- Summary
- Our suspected long-term auth_key_id is obviously visible: processing file: 1746315509-telegram-mobile-background-session-no-open-app.pcapng.payloads auth_key_id : 64:0a:8a:ff:3a:83:75:54 auth_key_id : 64:0a:8a:ff:3a:83:75:54 processing file: 1746318794-telegram-mobile-background-session-no-open-app2.pcapng.payloads auth_key_id : 64:0a:8a:ff:3a:83:75:54 auth_key_id : 64:0a:8a:ff:3a:83:75:54 processing file: 1746319193-telegram-mobile-background-session-no-open-app3.pcapng.payloads auth_key_id : 64:0a:8a:ff:3a:83:75:54 auth_key_id : 64:0a:8a:ff:3a:83:75:54 Background sessions via Tor When Tor is used to change the external IP address from which connections would be established with Telegram servers, again the suspected long-term auth_key_id is obviously visible: processing file: 1746319792-telegram-mobile-background-session-no-open-app-via-tor1.pcapng.payloads auth_key_id : 64:0a:8a:ff:3a:83:75:54 auth_key_id : 64:0a:8a:ff:3a:83:75:54 processing file: 1746320078-telegram-mobile-background-session-no-open-app-via-tor2.pcapng.payloads auth_key_id : 64:0a:8a:ff:3a:83:75:54 auth_key_id : 64:0a:8a:ff:3a:83:75:54 This is also true for when I blocked the IP address that the Telegram app kept connecting to, and then unblocked it again: processing file: 1746326453-telegram-mobile-background-session-no-open-app-via-tor-91-blocked1.pcapng.payloads auth_key_id : 64:0a:8a:ff:3a:83:75:54 auth_key_id : 64:0a:8a:ff:3a:83:75:54 processing file: 1746327628-telegram-mobile-background-session-no-open-app-via-tor-after-91-unblocked1.pcapng.payloads auth_key_id : 64:0a:8a:ff:3a:83:75:54 auth_key_id : 64:0a:8a:ff:3a:83:75:54 Joining a channel When I joined a channel while physically located in Poland instead of Iceland the long-term auth_key_id was visible initially: processing file: 1747770014-telegram-mobile-open-app-join-minionquote-channel.pcapng.payloads auth_key_id : 64:0a:8a:ff:3a:83:75:54 auth_key_id : 00:00:00:00:00:00:00:00 auth_key_id : c7:33:a1:24:02:4f:3c:36 auth_key_id : 58:d6:c4:e6:fa:bb:0b:68 auth_key_id : eb:40:17:49:1e:e4:93:c9 auth_key_id : 00:00:00:00:00:00:00:00 auth_key_id : 00:00:00:00:00:00:00:00 auth_key_id : 00:00:00:00:00:00:00:00 auth_key_id : 20:0d:a0:1e:f7:32:e3:2b auth_key_id : 4d:db:fa:12:b8:0b:2a:c8 auth_key_id : 00:00:00:00:00:00:00:00 auth_key_id : ae:cf:27:cf:ba:e1:58:d5 auth_key_id : 00:00:00:00:00:00:00:00 auth_key_id : 27:41:c4:eb:5e:b6:b5:63 auth_key_id : 3c:47:69:e8:ba:09:a3:ff auth_key_id : f0:f6:f1:07:b1:a7:31:51 auth_key_id : 27:41:c4:eb:5e:b6:b5:63 auth_key_id : 00:00:00:00:00:00:00:00 auth_key_id : 3c:47:69:e8:ba:09:a3:ff auth_key_id : 31:b1:e9:42:76:5f:1e:66 auth_key_id : 31:b1:e9:42:76:5f:1e:66 auth_key_id : 31:b1:e9:42:76:5f:1e:66 Seems like this is when perfect forward secrecy kicked in and several temporary authorization keys were negotiated as probably indicated by the all-zero auth_key_id s followed by new values.But if Newag as the company claims had nothing to do with that locking functionality, why should the fact that the train is not locked-up even though one of the conditions for that is met be indicative of copyright infringement And how did the condition in both of these separate systems end up being identical: 21 days of being stationary.. And finally, if the locking functionality ended up in the Impuls-series train controllers software without the knowledge and consent of the manufacturer, one would expect the company to work closely with hackers from Dragon Sector in order to uncover, as fast as possible, who, when and how installed the modified software on the vehicles controllers.
- Title
- Songs on the Security of Networks
- Description
- Error 500 (Server Error)!!1500.That’s an error.There was an error. Please try again later.That’s all we know.
- Keywords
- telegram, have, software, using, data, even, there, service, telegrams, like, access, people, more, being, same, does, time
- Downstreams
- linkedin.com, lg.com, samsung.com, independent.co.uk, saltproject.io, dair-community.social, bigthink.com, legitsecurity.com, getnikola.com, technologyreview.com, wired.com, youtube.com, telegram.org, forbes.com, google.com, redhat.com, gizmodo.com, edri.org, mozilla.org, nvidia.com, reuters.com, xkcd.com, fortune.com, bitsoffreedom.nl, futurism.com, malwarebytes.com, arstechnica.com, ccc.de, asus.com, techwontsave.us, ft.com, kiro.dev, sejm.gov.pl, jwt.io, zdnet.com, mashable.com, theregister.com, github.com, ycombinator.com, techcrunch.com, nbcnews.com, upguard.com, arxiv.org, coindesk.com, bsky.app, signal.org, puppet.com, npr.org, creativecommons.org, cyberscoop.com, oko.press, infosec.exchange, slate.com, threadreaderapp.com, openai.com, waydro.id, archive.org, nytimes.com, theguardian.com, idc.com, qubes-os.org, filippo.io, techrepublic.com, moxie.org
- NS Lookup
- A 95.217.113.34
- Dates
-
Created 2026-08-26Updated 2026-08-26Summarized 2026-08-26
Query time: 5593 ms