• @atkdef@lemmy.world
      link
      fedilink
      English
      31 year ago

      This actually is not a bad thing. If an unofficial client MITM the whole registration process, it’s much harder for the true account owner to prove that he/she is the legit one.

      Also, it doesn’t really require a client to register; Telegram can be accessed from a browser.

        • @atkdef@lemmy.world
          link
          fedilink
          English
          1
          edit-2
          1 year ago

          Compared to login, MITM on registration means the culprit knows the IP address and the time of the registration, which is usually significant on claiming the account back.

          I don’t have a spare number to test, but I’m pretty sure entering a phone number in the web sends a SMS code. Do you have concrete evidence that it really doesn’t work?

    • @jet@hackertalks.com
      link
      fedilink
      English
      11 year ago

      I might be misunderstanding you, but I believe telegram requires SMS verification for all accounts, regardless of client.

    • @EngineerGaming@feddit.nl
      link
      fedilink
      English
      11 year ago

      One of the most egregious thing they’ve done imo is this:

      If their app allows its users to access content from Telegram channels, third-party developers using the Telegram API are required to support and properly display official sponsored messages in their apps by January 1, 2022

      As well as not allowing registration from desktop.

    • Clot
      link
      fedilink
      English
      11 year ago

      it costs them too much to send code as sms, also some client abuse that in some way, it also may help them to increase the download count of their official app which is not bad imo.