Turi

[Turi @davtur19]

@v12sec Do you have to be on the same network to exploit the vulnerability?

[Turi @davtur19]

@eastdakota @Cloudflare There is a huge incompetence in AGCOM, regardless of whether it is a means of censorship or not, something like this is technically unfeasible and doesn't work.
It's a waste of public money to further the interests of the football league, they don't really care about piracy.

[Turi @davtur19]

@durov @TimSweeneyEpic @telegram Great news, we can't wait for the BotAPI TOS to change accordingly to allow more freedom for bot developers!

[Turi @davtur19]

@GithubProjects Why use an uptime monitor that uses more than 100MB of RAM? It's rubbish; Gatus is much better and is currently using me less than 25MB of RAM instead of that Node crap.

[Turi @davtur19]

@PastorellaGiu https://t.co/2kCxmCaEOq
Io da qua vedo che lei è tra le cause di questo disastro, mai dare speciali poteri di intervento a chi non è capace

[Turi @davtur19]

@androidmalware2 Wow a non-vulnerability that has always existed and that everyone knows of its existence. 👍

[Turi @davtur19]

@androidmalware2 Fake news, the default is contacts only

[Intigriti @intigriti]

DotGit is available for Chrome:
https://t.co/2z2egj2E1X

As well as Firefox:
https://t.co/qgBcLpG3Z2

[Turi @davtur19]

👀

[Red Hot Cyber @redhotcyber]

Telegram: tra RCE, problemi di privacy e bug bounty… da due bug hunter italiani

#redhotcyber #informationsecurity #ethicalhacking #dataprotection #hacking #cybersecurity #cybercrime #cybersecuritytraining #cybersecuritynews #privacy #infosecurity

https://t.co/edgS6i8lVQ

[Turi @davtur19]

@0xNST @tbbhunter @telegram Telegram has its own bug bounty program, but they don't seem to follow a clear logic on how much they pay out

[Turi @davtur19]

If you are interested in reading about other vulnerabilities on Telegram I wrote another article a while back
https://t.co/7YZ4cOTLqD

[Turi @davtur19]

RCE via WebView; Telegram Web, external links; and IP leak; Leak users behind anonymous channel posts.
https://t.co/VAuBHmJMJ0

[Turi @davtur19]

@fo0_ PoC? with that screen it just looks like some external program opened the link....

[Turi @davtur19]

@andre_parames @telegram There is no security issue, ergo there is no point in deprecating it

[Turi @davtur19]

@FantozziInfoSec @nJoyneer @cpelliccioni @PortSwiggerRes @jacopotediosi Siete gli unici a criticare Jacopo, è un vostro modo di sfogare la frustrazione per non aver trovato un bug del genere?
Voi si che siete forti, state davvero contribuendo alla community, più critiche e rosicate sono quello che vi farà trovare vuln come quella di jacopo.

[Turi @davtur19]

@saajanbhujel I like this extension

[Moxie Marlinspike @moxie]

It's amazing to me that after all this time, almost all media coverage of Telegram still refers to it as an "encrypted messenger."

Telegram has a lot of compelling features, but in terms of privacy and data collection, there is no worse choice. Here's how it actually works:

1/

[Turi @davtur19]

@Myrdrwin @Pignottone @DesireemailCom1 @fabioblu128 @GiulioMarini2 @FmMosca @GPDP_IT @MinisteroSalute @ladyonorato Appunto perché non comprendi ti è uscita la Palestina, ma d'altronde che mi posso aspettare da uno che pensa che una cdn sia una vpn tipo tor... 🤦

[Turi @davtur19]

@GiulioMarini2 @Aye46_58 @FmMosca @GPDP_IT @MinisteroSalute @ladyonorato @Pignottone Il webserver di per sé non gestisce dati personali, eventuali database saranno su server italiani, il fatto che ci sia una cdn tra il sito web e l'utente non significa nulla e non viola nulla.
https://t.co/mdRSPLtUOx

[Turi @davtur19]

@Pignottone @BattistaCagnoni @FmMosca @GPDP_IT @MinisteroSalute @GiulioMarini2 @ladyonorato Stai confondendo i dati personali degli utenti con i dati pubblici di un sito web, il server web può risiedere ovunque e non si commette alcun illecito, il problema sta quando i tuoi dati sensibili sono salvati su server esteri.