Tdesktop: Telegram automagically adds new contacts which are not in the contact list of my DES
Unknown user (recently registered in Telegram) appeared.
IT'S A PROBLEM.
SECURITY PROBLEM
KarelWintersky
All 30 comments
It's not a security problem, it's privacy problem.
Currently every time tg gets your contact in any way (on smartphones, maybe you logged into someone's account, inserted a Sim or logged into cloud account with contacts sync) it saves it to the cloud. Ones who already registered in telegram are shown and may be deleted, others stay on server but you can't see or remove them (I haven't checked it personally though, there may be some hacks)
Also, TDesktop simply can't get contacts in any way except being added manually, it doesn't have APIs for contact sync on any system (there's a feature request for Windows, look it up)
So it's not a TDesktop problem, and also it's rather a privacy than security issue.
Btw, Android app recently removed "private" page from welcome tutorial with the features 馃檭.
stek29
on 6 Aug 2017
My 'mobile' device with installed android-app telegram does not have SIM card. It's connected to my home wifi-network. My mobile with SIM card did not support telegram (Android 2.4.6) and does not have any internet access.
Also, I have a TDesktop on my PC.
Today there was a message: "Kate joined telegram".
New contact has avatar and publicly visible phone number. Unknown to me phone number!
And I've never seen this person before, in my address book there is no person with such a number and none of my friends know her.
WTF?
Sorry for poor english.
KarelWintersky
on 7 Aug 2017
A small addition.
I left for a couple of days in those regions where there is no internet. When I returned, I turned on the PC and started the telegram (desktop). An account unknown to me appeared immediately.
Nobody in my absence used a computer.
I launched the telegram on android 5 minutes ago. Of course, unknown to me contact is present there, although I have already deleted it from the desktop version.
KarelWintersky
on 7 Aug 2017
on smartphones, maybe you logged into someone's account, inserted a Sim or logged into cloud account with contacts sync
I use only my account.
My mobile phone with my SIM does not have installed telegram.
I don't use cloud sync.
KarelWintersky
on 7 Aug 2017
Also, it is a post at russian habrahabr with this issue.
KarelWintersky
on 7 Aug 2017
That post is about issue I described.
Please check active sessions in settings.
stek29
on 7 Aug 2017
Last two sessions, I think, is from notebook.
KarelWintersky
on 7 Aug 2017
Problem appears again:
Active sessions:
Details
- My 'mobile phone' with a telegram does not have a sim card. It's connected to my home wifi-network.
- My mobile phone with SIM does not have installed telegram (not supported), does not have internet connection, does not have wifi connection.
- I have a TDesktop on my PC.
- I see this phone number for the first time
- And I've never seen this person before, in my address book there is no person with such a number.
- I don't use cloud sync.
A little update:
Previously, my "mobile" phone belonged to my friend. Before use, I cleared all phone books and deleted all installed applications. I also, of course, deleted the cached data. My friend never installed telegrams on this phone (but sometimes uses it from another device).
The above number is in my friend's phonebook.
Where did this person come from on my telegram contact list?
KarelWintersky
on 21 Aug 2017
It's a security issue that's been known for quite some times. I've reproduced it multiple times, reported to @drklo but he ignores this everytime , maybe it's out of hand of him too.
Steps to reproduce this easily :
- Have a phone, with phone number let's say +123456 (a fully working phone with telegram installed and functioning contacts list)
- Get a friend's phone, and install Telegram on it. Let's say friend's number is +789456
- Now log out from your Telegram (+123456) , go to log in again, input your friend's number (+789456) , he will get a text.
- Let your friend log into his Telegram, he'll have your full contact list.
This should be fixed , like urgently, but I can't get anyone to acknowledge it. Oh well! 馃槶
fakeid30
on 22 Aug 2017
imho not telegram desktop issue instead telegram api or server issue.
Aokromes
on 12 Dec 2017
You closed issue. Now, it NEVER will be solved.
Pls, reopen. Or move to correct repository
KarelWintersky
on 13 Dec 2017
@KarelWintersky But this has nothing to do with Telegram Desktop, it doesn鈥檛 import any contacts and it can鈥檛 fix that issue anyway :(
john-preston
on 13 Dec 2017
Please simple send information in Telegram Support via: https://telegram.org/support or Twitter.
anfimovir
on 13 Dec 2017
@john-preston Although TDesktop might provide contacts.resetSaved :)
stek29
on 13 Dec 2017
@stek29 yes! Maybe something hidden like in the android app, to not clutter the interface. On the false line of workmode or the other hidden keywords we can type in the settings screen. Something like resetimported
RememberTheAir
on 13 Dec 2017
Please simple send information in Telegram Support via: https://telegram.org/support
NO Answer more than 2 years.
KarelWintersky
on 19 Feb 2018
@john-preston , what about RESET imported option/menu/console-command ?
KarelWintersky
on 19 Feb 2018
@KarelWintersky use some third party app or android/ios app for now.
stek29
on 19 Feb 2018
@stek29 , for example?
KarelWintersky
on 20 Feb 2018
@KarelWintersky Telegram/Telegram X for Android and Telegram for iOs. They have an hidden option to reset all your contacts, server-side non-registered contacts included. Source
RememberTheAir
on 20 Feb 2018
To Cleand and Delete Strange and useless contacts use this application. It was so helpful
https://play.google.com/store/apps/details?id=uz.logic.telegram
JalolBieber
on 21 Jun 2018
This is indeed a very big problem. For me it is contacts from my ex-gfs phone. She is on my T-mobile account still, but I should not have access to her contacts.
StevenHarlow
on 13 Sep 2018
This is messy and should not be the case for such a nice app like Telegram. It's all about privacy but then it's not.
Chrescht
on 6 Feb 2020
Hope this helps
https://www.reddit.com/r/Telegram/comments/75mplv/ios_telegram_keeps_adding_contacts_im_no_longer/
Go to settings, Privacy and security, and in the contacts tabs delete sync contacts
Nikeyshon
on 18 Feb 2020
Please reopen this issue I'm still encountering the same problem!
chagai95
on 1 Apr 2020
@chagai95 tdesktop doesn't import any contact afaik, so it's not an issue with this particular client
RememberTheAir
on 1 Apr 2020
You closed issue. Now, it NEVER will be solved.
Pls, reopen. Or move to correct repository
@chagai95 tdesktop doesn't import any contact afaik, so it's not an issue with this particular client
like @KarelWintersky mentioned it will be nice if you can then move it to the correct repository and then reopen it.
chagai95
on 1 Apr 2020
I have same problem. I received notify unknow contacts are new Telegram user. Very very crazy it.
rafaelgesser
on 10 Jun 2020
I have same problem. I received notify unknow contacts are new Telegram user. Very very crazy it.
https://github.com/telegramdesktop/tdesktop/issues/3766#issuecomment-587627288
Aokromes
on 10 Jun 2020
Problem persists. Sync Contacts feature is messed up.
dmagliano
on 24 Jun 2020
Related issues
beppe9000
路
3Comments
TotalKrill
路
3Comments
qwitriy
路
3Comments
DRSDavidSoft
路
3Comments
matteotumiati
路
3Comments
Most helpful comment
It's a security issue that's been known for quite some times. I've reproduced it multiple times, reported to @drklo but he ignores this everytime , maybe it's out of hand of him too.
Steps to reproduce this easily :
This should be fixed , like urgently, but I can't get anyone to acknowledge it. Oh well! 馃槶