This is why we install from FDroid.
Would an F-Droid release have found this issue?
No but it would have avoided it since its compiled from source.
Yeah… one of the criticisms levied at F-Droid is that you need to trust them over the app developers but as we can see in cases like this, I think that’s a feature, not a bug.
It’s one reason I’ll never use something like Obtainium for instance.
So, assuming good faith, they used two Telegram bots for some service functionality
these two bots are used to resolve username from user id, eg
tg://user?id=25Obviously, that should never happen silently. But these findings don’t necessarily mean data has been compromised [beyond the scope of the app itself].
I get they may be very frustrated and annoyed at the negative blowback after their FOSS efforts, but dismissing concerns isn’t a good way to respond.
Being honest, I would be surprised if there wasn’t malware there. The whole Telegram platform is kind of a nesting ground for it.
deleted by creator
Why the fuck do people who know what a “github” is, much less how to post issues use Telegram?
Why do you think everybody needs to know how to use a microsoft website for using a messenger? Is everybody in your life a software developer?
