Comment

Comment by tarasmatsyk

TL;DR

A TG server was sending a "salt" to clients in order to randomize keys (telegram claim) when in fact the "salt" turned out useless in terms of encryption and the only reasonable explanation for the "nonce" was using it as a backdoor to perform MITM attack.

You decide whether it was done intenionally or because of lack of sleep/understanding

PS. an original author got 100k$ for finding/exposing a potential backdoor.

parent tarasmatsyk 5 years ago

No comments yet

Be the first to share your thoughts.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton