Telegram 单文件大小限制变更

从 Telegram Desktop v2.1.18 Beta 版本开始，先前上传单文件体积最大 1.5GB 的限制已更改至最大体积约 1.95GB，具体如下：
2000×1024×1024 Bytes
= 2,097,152,000 Bytes
= 2,048,000 KB
= 2,000 MB
= 1.953125 GB

#Telegram @TGgeek

Telegram 新版本：
• 群组语音通话
• 贴纸加载时显示轮廓
• 意见建议反馈平台
• ……

https://telegram.org/blog/voice-chats
反馈平台： https://bugs.telegram.org/

很喜欢贴纸轮廓和反馈平台这两个功能。一个解决了一大痛点，另一个为将来解决更多痛点提供了盼头。

#Telegram小考察

#Telegram

【Telegram 超过5亿用户，过去72小时增加2500万用户】

Telegram surpassed 500 million active users.

In the past 72 hours alone, more than 25 million new users from around the world joined Telegram.（Durov）

相关新闻：
Sensor Tower：受特朗普支持者追捧，Telegram在美下载量升至第二

#特朗普 #telegram #标记 #诈骗

【 trump 频道被标记为诈骗】

今日，telegram 对 @trump 频道加上了 scam 的标签，并添加了一条警告。警告中称，“许多用户向我们反馈这个账户是诈骗或者虚假账号，请保持小心尤其是它向你索要金钱时”。值得一提的是，这似乎是 telegram 首次使用 scam 标签。

伊朗資訊和通信技術部副部長穆罕默德-賈瓦德·阿扎里·賈赫羅米（محمدجواد آذری جهرمی）開設了經 #Telegram 認證的頻道 @azarijahromi 。伊朗至今依然封鎖Telegram。

快再表演一下那個🌚

https://t.me/tgsucks/1688

小想法，Durov 直到推出讨论群和管理员匿名之后才开讨论群，是不是因为怕自己账号暴露然后招来 Spam？若是的话，他就不能做一下禁止陌生人 PM 的功能吗？

#TIL #Telegram小考察

Telegram 在多客户端登录同一账号时会向已登录的客户端发送验证码。如果你在收到验证码之后通过同一帐号将验证码发给他人，Telegram 会主动将该验证码作废，防止他人通过社会工程学方式盗取帐号。

via https://t.me/PagerMaid_Modify/129

Telegram CEO Durov 发文

Durov 在其俄语官方频道发布投票。
标题：Apple 公司要求删除 Telegram 应用内散播种子的茄子，我们怎么做更好？
● 选项1 删除喷涌的茄子 🍆
● 选项2 完全停止 Telegram 在 iOS 设备运行
您可以点此参与投票。

TG极客 @TGgeek 注：此前支持的 🍆 和 🍑 的动态 emoji 动画目前已不显示，未来版本可能加入的 Message Reaction (即消息反应，类似 iOS 平台 iMessage Reactions 功能) 中的可选的 emoji 也可能受到影响。

🏷 TAG #Telegram #Durov
📢 TG极客 @TGgeek
👥 大学联盟 @UniversityAlliance

Telegram 私密邀请链接形式更改

Telegram 新生成的私密频道或群组邀请链接形式更改

由此前

https://t.me/joinchat/TGgeekGiveUanExample 

更改为当前

https://t.me/+TGgeekGiveUanExample

已生成的旧版邀请链接仍可用，不需要重新生成。
新版邀请链接目前还不支持显示链接预览，对比带有 joinchat 前缀的邀请链接，如图所示。

🏷 TAG #Telegram
📢 TG极客 @TGgeek
👥 大学联盟 @UniversityAlliance

#Telegram 官方推特澄清HMS相關服務只會在面向華為手機的版本裡提供。

https://twitter.com/telegram/status/1550242842076856320

#今天又看了啥 #telegram #security #CVE #XSS
Telegram Web app XSS/Session Hijacking 1-click [CVE-2024–33905]

Attack surface: Telegram Mini Apps
“Telegram Mini Apps are essentially web applications that you can run directly within the Telegram messenger interface. Mini Apps support seamless authorization, integrated crypto and fiat payments (via Google Pay and Apple Pay), tailored push notifications, and more.”
This attack surface also affects web3 users because it handles crypto payments through the TON Blockchain.

