Critical vulnerability in protobuf.js: threat to Google Cloud and Firebase https://sudonull.com/critical-vulnerability-in-protobuf-js-threat-to-google-cloud-and-firebase
Vulnerability in protobuf.js allows code execution on the server. CVSS score 9.4. Services on Google Cloud and Firebase are at risk. Urgently update the library.
Risks of Telegram Android Clients: Analytics and Proxies https://sudonull.com/risks-of-telegram-android-clients-analytics-and-proxies
Analysis of 8 Alternative Telegram Clients for Android Revealed Leaks to Russia and Firebase. Learn about Server Spoofing in Telega and Trojans. Verified Facts for IT Specialists.
Telegram: notifications about unofficial clients https://sudonull.com/telegram-notifications-about-unofficial-clients
Telegram will add warnings about unofficial clients in chats. Risk analysis of Telega, Graph Messenger and others. MITM attacks, Firebase, recommendations for Android developers. Learn security details.
Monogram: Telegram client on Compose and TDLib https://sudonull.com/monogram-telegram-client-on-compose-and-tdlib
Study Monogram — open Android Telegram client on Kotlin. TDLib, Material 3, without Firebase. Risks of other forks and features for developers. Download from GitHub.
Telegram marks unofficial Android clients https://sudonull.com/telegram-marks-unofficial-android-clients
Telegram introduced marks for users of unofficial clients. Analysis of risks in Telega, Graph Messenger and others: MITM, Firebase, Russian servers. New Monogram client on Jetpack Compose. Learn security details.