From 6b4cfc3708becaa91f4bfc41f55bd874023cc12a Mon Sep 17 00:00:00 2001 From: jochen Date: Sat, 10 Oct 2026 14:09:16 +0200 Subject: [PATCH] telegram: a refusal of a tap on changed words stays on the phone alone (issue 372 review) The lab's proof showed it then reached a stranger's chat: whoever the buttons reached is told nothing more than the tap's own acknowledgement. --- modules/telegram/cmd/telegram/channel.go | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/modules/telegram/cmd/telegram/channel.go b/modules/telegram/cmd/telegram/channel.go index af5487c9..381cbb40 100644 --- a/modules/telegram/cmd/telegram/channel.go +++ b/modules/telegram/cmd/telegram/channel.go @@ -328,7 +328,8 @@ func (c *Channel) Handle(u Update) { want != wordsDigest(cb.Message.Text) { words := "That answer was not taken: this message does not show what the mesh put there. Nothing was done." c.answerTap(cb.ID, words) - c.reply(cb.Message.Chat.ID, words) // a toast goes; the chat keeps why + // Said on the phone alone, never in the chat: the tapper may be somebody the buttons reached, who is told + // nothing more (the lab's proof). c.Logf("[telegram] a tap on a message not showing what this channel put there was refused") return }