Forwarded from Telegram Info English (Sominemo)
Fullscreen Rich Text Editor, Communities, New GIF Search, and Ephemeral Messages
Telegram for Android and iOS updated to version 12.9, while Telegram Desktop updated to version 7.0. In its July update, Telegram brings a much more extensive variety of text formatting options, communities, and much more:
• Advanced Text Editor: Users can now send Rich Formatting messages from the new full-screen text editor. It includes many styling options: headings, tables, lists, quotes, LaTeX math formulas, code blocks, and expandable spoilers. It also allows users to mix photos and videos right in the middle of messages by creating collages or carousel slideshows.
The editor is available under📎 Attach › Article. Alternatively, in mobile apps you can tap the ↖ icon above the “Send” button. The full-screen editor allows users to send messages that are up to 32,768 characters long.
Most of the key features of the full-screen editor are only available to Premium users, although the full-screen UI itself can be used for free.
• Communities: Organize communities that bring theme-related chats, channels, or even bots closer together. You can't add big entities, though: Telegram limits chats and channels by their member count. The @tginfo editors are still researching the limitations of this feature.
Make sure not to confuse communities with forums: each chat and channel remains independent, while users can view the list and join each separately.
Community chats can be visible to all members or be hidden, in which case only community admins and the members of the hidden chat can see it. Community chats and channels can merge into a single item in the chat list — this is controlled by the community admins.
• Ephemeral messages for bots: Bots and users can now message and reply to each other privately even in the middle of a group chat — such messages are visible only to the specific recipient and the bot that sent them. Ephemeral commands and replies to them are marked with a special👁 crossed-out eye icon.
When a command is ephemeral, the user's initial message remains fully invisible to all members and bots, which allows confidential interactions to take place even in public spaces. Besides, such messages will be invisible if you log into your account from a new device.
• Updated GIF Search: The GIF panel now searches across 350 million GIF animations in 36 languages. The search engine works thanks to Telegram's indexing of widely shared, publicly available GIFs using the in-house Cocoon AI project. Alas, Telegram doesn't clarify what “publicly available” entails.
The change was caused by Google shutting down access to its Tenor GIF library. Telegram claims the new GIF search is private and doesn't depend on third-party services, and adds that it works much faster than before.
Article: telegram.org/blog/communities-editor-invisible-messages/
Download the update
• Android: Google Play, APK from the official website or verified channel.
• iOS: App Store.
• Windows/macOS/Linux: official website or GitHub.
• Windows: Microsoft Store.
• Linux: Flathub or Snapcraft.
#update #Android #iOS #Desktop
Telegram for Android and iOS updated to version 12.9, while Telegram Desktop updated to version 7.0. In its July update, Telegram brings a much more extensive variety of text formatting options, communities, and much more:
• Advanced Text Editor: Users can now send Rich Formatting messages from the new full-screen text editor. It includes many styling options: headings, tables, lists, quotes, LaTeX math formulas, code blocks, and expandable spoilers. It also allows users to mix photos and videos right in the middle of messages by creating collages or carousel slideshows.
The editor is available under
Most of the key features of the full-screen editor are only available to Premium users, although the full-screen UI itself can be used for free.
• Communities: Organize communities that bring theme-related chats, channels, or even bots closer together. You can't add big entities, though: Telegram limits chats and channels by their member count. The @tginfo editors are still researching the limitations of this feature.
Make sure not to confuse communities with forums: each chat and channel remains independent, while users can view the list and join each separately.
Community chats can be visible to all members or be hidden, in which case only community admins and the members of the hidden chat can see it. Community chats and channels can merge into a single item in the chat list — this is controlled by the community admins.
• Ephemeral messages for bots: Bots and users can now message and reply to each other privately even in the middle of a group chat — such messages are visible only to the specific recipient and the bot that sent them. Ephemeral commands and replies to them are marked with a special
When a command is ephemeral, the user's initial message remains fully invisible to all members and bots, which allows confidential interactions to take place even in public spaces. Besides, such messages will be invisible if you log into your account from a new device.
• Updated GIF Search: The GIF panel now searches across 350 million GIF animations in 36 languages. The search engine works thanks to Telegram's indexing of widely shared, publicly available GIFs using the in-house Cocoon AI project. Alas, Telegram doesn't clarify what “publicly available” entails.