Telegram fixed the flaw on March 11th, 2024.
Vulnerable version: Telegram WebK 2.0.0 (486) and below
Fixed version: Telegram WebK 2.0.0 (488)

https://medium.com/@pedbap/telegram-web-app-xss-session-hijacking-1-click-95acccdc8d90

#Telegram 修改了Bot ToS並通知Bot開發者，要求任何涉及加密貨幣功能的Telegram Bot和Mini App必須在2月1日之前移除所有非TON鏈的加密貨幣功能（bridge功能除外），2月21日前所有錢包bot / mini app必須統一使用TON Connect SDK與TON鏈進行交互。

通知全文：

IMPORTANT Update to Developer Terms

Dear <DEVELOPER>, you're receiving this message because you are the developer of <BOT_USERNAME>.

On January 21, 2025, Telegram updated its Terms of Service for Bot Developers and published new guidelines for mini apps that choose to integrate blockchain technology or promote such mini apps.

These changes were made to ensure that blockchain-based mini apps provide a uniform experience and meet the speed, reliability and security standards of Telegram and its users.

The updated terms require that mini apps on the Telegram platform:

1. Exclusively use the TON Blockchain for the creation and distribution of cryptocurrency tokens or blockchain assets.
2. Only interact with cryptocurrency wallets connected by the TON Connect SDK (other protocols are permitted for bridging assets from other blockchains).
3. Do not promote cryptocurrency wallets, unless such wallets are based on the TON blockchain, exclusively use TON Connect for interactions with apps, and primarily provide services related to the TON blockchain.

See the Terms of Service and guidelines for the full details.

Required Changes

To maintain uninterrupted access for Telegram users, there is a grace period during which developers can make the necessary updates to their mini apps. However, clause 7.1 is effective immediately.

- If your app generates or distributes blockchain assets that are not on the TON blockchain, it must immediately stop and begin using only the TON blockchain.

- If your app interfaces with or functions as a wallet, it must exclusively use TON Connect for all interactions by February 1, 2025.

- If your app promotes any cryptocurrency wallets or platforms that do not meet the new requirements, it must remove references to these services by February 1, 2025.

- If your app operates on other blockchains, it must transition to TON by February 21, 2025. This includes bridging existing assets, migrating smart contracts, and exclusively utilizing TON Connect. If you wish to contact us about transitioning to TON, please send a message with the tag #MigrationToTON to @BotSupport.

-----

If you do NOT have mini apps, or your mini apps are NOT blockchain based and do NOT promote blockchain-related apps, this change does not affect you.

See the Terms of Service and guidelines for the full details.

The Telegram Team

#Telegram 已經將原來處於beta的简体中文和繁體中文語言包晉級為正式官方語言。同時加入正式支援列表的還有：
芬兰语、希伯来语、匈牙利语、挪威语（官方書面語）、斯洛伐克语、瑞典语、乌兹别克语及越南语。
Finnish, Hungarian, Norweigian (Bokmål), Slovak, Swedish, Uzbek & Vietnamese.

Telegram 短域名 t.me 被注册局暂停解析

#telegram

• 根据 WHOIS 记录显示，该域名注册商为 GoDaddy，目前状态为：

serverHold
域名暂停解析（网站和邮箱都会无法使用）
serverDeleteProhibited
注册局禁止删除
serverTransferProhibited
注册局禁止转移
serverUpdateProhibited
注册局禁止修改

• 目前官方尚未公布具体原因
• telegram.me 域名正常

👉🏿 @DocOfCard_channnel