Security News > 2021 > August > Telegram for Mac bug lets you save self-destructing messages forever
Researchers have discovered a way for users on Telegram for Mac to keep specific self-destructing messages forever or view them without the sender ever knowing.
New bugs discovered by Reegun Richard Jayapaul, Trustwave SpiderLabs' Lead Threat Architect, allow Telegram for Mac users to save self-destructing messages and attachments forever.
This bug was fixed by Telegram for macOS in version 7.7 or later after it was responsibly reported, but there's an additional bug that lets you save self-destructible media.
Telegram told Reegun that this second bug would not be fixed as there is no way to protect against direct access to the app's folder.
Reegun told BleepingComputer that he disagrees and that Telegram could fix the bug by treating all self-destructing media the same way as attachments and not download them to the local file system until they are opened.
BleepingComputer has contacted Telegram about the bug to ask why this fix is not being instituted but has not heard back.