tgcalls

Telegram fixed a new type of spam via invitations to voice chat

There were 2 main problems with MTProto phone.InviteToGroupCall method:
1. The server did’t limit the count and frequency of sent requests in any way. These led to sending a large count of service messages to the chat in one second.
2. Restriction by invitation of the same person was not implemented on the server side. Which allowed to invite one person a thousand times.

After reporting these issues tonight, they were resolved. Corresponding errors have appeared
1. [420 FLOOD_WAIT_X]: A wait of 48 seconds is required (caused by "phone.InviteToGroupCall")
2. [400 Bad Request]: [400 USER_ALREADY_INVITED] (caused by "phone.InviteToGroupCall)

Due to the count of invites I sent during the test, workers of Telegram servers went to restart 🤷

Historical chat with my tests: @zazivala (30k+ msg)
RU posts: #1, #2, #3

www.tgoop.com/tgcallslib/57

2.14K viewsedited  Jun 21, 2021 at 07:43

Telegram fixed a new type of spam via invitations to voice chat

There were 2 main problems with MTProto phone.InviteToGroupCall method:
1. The server did’t limit the count and frequency of sent requests in any way. These led to sending a large count of service messages to the chat in one second.
2. Restriction by invitation of the same person was not implemented on the server side. Which allowed to invite one person a thousand times.

After reporting these issues tonight, they were resolved. Corresponding errors have appeared
1. [420 FLOOD_WAIT_X]: A wait of 48 seconds is required (caused by "phone.InviteToGroupCall")
2. [400 Bad Request]: [400 USER_ALREADY_INVITED] (caused by "phone.InviteToGroupCall)

Due to the count of invites I sent during the test, workers of Telegram servers went to restart 🤷

Historical chat with my tests: @zazivala (30k+ msg)
RU posts: #1, #2, #3

BY tgcalls