How Telegram Messenger circumvents Google Translate's API

Re:How Telegram Messenger circumvents Google Translate's API by kedmi on Friday December 31, 2021 @06:34AM (#29747054)

It's smart.

It allows Telegram users to hide in plain-sight, within the noise of other Google Translate web users.

I'm pretty sure that using the official pre-built java SDK, as suggested by the author, would allow Google to cluster the content of Telegram users (since app-specific id/token should be sent).

Other than that, a great read and kudos to the author for shedding light on it.

Edit: typo.

[ Parent | on HN ]

Re:How Telegram Messenger circumvents Google Translate's API by xg15 on Friday December 31, 2021 @06:45AM (#29747131)

I think Google can still cluster Telegram users pretty easily, especially now that that the method is in the open.

Yes, Telegram fakes the user-agent, but the rest of the request still looks very different from a request an actual browser would do. (No referrer, missing headers, different connection pooling behaviour, possibly different TLS and HTTP2 behaviour, etc).

So if Google is doing any detection for browser vs non-browser requests, those requests should show up as suspicious.

[ Parent | on HN ]

Re:How Telegram Messenger circumvents Google Translate's API by nothasan on Friday December 31, 2021 @06:55AM (#29747199)

If they used cronet, they could get past these checks.

[ Parent | on HN ]

Re:How Telegram Messenger circumvents Google Translate's API by hdjjhhvvhga on Friday December 31, 2021 @07:38AM (#29747495)

> It's smart.

On the contrary - it's the most stupid thing to do. The only result will be their users wondering soon why this function is broken.

[ Parent | on HN ]

Re:How Telegram Messenger circumvents Google Translate's API by dejj on Friday December 31, 2021 @08:31AM (#29747833)

If Telegram or Google users would pay for services, they wouldn’t treat them like the product being sold.

[ Parent | on HN ]

Re:How Telegram Messenger circumvents Google Translate's API by giomasce on Friday December 31, 2021 @06:39AM (#29747089)

It doesn't look very well hidden if there are blog posts about it...

[ Parent | on HN ]

Re:How Telegram Messenger circumvents Google Translate's API by OJFord on Friday December 31, 2021 @06:45AM (#29747127)

The users are hiding among all the web traffic to translate.google.tld; not that that Telegram's doing this is top secret undiscoverable magic sauce. It's open source (GPL2): https://github.com/DrKLO/Telegram/blob/9e740dfd4d2b1ab6b8ed2...

[ Parent | on HN ]

Re:How Telegram Messenger circumvents Google Translate's API by michaelmcmillan on Friday December 31, 2021 @07:11AM (#29747307)

A rotated user agent does not hide anything from Google.

[ Parent | on HN ]

Re:How Telegram Messenger circumvents Google Translate's API by AndriyKunitsyn on Friday December 31, 2021 @11:28AM (#29749530)

Shell game street fraud (with cups and balls) is also "smart" in some way, but it's not really the right thing to do.

[ Parent | on HN ]