Durov's Code

⛔️ Trust nothing

After security reports involving its HTML widgets, Telegram is testing a new Lockdown Mode in its macOS beta. It stops link previews from loading automatically, hides potentially risky widgets and files, requires approval to launch Mini Apps, and blocks payment pages.

Even opening a chat with someone outside your contacts can require confirmation.

Details:

↖️ https://durovscode.com/telegram-lockdown-mode-macos-security

🛸 Put it on my card

OpenAI is rolling out ChatGPT Wallet, a new feature that lets its AI agents make purchases on your behalf. For now, it’s available to ChatGPT Pro subscribers in the US.

What’s new:

↖️ https://durovscode.com/openai-chatgpt-wallet-ai-agent-purchases

🤔 Widgets called in sick

Telegram’s HTML widgets have stopped working across chats after several reports of security flaws.

Pavel Durov says receiving a message alone couldn’t compromise a device and that Telegram has patched the reported flaw on its servers. Telegram has yet to say why the widgets went offline.

↖️ https://durovscode.com/telegram-html-widgets-disabled-security-reports