logoalt Hacker News

nvme0n1p1 • today at 5:39 AM • 1 reply • view on HN

If you don't believe it's a vulnerability, then you must believe that tricking Telegram into uploading your messages database to the attacker, leaking all your private conversations, is A-OK? Telegram owns that file, after all.


Replies

Panzerschrek • today at 5:46 AM

I didn't say it's not a vulnerability. It is clearly one. But allowing such vulnerabilities to deal damage beyond data of its host application is an OS vulnerability.