You may be offered a free premium Telegram subscription – but please don’t accept
You may be offered a free premium Telegram subscription – but please don’t accept
Telegram is giving away FREE Premium subscriptions! All they need from you is to use your cell phone as a relay to text out their OTP codes! And the recipient of the OTP sees your phone number! What could POSSIBLY go wrong with this deal?
PLEASE don't use Telegram! I personally recommend Matrix as it's totally FOSS, you can self host, there are tons of front end clients to choose from. Or even use Signal. I have my own issues with Signal, the fact they don't allow third party clients, you can't self-host, they have a proprietary shim in their stack that only they know what it does, they were pushing crypto, etc, but at least Signal is better than this garbage.
You're viewing a single thread.
What could POSSIBLY go wrong with this deal?
No jokes, I'd like to know. How is it different from sending sms to random numbers?
... people just send SMS to random phone numbers?
No but what exactly stops anyone from doing that? A privacy consideration? I'd think it's just a waste of time at best.
It lets that person know your number works. If that person happens to be a scammer or solicitor, you could run into issues.
People don't need to get an sms from you to know your number works. There are tons of other ways including just trying to log in into telegram or Whatsapp with a list of many numbers.
The issue here is that you could potentially read the content of a 2FA sms that wasn't intended for you. It makes it easy too break 2FA if you have many devices
Logic suggests OTPs are locked to login sessions of corresponding users and also expire. Besides telegram would be able to tell if OTPs meant to be sent through you tend to not reach the recipients.
Yes but you can login on an account and hope you will be the one selected to send the code
You mean you can try to guess someone's number before they get an OTP through you in order to be the first to log into their account?
Well then you'll also going to need their cloud password in order to find anything worth of your effort.
But anyway this is an improbable scenario, considering how vast the user base is, and if we assume telegram implemented some precautions.
Malicious service providers and cloned sim cards pose a much more serious risk if you ask me.