libertas primordium on Nostr: Hard to pass judgement without knowing more. People are using AI to find some really ...

Hard to pass judgement without knowing more. People are using AI to find some really obscure "vulnerabilities" that can only be exploited under an impossible set of conditions.

quoting
nevent1q…qzxv

A security researcher presented at OffensiveCon Tokyo this week demonstrating how Telegram's animated sticker rendering library can be chained with server-side validation bypasses to achieve code execution on iOS.

No tap, no link, no interaction required.

Telegram's position remains that their server-side checks make this technically impossible. The vulnerable client-side code is still live in the app with no patch.