Momogram

Added: - Description for 2 latest experimental features Fixed(?): - Unable to send video message Note: If video message isn't available, make sure you have enabled in-app camera from general Neko Settings

Initial build for 10.12.0 fix: always show folder tabs when forwarding & sharing

Fixed potential(?) NPE for the experimental feature.

New experimental feature, check the new experimental option in Neko settings

⚠️⚠️⚠️⚠️警告⚠️⚠️⚠️⚠️ *Telegram大概于 UTC+8 2024年4月12日18:25，在服务端进行了修复，pyzw文件后会有untrusted的标记。 Telegram Desktop版本远程代码执行漏洞已被确认 危害程度极高，建议用户根据文章建议关闭自动下载功能 ▎情况介绍 ・4月9日 一条视频宣称Telegram Desktop客户端有漏洞，能轻松实现远程代码执行恶意攻击 当日，Telegram 称无法确认 Desktop 版本远程代码执行漏洞 ・4月12日 笔者发现，Telegram Desktop Github库下一条PR中提到一个Bug，能通过某种方式发送pyzw格文件，Telegram会将其识别为视频文件，实现伪装视频效果，且客户端默认设置条件下，会自动下载文件，用户看到后常常会下意识点击执行，攻击生效。 前置条件: Telegram Desktop Windows <＝v4.16.6 + 安装Python环境 ▎危害示例 点击后会打开CMD，完全没有危害性，感兴趣可以点链接跳转测试范例。 示例1 / 示例2（带封面时长文案） ▎防范方法 0. 不安装Python 1. 出于安全考虑，请禁用自动下载功能。 按照以下步骤操作：

进入设置(Settings) —— 点击“高级(Advanced)” —— 在“自动下载媒体文件(Automatic Media Download")”部分，禁用所有聊天类型（私聊(Private chats)、群组(Groups)和频道(Channels)）中 “照片(Photos)”、“视频(Videos)”和“文件(Files)”的自动下载

2. 仔细观察，不要随意点击附件 3. 等待Telegram官方修复后，及时更新客户端至最新版本 ▎技术细节 在这里！ - 转载请标明来源谢谢❤️

Good news, the whole thing might just be fake :)

Telegram Messenger: @LizaFlux We can't confirm this report. The video is likely to be a hoax. Anyone can report potential vulnerabilities in our apps and get rewards: core.telegram.org/bug-bounty https://twitter.com/telegram/status/1777677001739944273

src: https://t.me/strykerapp/453

Waifu 🏳️‍⚧️卖数据的小女孩: Telegram 0day 代码自动执行 ⚠️此漏洞很有可能被公安利用 请及时关闭档案自动下载 https://twitter.com/WaiFu8964/status/1777494203422904585

Test build for multi account limit (should show premium shit popup on trying to add 5th account but idk, as I have no way to test it.)

Switch back to apple emoji, turns out that upstream Telegram only updates apple emoji on 10.10.0 so the other emoji set (Twitter) is broken.

Second build for 10.10.1 - Add back use system emoji toggle as some of the builtin ones seems weird (Neko Settings -> Experimental) - Fixed some icons

Updated to 10.10.1, now with fast reconnect workaround (disabled by default, enable in NekoX experimental settings, may be unstable if network env is bad) Note. I'm having issue pushing the updated source code to GitHub (fatal: the remote end hung up unexpectedly), will update repo whenever it's fixed