The change was caused by Google shutting down access to its Tenor GIF library. Telegram claims the new GIF search is private and doesn't depend on third-party services, and adds that it works much faster than before.
Article: telegram.org/blog/communities-editor-invisible-messages/
Download the update
• Android: Google Play, APK from the official website or verified channel.
• iOS: App Store.
• Windows/macOS/Linux: official website or GitHub.
• Windows: Microsoft Store.
• Linux: Flathub or Snapcraft.
#update #Android #iOS #Desktop
Please open Telegram to view this post
VIEW IN TELEGRAM
🔥28❤3🤡3
Forwarded from Telegram Info English (Sominemo)
Telegram Is Working on Experimental WEB-Proxy
A new experimental proxy type titled “WEB” was found in Telegram Desktop's code. The discovery was publicized by teleLakel.
The server code for the WEB-proxy is still under development, and Telegram hasn't endorsed any implementations yet, so there is no good way to try the technology at the moment.
Why is this necessary, and why not just use MTProxy?
The already existing MTProxy can also mask to appear as HTTPS traffic using the FakeTLS extension. However, modern Deep Packet Inspection systems (DPI) can already tell such connections apart, since FakeTLS still has some differences from real HTTPS traffic that can be seen from the outside.
The new WEB transport makes detection much harder: to talk to the server, the messenger uses the built-in browser (WebView). It establishes a real TLS/HTTPS connection using standard browser cryptography, which makes Telegram traffic less different from regular web surfing.
The independent Telemt community is working on detection-resistant protocols. Earlier, thanks to the community's research into Russian DPIs, Telegram developers updated the MTProxy in their clients to adapt them to new detection methods.
The community notes that the messenger should spend more time developing new censorship-resistance methods. If the messenger doesn't keep improving the new WEB proxy, it might stop working in the future — typical Telegram traffic may have uniquely identifying properties even inside a real TLS connection if additional masking methods are not used on it.
#Desktop #proxy #bans
A new experimental proxy type titled “WEB” was found in Telegram Desktop's code. The discovery was publicized by teleLakel.
The server code for the WEB-proxy is still under development, and Telegram hasn't endorsed any implementations yet, so there is no good way to try the technology at the moment.
Why is this necessary, and why not just use MTProxy?
The already existing MTProxy can also mask to appear as HTTPS traffic using the FakeTLS extension. However, modern Deep Packet Inspection systems (DPI) can already tell such connections apart, since FakeTLS still has some differences from real HTTPS traffic that can be seen from the outside.
The new WEB transport makes detection much harder: to talk to the server, the messenger uses the built-in browser (WebView). It establishes a real TLS/HTTPS connection using standard browser cryptography, which makes Telegram traffic less different from regular web surfing.
How does it work
• The messenger opens a special page on the proxy server domain using a hidden browser
• This domain can also continue to work as a regular website. The hidden Telegram channel only activates if the request contains the correct secret key.
• Inside the unitary web channel, the encrypted MTProxy traffic is enveloped into WEB-proxy frames and sent to the proxy server. Currently, this is done using WebSocket.
• HTTP/WebSocket traffic is repackaged and relayed to the MTProxy server without being decrypted.
Currently, the feature is under active development, so by the time it gets released, the protocol may change.
The independent Telemt community is working on detection-resistant protocols. Earlier, thanks to the community's research into Russian DPIs, Telegram developers updated the MTProxy in their clients to adapt them to new detection methods.
The community notes that the messenger should spend more time developing new censorship-resistance methods. If the messenger doesn't keep improving the new WEB proxy, it might stop working in the future — typical Telegram traffic may have uniquely identifying properties even inside a real TLS connection if additional masking methods are not used on it.
#Desktop #proxy #bans
❤52🤡9❤🔥1🤔1
Forwarded from Telegram Info English (Sominemo)
Telegram Desktop updated to version 7.1.1
What's new:
• Added welcome messages for groups and channels.
• Added buttons and files in articles.
• Improved lists, tables, and Markdown text pasting in the article editor.
• Added self-destruct timers and view-once feature for photos and videos.
• Added video profile picture upload for users, chats, and channels.
• Added a video editor with the ability to trim and crop the clip, change its quality, and set a cover.
• Added the ability to restore open windows and chats upon restart.
