Momogram

#testing v12.6.3 013d69a41f r1125 Added: - Disable pull down to show search bar at chat list (thx Nagram) Misc: - Abandon outdated local Chinese translations

#release v12.5.1 61a2238ad0 r1125 Bump version number

#testing v12.5.1 b043950be7 r1124 Added: - Active session checker to check if there's active session of potentially malicious clients Fixed: - Passkey login for Bitwarden (Thx Nagram) - Edit/Promote admin in groups

ref: (English) - https://t.me/techleakszone/9418 - https://t.me/monogram_android/73 (code removed after "exposed") (Chinese) - https://t.me/xhqcankao/28390 - https://t.me/zaihuapd/40665 Extras: - https://t.me/fangliye_archive/2 (old stories)

關於近日熱門非官方客戶端未經允許私自蒐集使用者電話號碼 - Momogram 為獨立維護的 Telegram 第三方客戶端分支，與該竊取隱私資訊的開發團隊無任何關聯 - Momogram 為完全開源的客戶端，無任何閉源元件 - 發布的 APK 均無加入額外混淆 - APK 檔名附帶 commit hash，可 checkout 對應版本自行編譯 - 絕不蒐集使用者個人資訊也不建立額外追蹤或分析機制 也許有些人會說:

要用第三方客戶端就應該自負風險. 應該要在確認和理解後使用.

但不是所有人都有能力審查程式，因此比起單純強調風險，我認為更重要的是建立一個可被信任的社群環境，讓使用者能夠透過真正完全公開的原始碼和社群來判斷誰值得信任

Statements regarding recent incident of a certain infamous Android Telegram fork: - First thing first, Momogram is an independently maintained Telegram client fork and is not affiliated with the fork that does steals your phone number. - We're fully open source, there's no hidden modules or closed components - We don't do obfuscation, release APKs are not additionally obfuscated - APK filenames include the commit hash, you can checkout and build the exact version, the resulting binary should match the release - There's no collection of user personal data, no additional tracking, telemetry or analytics bullshit Some ppl may say:

Using any third-party client inherently carry risks, and users should evaluate and understand them before use.

but obviously it's not possible to make everyone do their own audits. Therefore, beyond simply stating risks, the more practical goal is to build a verifiable and trustable community — where users can rely on real open source code, reproducible builds, and community review to decide who and what to trust. PS. An active sessions checker to raise awareness is in WIP, will show a one-time warning if logged in with known potentially malicious unofficial client.

#release v12.5.1 adb88e8006 r1123 - Fixed a minor UI issue - Switch to MapLibre for map views - Update Cloudflare token length check to support new token (Thanks MrKristofere@GitHub)

#testing v12.5.1 f5caf040d5 r1122 Test fix for uploaded video being not playable on Telegram Android clients

#testing v12.5.1 20d242db28 r1122 ffmpeg 7.1.3 + dav1d 1.5.3

Totally unrelated to Momogram, but worth watching to get a grip of the mindset behind me saying things like self-host your own ntfy instance and other similar stuff The internet is rotting, but there’s still hope that you can keep your brain from rotting with it. https://youtu.be/5nL-Eq1lpDU

#testing v12.5.1 0506aa9732 r1122 Bump dependencies