NEW DELHI: A cyber-security researcher has showcased it’s tremendous simple to entry IP deal with of any account on encrypted messaging app Telegram with a easy instrument.
Denis Simonov, also referred to as n0a, just lately highlighted the problem and wrote a easy instrument to use it.
TechCrunch verified his findings by including him to the contacts of a newly created Telegram account.
Simonov then known as the account, and shortly after revealed the IP deal with of the pc the place the experiment was being carried out.
Telegram has allegedly been leaking IP deal with to individuals in your contacts throughout a voice name for years.
This time, “an unprepared individual can simply reveal his IP deal with to his interlocutor if he doesn’t find out about them,” Simonov was quoted as saying within the report.
Telegram, which has greater than 700 million customers, utilises a peer-to-peer connection between callers “for higher high quality and diminished latency,” a Telegram spokesperson mentioned in a press release.
“The draw back of that is that it necessitates that each side know the IP deal with of the opposite (since it’s a direct connection). In contrast to on different messengers, calls from those that aren’t your contact record will likely be routed by means of Telegram’s servers to obscure that,” the spokesperson added.
Simonov wrote in a publish that just lately, he was confronted with the duty of figuring out the IP deal with of his interlocutor within the Telegram messenger.
“For this goal, I used the community visitors evaluation instrument Wireshark, the place I detected STUN protocol visitors,” he talked about.
STUN (Session Traversal Utilities for NAT) is a standardised protocol designed to assist gadgets behind NAT (Community Handle Translation) decide their exterior IP deal with and the kind of NAT that’s used on their gateway.
“After spending a bit of time, I made a decision to automate the method of acquiring the IP of my counterpart in Telegram utilizing the console model of Wireshark – tshark,” the researcher added.
To keep away from leaking your IP deal with, it’s important to go to Telegram’s settings, privateness and safety, calls, after which choose “By no means” within the Peer-to-Peer menu.
