Adventures in Dystopia

When the owners of @solana lost it and it was snatched up by bots reserving free tags, it was blocked in less than a day, over the weekend. It could have been quicker

MTONGA? What about spam on Telegram? If you try to create a chat on Telegram with two or more participants and share a public link to it, bots will find it after a while and you’ll end up having to delete dozens of spam messages every day. This doesn’t happen on Instagram, Twitter, Facebook or VK. Creating small groups on Telegram for local purposes isn’t practical or sensible. P.S.: @nft_burn

MTONGA? Steps? Great again? Someone airdropped undeletable NFTs to each TON wallet that made a transfer. The NFTs contain NSFW content; when you try to delete them, they burn and immediately recreate with a new NSFW picture. The NFTs contain a link to @nft_burn as a removing solution. Users who followed instructions from @nft_burn should pass a verification check through sign-in using their Telegram account. That account would then be drained. I tried to report @nft_burn three times to different people. The last time, I got a reply that moderators already knew about the problem. So, for three weeks, @nft_burn has still been available, and as I understand it, continues draining and stealing Telegram accounts. MTONGA? They do not give a fuck about users' problems until you do not have tits.

Following a NYT report that the US and Israel discussed a potential post-war role for Mahmoud Ahmadinejad, some Iranian hardliners began accusing the former president of being an Israeli asset, despite no public evidence supporting the claim. (Source: https://www.nytimes.com/2026/05/19/us/politics/iran-israel-us-leader-ahmadinejad.html)

awesome

Telegram does not need to have its message encryption broken for users to be tracked at the network layer. Telegram sends MTProto over unencrypted TCP, exposing auth_key_id - a long-lived identifier tied to the client’s authorisation key. An ISP, hotel WiFi operator, mobile carrier, transit provider, or surveillance system on the network path can see that identifier if they can observe the traffic. It can remain stable across app restarts, IP changes, VPN use, network switches, and location changes. Secret Chats protect message content, but this leak is below that layer. That makes the attack passive. The risk is in retroactive correlation. Think a journalist using Telegram from different networks for months, then joining hotel or corporate WiFi under a real name. That one identity anchor could make old logs searchable for the same auth_key_id. The fix is simple - mandatory transport encryption for all MTProto connections, with no unencrypted fallback. Telegram chose not to do this. Source: @kaepora symbolic.software/pdf/gnmx-01.pdf P.s.: Long life, global passive observer

Telegram does not need to have its message encryption broken for users to be tracked at the network layer. Telegram sends MTProto over unencrypted TCP, exposing auth_key_id - a long-lived identifier tied to the client’s authorisation key. An ISP, hotel WiFi operator, mobile carrier, transit provider, or surveillance system on the network path can see that identifier if they can observe the traffic. It can remain stable across app restarts, IP changes, VPN use, network switches, and location changes. Secret Chats protect message content, but this leak is below that layer. That makes the attack passive. The risk is in retroactive correlation. Think a journalist using Telegram from different networks for months, then joining hotel or corporate WiFi under a real name. That one identity anchor could make old logs searchable for the same auth_key_id. The fix is simple - mandatory transport encryption for all MTProto connections, with no unencrypted fallback. Telegram chose not to do this. Source: @kaepora symbolic.software/pdf/gnmx-01.pdf

Funny fact: in Moscow, it is hotter than in Tehran.

Each git commit remember me @toberg

Source: X

Через час после окончания сегодняшней акции приглашаем собрать те самолетики, которые Вы найдете у Вашего дома.