• Added new keyboard shortcuts to restore closed windows (Ctrl + Shift + T), as well as to open the article editor (can be assigned in Settings › Chat Settings › Keyboard shortcuts).
• Added the ability to send music files via the attachment menu.
• Added a new proxy type called WEB in the Connection settings.
• Fixed bugs that caused crashes.
Download:
• Windows/macOS/Linux: official website or GitHub
• Windows: Microsoft Store
• macOS: App Store
• Linux: Flathub, Snapcraft
#update #Desktop
What's new:
• Added welcome messages for groups and channels.
• Added buttons and files in articles.
• Improved lists, tables, and Markdown text pasting in the article editor.
• Added self-destruct timers and view-once feature for photos and videos.
• Added video profile picture upload for users, chats, and channels.
• Added a video editor with the ability to trim and crop the clip, change its quality, and set a cover.
• Added the ability to restore open windows and chats upon restart.
• Added new keyboard shortcuts to restore closed windows (Ctrl + Shift + T), as well as to open the article editor (can be assigned in Settings › Chat Settings › Keyboard shortcuts).
• Added the ability to send music files via the attachment menu.
• Added a new proxy type called WEB in the Connection settings.
• Fixed bugs that caused crashes.
Download:
• Windows/macOS/Linux: official website or GitHub
• Windows: Microsoft Store
• macOS: App Store
• Linux: Flathub, Snapcraft
#update #Desktop
❤32👍3🤡1
Forwarded from Telegram Info English (Sominemo)
Dangerous vulnerability in Telegram Desktop: any file can be stolen with one click
What you MUST NOT do and how to protect yourself:
• Do not keep using versions earlier than 7.2.9 — update the client immediately. If you use an unofficial client, temporarily switch to the official one until an update is released.
Download:
• Windows / macOS / Linux: official website or GitHub.
• Windows: Microsoft Store.
• macOS: App Store.
• Linux: Flathub, Snapcraft.
Advice for users of older clients:
• Links can be dangerous: whenever you click a link, read the pop-up window carefully — if Telegram shows an unusual structure in the link (for example, one starting with tg://), do not open it.
• Do not use the client without a local passcode: enabling one encrypts the session files in the tdata directory, preventing immediate account hijacking even if those files are leaked.
What is the issue?
A vulnerability has been discovered in Telegram Desktop clients earlier than version 7.2.9 (CVE-2026-107181). Because the ; delimiter was not escaped, parameters in tg:// links were interpreted as separate IPC commands. Using the interpret: handler, an attacker could cause files from the system to be sent covertly to their channel, without the user’s confirmation, when the user clicked a specially crafted link.
The main risk
The danger is not limited to stealing tdata session files and hijacking accounts. Exploiting the vulnerability makes it possible to covertly steal absolutely any files on the computer that the user can access: documents, saved browser sessions, SSH keys, system configurations, or cryptocurrency wallets.
#security #desktop #vulnerabilities
What you MUST NOT do and how to protect yourself:
• Do not keep using versions earlier than 7.2.9 — update the client immediately. If you use an unofficial client, temporarily switch to the official one until an update is released.
Download:
• Windows / macOS / Linux: official website or GitHub.
• Windows: Microsoft Store.
• macOS: App Store.
• Linux: Flathub, Snapcraft.
Advice for users of older clients:
• Links can be dangerous: whenever you click a link, read the pop-up window carefully — if Telegram shows an unusual structure in the link (for example, one starting with tg://), do not open it.
• Do not use the client without a local passcode: enabling one encrypts the session files in the tdata directory, preventing immediate account hijacking even if those files are leaked.
What is the issue?
A vulnerability has been discovered in Telegram Desktop clients earlier than version 7.2.9 (CVE-2026-107181). Because the ; delimiter was not escaped, parameters in tg:// links were interpreted as separate IPC commands. Using the interpret: handler, an attacker could cause files from the system to be sent covertly to their channel, without the user’s confirmation, when the user clicked a specially crafted link.
The main risk
The danger is not limited to stealing tdata session files and hijacking accounts. Exploiting the vulnerability makes it possible to covertly steal absolutely any files on the computer that the user can access: documents, saved browser sessions, SSH keys, system configurations, or cryptocurrency wallets.
#security #desktop #vulnerabilities
😱35🤡28❤1🤯1