Functionality - wrwrabbit/tdesktop GitHub Wiki

Installation

PTelegram can be installed on top of a regular Telegram of the same version, and a regular Telegam can be installed on top of PTelegram of the same version. For example, 3.4.3 Telegram may be overwritten by any version of PTelegram that is built on top of 3.4.3, or vice versa. When replacing Telegram -> PTelegram all your settings will remain, whereas when replacing PTelegram -> Telegram only PTelegram settings will disappear, i.e. accounts and information that have not been entered in the "Exit Account" actions will remain untouched. Accounts that are specified in at least one "Exit Account" action will disappear after changing PTelegram -> Telegram.

Special actions

Cache clearing when application is locked

In false passwords settings, it is possible to set cache clearing (cache only, downloaded files will not be deleted) when locking the application. In this case all folders where the cache was stored are also deleted: folders user_data and user_data#i.

Enable logging

There is an option to enable PTelegram logs in the false password settings. **This feature is extremely dangerous and should only be used in case of bug hunting, not when actually used. Make sure this option is not activated in real life!

Code-Password

To proceed to the application settings, select "Settings", then "Privacy". Under "Password code", select "Enable passcode for application". Think of and enter a password consisting of any characters. After that the "Show fakepasscodes" option will appear in the same section.

False passwords

To add a fake passcode, open the "Show fakepasscodes" section as shown above. Then click on "Add False Passcode" to create a new password. For it, just like for normal code-password, you need to enter the password itself and then give it a name. As soon as this is done, the "Show False passwords code" option will show up your false password code.

For further configuration, open the desired False Passcode and a menu will appear with the action settings for it.

Password code storage

Code passwords are stored in the file tdata/key_datas. The salt for all passcode passwords is stored at the very beginning of the file, followed by the local encrypted passcode. It is stored as a password encrypted with it. Next, the local code-password stores information about accounts, false code-passwords, their names and actions to them. This is followed by a set of encrypted false cod-passwords in a manner similar to storing the local cod-password: takes the local cod-password, which is encrypted by the false cod-password. This allows using a false passcode to decrypt information about accounts, false passwords and their actions, as well as to understand what kind of code-password has been activated.

Cache clearing

The application saves downloaded images, videos, audio and voice messages into the computer's memory. An attacker can easily gain access to them. In order to avoid this, the cache can be cleared, along with the Telegram download folder, if a false passcode is entered.

This feature may lower the app's disguise. If the cache is cleared, the app will re-download photos of users, chats, and media in the chat room. This could help an attacker realise that the login was with a false passcode. However, we still recommend using this feature as the consequences of not clearing the cache could be worse.

Clear proxy list

The proxy list may contain proxy addresses that provide some information about a person. For example, if the list contains cyber partisan proxy addresses, the person may have been subscribed to the corresponding channel. Clearing the proxy list can help avoid disclosure in this way. Clearing proxies is done last. It means that other network related actions (sending messages, terminating other sessions) will be done through the proxy if it was connected.

Run command

If you enter a false password, PTelegram will run the command you entered. ** Important**: PTelegram does not make any checks for the command entered, so it is recommended to use it only if you are sure about what you are doing.

Actions for accounts

Exit account

If the option is enabled, entering a false passcode will log you out of PTelegram on this device. PTelegram will also delete the cache folder for this account, as well as special session files for the account.

This feature may lower the application's disguise! If all accounts have been logged out, the initial login window will be displayed. This may help an attacker to know that a modified application is available. It is highly recommended that only part of the accounts are logged out. In this case the masking is not downgraded.