ICO is canceled? In Telegram service, Passport found a critical vulnerability

Date:

2018-08-03 00:15:05

Views:

3599

Rating:

1Like 0Dislike

Share:

ICO is canceled? In Telegram service, Passport found a critical vulnerability Source:

Last week, the Telegram messenger has presented the Passport service to store users ' personal data. One of them including includes the passports and other documents, which may require banks and other institutions. The company promised that the information will be securely encrypted.

After a few days, the researchers from the Security company Virgil found out that the service is vulnerable to so called brute force attacks (brute force). About it writes .

How safe Passport from Telegram

On this Virgil Security, the vulnerability lies in the technology of storing passwords. Telegram uses a hashing algorithm to SHA-512, which is not designed to hash passwords. This error makes passwords are insufficiently protected, even if they are "salted" — that is, have a secret numeric sequence at the end of a set of numbers and letters.

The security of the data you upload to the cloud, Telegram, greatly depends on the degree of security of your password because of brute force attack is very simple to implement this hashing algorithm. And the lack of a digital signature allows you to change your data without your participation.

This means that the new service from Pavel Durov is not secure enough — users need to think before upload their own personal data. At least, until such time as the Telegram does not provide official comments or does not correct the problem.

Managed to subscribe to the service? Share your experiences and thoughts .

Recommended

CRYPTOMACH / Maximum exchange rate of Bitcoin in the future, the output of the crypts on the map, Ycash and the Board of Finance

CRYPTOMACH / Maximum exchange rate of Bitcoin in the future, the output of the crypts on the map, Ycash and the Board of Finance

the long-awaited summer. Niche cryptocurrency supported the event and gave unusually hot week. During the last seven days, we learned about the new line of graphics cards from AMD, the mining in TON and hard forks . In addition dealt with the profita...

Co-owner Bitcoin.org Coinbase Pro ridiculed and called a stock exchange Scam

Co-owner Bitcoin.org Coinbase Pro ridiculed and called a stock exchange Scam

co-Owner Bitcoin.org and most popular forum about cryptocurrency Bitcointalk.org Cobra called Coinbase Scam Pro trading platform American crypto currency exchange Coinbase. In his tweet he wrote «if you read Coinbase Pro backwards, get the word ...

The Ethereum is a cryptocurrency Scam. A new report Chainalysis

The Ethereum is a cryptocurrency Scam. A new report Chainalysis

When people learned how to create a new cryptocurrency and began to build their infrastructure like marketplaces, in the field began to appear and fraud. According to blockchain auditor Chainalysis for the past two years, fraud in the ecosystem has s...

Comments (0)

This article has no comment, be the first!

Add comment

Related News

VEB and the Grozny mayor's office transferred the housing sector on the blockchain

VEB and the Grozny mayor's office transferred the housing sector on the blockchain

In February, the first Deputy Chairman of VTB Olga Dergunova positively the prospects of the blockchain. According to her, the technology will improve the speed of transactions and security standards. To move from words to action ...

Hacker 1337. How to hack Etherscan not to cause any harm

Hacker 1337. How to hack Etherscan not to cause any harm

Monday on the website Etherscan.io appeared a pop-up message with the numbers 1337. The visitors began to panic and spread rumors about hacking Explorer. really hacked, but the damage from a hacker attack was zero. About it writes...

Proud: the number of mining companies in Russia grew 15 percent year over year

Proud: the number of mining companies in Russia grew 15 percent year over year

In January, private investors for the first time in Russia, two plants for mining. It was about Kizelovskaya GRES in the Perm region of the 23.6 MW CHP and Sarapul in Udmurtia 10 MW. because Of relatively inexpensive electricity, ...

How to protect your wallets from hacking: six non-obvious ways

How to protect your wallets from hacking: six non-obvious ways

a study by the American company Foley & Lardner showed that 71 percent of large traders and captainvalor considers hacking attacks and fraud are the most serious factor that has a negative impact on the market. Respondents no...

Analyst at PwC in the future will survive only real digital currency. Such as Bitcoin

Analyst at PwC in the future will survive only real digital currency. Such as Bitcoin

early In the week, one of the most famous investors on wall street, 67-year-old bill Miller that Bitcoin is the most promising coin and altcoins are of no use. According to him, in the future will survive only the first cryptocurr...

Thailand will use the blockchain for the sake of prosperity and a brighter future. What's the plan?

Thailand will use the blockchain for the sake of prosperity and a brighter future. What's the plan?

According to the report , the Association of Thai bond market intends to reduce the time for issue of certificates for bonds at least twice. The main objective is to support the secondary market. To help can the blockchain. the In...

The South Korean company

The South Korean company "found" the Russian cruiser gold. She was accused of fraud

In July, the South Korean company Shinil Group announced that it had found the Russian cruiser "Dmitry Donskoy", which sank during the Russo-Japanese war. On Board the ship is supposed to be a gold 133 billion dollars — it is twic...

