This tool can reveal approximate locations of Telegram users
What's the story
A new tool, Close-Circuit Telegram Vision (CCTV), has been launched, allowing anyone to search for the approximate locations of Telegram users using specific coordinates.
The tool leverages an existing feature on Telegram, "Find People Nearby," typically used to find other users in close proximity.
However, CCTV expands this functionality by enabling global searches for users who have activated this feature.
Worrying
CCTV raises concerns over data usage shift
The introduction of CCTV has led to a change in data usage, with information that users initially agreed to share in one context now being used differently.
Ivan Glinkin, the cybersecurity expert behind CCTV, expressed his concerns online stating, "They have a protection mechanism but it's not enough to protect."
According to the project's GitHub page, CCTV allows "users to monitor others in real-time for logistics or safety, redefining how we navigate our surroundings."
Response
Telegram responds to CCTV's user location tracking
Telegram's press team has clarified that the 'People Nearby' feature is always turned off by default, and was designed specifically for those willing to share their location.
They further explained, "The 'coordinates' the Github tool displays are not user locations—the data is approximated to 800m on the server, and only exists for users who explicitly chose to broadcast their location."
"Any Telegram app can give you access to the same data."
Loophole
CCTV's functionality exploits Telegram's API
Unlike the standard Telegram app, which does not permit global searches for other users, CCTV takes advantage of this limitation.
Users who activate the 'Find People Nearby' feature may assume they are only discoverable by local Telegram users.
Glinkin explained that CCTV works by utilizing the Telegram API associated with this feature, stating "As an input it takes custom latitude and longitude hence I can put any data (even no need to perform a GPS spoofing)."