AntiMalwareJuly 30, 2026🇷🇺Translated from Russian

TGLock 2.0 Restores Telegram Connectivity with Local MTProto Proxy Over WebSocket

Developer babin2002 has published TGLock 2.0, a free utility for Windows, macOS and Linux that revives Telegram when the client hangs on the “Connecting” screen because of domestic content-filtering systems.

The program creates a local MTProto proxy and forwards only the messenger’s encrypted traffic through a secure WebSocket connection to Telegram’s own web infrastructure. All other computer traffic remains unaffected, and no rented server or paid subscription is required.

Users simply launch the application, click “Enable protection” and confirm the addition of the proxy inside Telegram. The new release separates status messages: the label “Telegram on the line” appears only after a functional WebSocket tunnel has been established.

If the connection is lost, TGLock 2.0 automatically tests backup routes, temporarily discards non-working ones and remembers the successful path for each Telegram data center. The tool does not disable TLS checks, does not alter system DNS and does not load external Cloudflare domain lists, although users may add their own Cloudflare Worker if needed.

A LAN mode lets a smartphone on the same local network route its traffic through the computer, but both devices must share the network. Voice and video calls may fail because UDP proxying is not implemented. An Android version is not yet available, and the macOS build is unsigned, so Gatekeeper may block it by default.

The project is released under the MIT license and does not function as a full VPN, so services such as YouTube or Discord remain blocked.

Related articles

AntiMalwarePrivacy & Surveillance

Google to Add Explicit Content Warnings in Android System Photo Picker

Google is preparing a new safety feature for the system photo picker in Android that will scan images and videos for explicit or nude content. The tool is designed to warn users before they share intimate photographs, whether accidentally or due to a momentary lapse in judgment. This functionality will operate at the system level, meaning it applies across multiple apps that use the built-in photo selector. The feature aims to reduce the risk of unintended distribution of private images that could lead to embarrassment or privacy violations. By integrating the check directly into Android, Google seeks to provide a consistent layer of protection without requiring third-party applications to implement similar logic themselves.

AntiMalwarePrivacy & Surveillance

LG Smart TVs Record Audio in Standby Mode and Scan Home Networks for Advertising Data

Researchers from the Gamers Nexus YouTube channel analyzed multiple LG OLED television models, including the LG G5 series, and discovered that the devices continue to capture audio through built-in microphones even when the screen is off and the television is in standby. The TVs scan local networks to identify smartphones and smartwatches, collect internal IP addresses, available Wi-Fi network names, and location data. When internet connectivity is removed, audio recordings are stored locally and transmitted once the connection is restored. The devices also employ Automatic Content Recognition (ACR) technology to generate digital fingerprints of viewed content, with the resulting data reportedly sent to LG Ad Solutions for targeted advertising. Additional vulnerabilities were identified in webOS that could potentially allow remote code execution. LG has not yet commented on the findings, and experts recommend disconnecting the televisions from the internet and using external streaming devices until official clarification is provided.

HabrPrivacy & Surveillance

Engineer Details Six Weeks Spent Training and Testing Signature Redaction Models for Closed-Loop Document Anonymization

A detailed case study describes attempts to automatically redact handwritten signatures from scanned and text-based PDFs containing personal data such as names, phones, addresses and signatures. The work was performed inside an air-gapped environment on a single GPU machine with no internet access. Multiple approaches including color-based ink gates, pre-trained YOLO detectors, custom-trained YOLO11s models, Tesseract OCR heuristics and various vision-language OCR engines were evaluated on 492 real pages plus synthetic augmentations. Key findings include rotation handling bugs, line-assembly failures in Tesseract, the necessity of using apply_redactions instead of draw_rect for true removal, and the limited value of vision models once rule-based pipelines are mature. The final pipeline reduced expensive vision-model calls from 50 pages to 18 pages while achieving zero leaks across thousands of redactions. The author also measured twelve OCR engines and demonstrated that combining PaddleOCR detection with Tesseract recognition yields the best accuracy-to-speed trade-off.

HabrPrivacy & Surveillance

pg_anon Open-Source Tool Receives Major Updates for PostgreSQL Data Masking and Partial Database Operations

Tantor Labs has released version 1.11.0 of pg_anon, an open-source utility designed to mask personal data in PostgreSQL databases while preserving structure and relationships. The update introduces packaging as a standard Python package, support for partial dumps and restores using whitelist and blacklist dictionaries, and improved handling of complex schema elements such as partitioned tables, generated columns, and custom types. Performance improvements include switching the dump engine to asyncio, single-query metadata collection, and on-the-fly gzip compression to reduce memory usage on large databases. New CLI options allow clean or drop operations on target databases, privilege ignoring, and passthrough of pg_dump and pg_restore flags. A REST API was added to enable integration into CI/CD pipelines and automated self-service systems for nightly masked database refreshes. The tool helps organizations comply with data protection requirements by creating pseudonymized copies suitable for development, testing, and contractor environments.