Russian miner owed 48 thousand rubles for electricity. Nothing will

Russian miner owed 48 thousand rubles for electricity. Nothing will

news Agency reports: «the owner of cryptotermes in Cherepovets owed energy of 48 thousand rubles». Information from «news Agency» not much, but its enough for our wildest speculation. We know that the need for ...

Paul Krugman: the cryptocurrency will throw the financial system for 300 years ago

Paul Krugman: the cryptocurrency will throw the financial system for 300 years ago

again criticize winners of the Nobel prize. One of the most famous economists of our time, Paul Krugman gave an interview to The New York Times, which stated that the main bitcoin will never replace money. About it writes . the W...

Buys startup Binance Trust Wallet. What does it mean?

Buys startup Binance Trust Wallet. What does it mean?

the Binance announced the successful purchase of a startup California Trust Wallet. Previously the platform team has worked to develop secure crypto and decentralized browser applications. About it writes . the New successes Binan...

And you, Brutus: most kryptomere hopes to regulate cryptocurrency

And you, Brutus: most kryptomere hopes to regulate cryptocurrency

According to the survey of the Lithuanian payment company Mistertango, 88 percent of all kryptomere want regulation of the industry. The study is based on a survey of 24 exchange, whose daily trading volume exceeds $ 100 million. ...

When in Russia you can buy a car for the crypt? Expert's answer

When in Russia you can buy a car for the crypt? Expert's answer

For the cryptocurrency is to buy a house, a submarine, Lamba, education and tickets to space. But while it is rather individual companies and private sellers than a full-fledged trend. Soon the situation may change — one of Russia...

As the blockchain can solve the terrible problem of Facebook and other social networks

As the blockchain can solve the terrible problem of Facebook and other social networks

Today are actively discussing the problem of false information in Facebook, Google and other sources. Rumor has it that by publishing a fake news someone even influenced the outcome of U.S. presidential elections. Not for us to ju...

As a student from Boston stole $ 5 million in the crypt thanks to the SIM card

As a student from Boston stole $ 5 million in the crypt thanks to the SIM card

the Publication has managed to obtain access to court records about the 20-year-old accused Joel Ortiz. Student from Boston suspected of stealing $ 5 million in the cryptocurrency by fraud with SIM cards. How can you steal bitcoin...

Bitmain Antminer presented S9j — ASIC Bitcoin. The profitability of mining and the characteristics of

Bitmain Antminer presented S9j — ASIC Bitcoin. The profitability of mining and the characteristics of

Yesterday T2-Turbo. ASIC miner is for SHA-256 and brings 3.6 dollars in BTC per day. While inside the device there are Samsung components that affect energy consumption. The response from Bitmain was immediate — the company showed...

The memorable July for mining-pool 2Miners. The invasion of the ASIC, reducing the rate of Uncle-blocks, and regular forks

The memorable July for mining-pool 2Miners. The invasion of the ASIC, reducing the rate of Uncle-blocks, and regular forks

once again, summing the intermediate result of the work on the pool . July marks the beginning of the support ASIC miners for algorithms Equihash and Ethash. We also increased the efficiency of Ethash pools and are working on a ne...

Fake record growth in the number of transactions on the network EOS turned out to be spam

Fake record growth in the number of transactions on the network EOS turned out to be spam

Recently, EOS was ahead of his main rival in the number of transactions in the network. Do not hurry to rejoice — a short-term victory EOS was the usual spam attack. About it writes . the the speed of the blockchain Sunday EOS byp...

Bitcoin + PoS + anonymous transactions + Tor = the Spectre and his mission to the moon

Bitcoin + PoS + anonymous transactions + Tor = the Spectre and his mission to the moon

Cryptocurrency projects so much that it's hard to follow. Offer soon to follow Spectre (not to be confused with SPECTRE). The authors released two token in 2016: spectre and xspec. They have not received special attention two year...

Charlie Lee became an adviser to HTC Exodus. The smartphone will support Litecoin

Charlie Lee became an adviser to HTC Exodus. The smartphone will support Litecoin

In mid-July, the publisher of blakan games CryptoKitties, the company AxiomZen with HTC about the inclusion of the game in the package preinstalled applications for blockchain-smartphone Exodus. Now Creator Charlie Lee became an a...

New cryptocurrency exchange from Liechtenstein meets the requirements of the EU. And she plays the Apple Watch

New cryptocurrency exchange from Liechtenstein meets the requirements of the EU. And she plays the Apple Watch

a New cryptocurrency exchange, which is registered in Liechtenstein, meet all the latest recommendations of the European organization for securities and markets. A new system of that body, introduced in January of this year. It of...