[prev in list] [next in list] [prev in thread] [next in thread] 

List:       opensuse-factory
Subject:    =?UTF-8?Q?Re:_[opensuse-factory]_telegram-desktop_update_1.8.9_->_1.8.15?= =?UTF-8?Q?_review_request
From:       "Xu Zhao" <i () xuzhao ! net>
Date:       2019-11-25 14:24:12
Message-ID: d334202c-5fec-4963-930b-8e0d140dd74c () www ! fastmail ! com
[Download RAW message or body]

Hello Mathias,

It is api/hash pair officially registered on https://my.telegram.org/. Sorry I am not \
sure what you mean by "officially registered". Can you elaborate that?

Also, according to https://github.com/telegramdesktop/tdesktop/issues/4717#issuecomment-391079083:
                
- The official binary Telegram app's hash pair is not hided either. So if the api \
hash secrecy is a big deal, anyone could also "impersonate" the official binary \
                Telegram app.
- The packager are supposed to register and obtain the hash pair on the \
https://my.telegram.org/ website, which is what I am doing right now.

Please let me know what you think.

Best,
XZ

--
Xu Zhao
i@xuzhao.net

On Mon, 25 Nov 2019, at 1:57 AM, Mathias Homann wrote:
> Am Montag, 25. November 2019, 02:17:19 CET schrieb Xu Zhao:
> > Dear openSUSE Factory package reviewers,
> > 
> > I am the maintainer of the package telegram-desktop on openSUSE Factory. I
> > submitted an update of the software from 1.8.9 to 1.8.15 about two weeks
> > ago. Here is the link of the request:
> > https://build.opensuse.org/request/show/746365
> > 
> > This update fixes the bug boo#1149986 and enables native notifications on
> > different desktop platforms, which is a public demand of multiple users.
> > Could you please help review and accept my request?
> > 
> > Kind regards,
> > Xu
> 
> 
> Hi, is the api_hash used for building the package an officially registered 
> one, or the "test/developer" hash?
> 
> (if it is, there needs to be a way to hide it from the build service - anyone 
> can see it, so anyone can "impersoinate" the official openSUSE telegram 
> client)
> 
> I think only registered ones make for useable telegram clients, the ttest/
> devel hash lets you connect only to a test server, or something like that.
> 
> 
> Cheers
> MH
> 
> 
> 
> *Mathias Homann*
> Mathias.Homann@openSUSE:.org[1] 
> irc: [Lemmy] @ freenode, ircnet
> obs: lemmy04
> keybase: https://keybase.io/lemmy[2] 
> *gpg key fingerprint: 8029 2240 F4DD 7776 E7D2 C042 6B8E 029E 13F2 C102*
> 
> 
> --------
> [1] mailto:Mathias.Homann@eregion.de
> [2] https://keybase.io/lemmy
> 
> Attachments:
> * signature.asc
-- 
To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org
To contact the owner, e-mail: opensuse-factory+owner@opensuse.org


[prev in list] [next in list] [prev in thread] [next in thread]