Telegramthe messaging app, has launched a new initiative that promises Premium subscriptions free in exchange for a small “favor” from users: the use of their telephone number for forward OTP codes (one-time passwords) to other users for peer-to-peer login. This move, however, raises quite a few privacy concerns.
Telegram: does the peer-to-peer login system put privacy at risk?
The discovery of this new feature, called “Accesso Peer-to-Peer” (P2PL), was made by user Users who decide to join the program accept that Telegram uses their number to send up to 150 OTP messages per month to other users who are trying to access their accounts. In exchange, they will receive a gift code for one month of Premium subscription.
Il the main problem of this initiative is that the user's phone number becomes visible to the recipient of each OTP sent. Telegram makes it clear in its terms of service that it will not be liable for “any inconvenience, harassment, or damage” resulting from this practice. Furthermore, there is no system that prevent OTP recipients from replying to messagesleaving room for potential abuse.
Telegram claims that the goal of the P2PL program is to improve reliability of receiving access codes via SMS in certain areas. However, this move could also be interpreted as an attempt to reduce the costs associated with sending these codes, as The Verge points out. Which also explains that Telegram takes no responsibility if users have additional costs for sending SMS, especially if intended for international numbers.
This approach is quite unusual for a company that has built its reputation on the promise of greater privacy and security than other messaging platforms. Perhaps there are other reasons behind this decision: we will keep you updated if Telegram explains this initiative differently. Which, however, does not seem destined for a long life.
