ZaStoGram_desktop/Telegram/SourceFiles
Repository files (latest commit first)
Filename Latest commit message Latest commit date
loop-uh b4d1418e81 Salt the logged SNI hash, because unsalted it named the domain
The masqueraded domain is logged as a hash so a log can be shared
without naming it. That did not hold: the name is short and drawn
from a small set of plausible ones, so eight bytes of SHA-256 fall
to a wordlist immediately - www.google.com came back out of a real
log this way in under a second, from 12900 candidates, while
working out which relay a user was on.

The salt is sixteen random bytes drawn once per run and hashed
before the domain, so no prefix of the digest depends on the domain
alone. What the field is actually for still works: inside one log,
connections carrying the same name still share a hash. Across two
logs they no longer line up, which is the right trade for a field
whose whole purpose was to not name the domain.

Both report builders now go through one helper; neither hashes the
domain directly. Guarded, including that the salt is drawn once
rather than per call - per call would leave the field useless for
matching within a log.
2026-07-26 19:15:13 +03:00
..
_other Self-hosted auto-updates via GitHub releases 2026-07-05 13:25:13 +03:00
api Merge remote-tracking branch 'upstream/dev' into dev 2026-07-25 17:07:59 +03:00
boxes Merge remote-tracking branch 'upstream/dev' into dev 2026-07-25 17:07:59 +03:00
calls Merge remote-tracking branch 'upstream/dev' into dev 2026-07-25 17:07:59 +03:00
chat_helpers Merge remote-tracking branch 'upstream/dev' into dev 2026-07-25 17:07:59 +03:00
codegen/scheme Merge remote-tracking branch 'upstream/dev' into dev 2026-07-14 18:46:38 +03:00
core Merge remote-tracking branch 'upstream/dev' into dev 2026-07-25 17:07:59 +03:00
countries Restructure mtproto ownership 2026-07-08 00:07:46 +03:00
data Include the full MTP::Instance type in passkeys 2026-07-25 19:32:51 +03:00
dialogs Merge remote-tracking branch 'upstream/dev' into dev 2026-07-25 17:07:59 +03:00
editor Fix possible clamp contract violation. 2026-07-04 16:46:46 +04:00
export Merge remote-tracking branch 'upstream/dev' into dev 2026-07-14 18:46:38 +03:00
ffmpeg Merge remote-tracking branch 'upstream/dev' into dev 2026-07-25 17:07:59 +03:00
history Merge remote-tracking branch 'upstream/dev' into dev 2026-07-25 17:07:59 +03:00
info Merge remote-tracking branch 'upstream/dev' into dev 2026-07-25 17:07:59 +03:00
inline_bots Merge remote-tracking branch 'upstream/dev' into dev 2026-07-25 17:07:59 +03:00
intro Merge remote-tracking branch 'upstream/dev' into dev 2026-07-25 17:07:59 +03:00
iv Merge remote-tracking branch 'upstream/dev' into dev 2026-07-25 17:07:59 +03:00
lang Merge remote-tracking branch 'upstream/dev' into dev 2026-07-25 17:07:59 +03:00
layout Moved out highlight scroll logic from sections to single place. 2026-03-30 11:01:56 +03:00
main Merge remote-tracking branch 'upstream/dev' into dev 2026-07-25 17:07:59 +03:00
media Merge remote-tracking branch 'upstream/dev' into dev 2026-07-25 17:07:59 +03:00
menu Moved toggling of mute forever to separate helper. 2026-07-24 17:12:25 +03:00
mtproto Salt the logged SNI hash, because unsalted it named the domain 2026-07-26 19:15:13 +03:00
overview Moved video tile scaling off main thread in overview layout. 2026-07-15 13:11:47 +04:00
passport Restructure mtproto ownership 2026-07-08 00:07:46 +03:00
payments Restructure mtproto ownership 2026-07-08 00:07:46 +03:00
platform Merge remote-tracking branch 'upstream/dev' into dev 2026-07-25 17:07:59 +03:00
poll [poll-create] Extracted poll answer link box helper into shared module. 2026-06-09 14:28:12 +04:00
profile Removed 114 unused style entries. 2026-05-04 11:32:33 +07:00
settings Merge remote-tracking branch 'upstream/dev' into dev 2026-07-25 17:07:59 +03:00
statistics Fixed long chart filter labels in statistics. 2026-05-05 10:45:43 +04:00
storage Merge remote-tracking branch 'upstream/dev' into dev 2026-07-25 17:07:59 +03:00
support Restructure mtproto ownership 2026-07-08 00:07:46 +03:00
tde2e
tests Salt the logged SNI hash, because unsalted it named the domain 2026-07-26 19:15:13 +03:00
ui Merge remote-tracking branch 'upstream/dev' into dev 2026-07-25 17:07:59 +03:00
window Name the camouflage answer instead of blaming the digest 2026-07-26 00:15:27 +03:00
apiwrap.cpp Merge remote-tracking branch 'upstream/dev' into dev 2026-07-25 17:07:59 +03:00
apiwrap.h Merge remote-tracking branch 'upstream/dev' into dev 2026-07-14 18:46:38 +03:00
config.h Self-hosted auto-updates via GitHub releases 2026-07-05 13:25:13 +03:00
logs.cpp мне лень описывать всё изменения - ОНИ ОГРОМНЫ 2026-07-07 23:05:20 +03:00
logs.h Add mtproxy logs and proxy statuses; CI->Release 2026-06-28 15:36:15 +03:00
main.cpp
mainwidget.cpp Merge remote-tracking branch 'upstream/dev' into dev 2026-07-14 18:46:38 +03:00
mainwidget.h Restructure mtproto ownership 2026-07-08 00:07:46 +03:00
mainwindow.cpp Fixed settings opening under boxes without session. 2026-07-24 17:22:38 +03:00
mainwindow.h Fixed back from new account intro focusing wrong window. 2026-06-22 11:51:49 +03:00
settings.cpp [ai] Add -testagent for silent crashes. 2026-07-02 17:49:02 +04:00
settings.h Make -cleanup stop the running app on uninstall 2026-07-20 23:14:37 +04:00
stdafx.h Avoid full Telegram target rebuild on version change 2026-06-15 17:05:51 +04:00
tray.cpp Added accounts list to tray menu on macOS. 2026-02-28 19:07:08 +04:00
tray.h
tray_accounts_menu.cpp Added passcode lock check to Dock and Tray account menus. 2026-05-22 09:53:43 +03:00
tray_accounts_menu.h Added accounts list to tray menu on macOS. 2026-02-28 19:07:08 +04:00
tray_accounts_menu_dummy.cpp Added accounts list to tray menu on macOS. 2026-02-28 19:07:08 +04:00