Jump to content
Mumble forums

[SOLVED] turn off Murmur server information


Recommended Posts

Hello reader(s),


I would like to turn off the information that Murmur sends to the client about what operating system the server is running on and which version. This seems a huge security hole to me. Sadly enough I couldnt find a way to turn this off or to spoof it.


How to remove/disable this "feature"?


Thanks in advance.

Link to post
Share on other sites

Add the following line to your murmur.ini to stop sending this information.

sendversion=False

Computer specs: AMD FX-8320, 8GB DDR3-SDRAM, AMD Radeon HD 7950, Asus Xonar D1, Windows 7 Ultimate 64bit/Debian Jessie AMD64.

Link to post
Share on other sites
  • 2 weeks later...

Just to go on the record:

 

In my opinion they should set "sendversion" on "false" by default.

TBH, I don't see the real issue. If anything, it'd be fake security by very weak obscurity, since there are a good number of other ways for OS profiling. In addition, most vulnerabilities result from services (as opposed to the OS proper), and those aren't exposed by murmur.


It's a bit like attempting to secure a WLAN by disabling SSID broadcasts. Spoiler: it doesn't work :P

Link to post
Share on other sites
  • 8 years later...
  • 5 months later...

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...