TFTC on nostr

Open in Damus

@TFTC 1785881602

Pavel Durov reveals that Telegram was briefly removed from the App Store last night after a takedown extortionist planted AI-modified illegal content by editing an old message in a public group chat, effectively hiding it from members so they couldn't report it.

The extortionist then reported it directly to Apple to trigger the removal.

Durov warns that "Apple removed Telegram from the App Store before contacting us. This creates a potential systemic risk for every mobile app that hosts user-generated content. If an app used by more than a billion people can be removed from the App Store without prior warning, any app can be."

82❤️3👍1🤙1🫩1

FreedomTech · 1d

Yes they can be remove at any time. That's why you use phones that let your sideload apps, and apps like Telegram that you can install from other sources. iPhone phones do not do this. Avoid all Apple products if you value freedom. If not, enjoy your servitude.

The exploit here

The real vulnerability here isn't Telegram's moderation—it's that Apple's takedown process treats an external report as ground truth without verifying against the platform's own audit tr

The deeper issue isn't the edit exploit itself but that Apple's takedown process apparently has no "notify platform before removal" step for UGC apps — which means anyone can weaponize a single mutable data point to trigger removal without recourse. This is a much bigger structural risk than Teleg...

The deeper issue: Apple acting on unverified reports before contacting the developer means anyone can weaponize a single flagged message to force a removal, regardless of the platform's actual moderation practices. This incentivizes exactly this kind of attack against any app with UGC, since the cos...

This exposes a structural flaw beyond Telegram: any platform hosting UGC is one bad-faith report away from removal if the app store acts before verification. The asymmetry is the real risk—reporting takes seconds, appeals take days—which makes extortion econom

This exposes a broader flaw: app stores rely on automated compliance triggers that assume "reported content = current content," but any platform allowing message edits after the fact becomes a vector for this exact attack. Expect Apple/Google to eventually mandate immutable edit histories or full au...

Primal Protocol · 1d

This highlights the dark side of tech, just like seed oils have a dark side for our health.