Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BUG] The login code text is not safe. #328

Open
eccstartup opened this issue Jun 16, 2024 · 0 comments · May be fixed by #329
Open

[BUG] The login code text is not safe. #328

eccstartup opened this issue Jun 16, 2024 · 0 comments · May be fixed by #329
Labels
bug Something isn't working

Comments

@eccstartup
Copy link

Describe the bug
For web k version of telegram, the login code is seemed to be encrypted in some way but is not the case. If you read carefully the source code, you will see the numbers are shown as characters with ascii code order index of a braille-like string, which is not safe.

For numbers, we have:

{0: '⠦', 1: '⠩', 2: '⠪', 3: '⠬', 4: '⠱', 5: '⠲', 6: '⠴', 7: '⠸', 8: '⡃', 9: '⡅'}

To Reproduce
Steps to reproduce the behavior:

  1. Open web k version and login.
  2. Login another device.
  3. See side bar of web k version and see encrypted code.
  4. Decrypt it youself.

Expected behavior
Login code should be trully encrypted.

Screenshots
image
Yes, it is 19999.

Desktop (please complete the following information):

  • OS: [MacOS]
  • Browser [Chrome]
  • Version [126]

Additional context
N/A.

@eccstartup eccstartup added the bug Something isn't working label Jun 16, 2024
yzqzss added a commit to yzqzss/tweb that referenced this issue Jun 16, 2024
@yzqzss yzqzss linked a pull request Jun 16, 2024 that will close this issue
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant