Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

Do you have "Don't ask download path for each file" option checked by default as well?

  • Yes

    Votes: 1 100.0%
  • No

    Votes: 0 0.0%

  • Total voters
    1

iTosaf

macrumors newbie
Original poster
Jul 12, 2015
26
7
Hi,

Was using "Telegram" app for mac long time, but after recent updates to OSX or the app itself, every few days the sent files won't download unless i quit and reopen the app again.

2 days ago, i uninstalled it and installed "Telegram Desktop" app via "Apple store" on my iMac.
I was super lucky to discover very quickly that it has a major security breach:

When i sent a picture (to a windows 10 user in my case), he was able (after downloading it) to right click on the link, choose "Photo gallery" and then to scroll and see ALL of my pictures!

After investigating the issue, i found the problem: after installing the app, the default settings option set to "Don't ask download path for each file". Basically, once you sent one picture, the person is able to see ALL of them.

So, i unchecked it, but he still was able to see them all.
The thing is, that they were automatically downloaded to his downloads/telegram desktop folder!

I installed this app on my brand new Macbook pro as well to see if that was because of my iMac setup and the result was the same.

For me it was a shock, better than WhatApp security of Telegram is the major reason to use it in the first place.

I had copies of different contracts and credit cards stored in that directory...

Highly advice everyone who use this app to check their settings and let me know if that's the case for you as well.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.