telegram due to too many login attempts.

This is a serious issue that needs to be fixed

Aokromes commented 3 years ago

try webk or webz instead.

bugnano commented 3 years ago

try webk or webz instead.

The fatc that I've been banned is because, after unsuccessfully trying to log in via Telegram Web, I tried to log in both in WebK and WebZ, but neither offered me the option to receive the code via SMS, and, by trying them both, I reached the maximum login limit