stupidzorz Posted May 4, 2011 Share Posted May 4, 2011 Hello reader(s),I would like to turn off the information that Murmur sends to the client about what operating system the server is running on and which version. This seems a huge security hole to me. Sadly enough I couldnt find a way to turn this off or to spoof it. How to remove/disable this "feature"?Thanks in advance. Quote Link to comment Share on other sites More sharing options...
rawnar Posted May 4, 2011 Share Posted May 4, 2011 Add the following line to your murmur.ini to stop sending this information.sendversion=False Quote Computer specs: AMD FX-8320, 8GB DDR3-SDRAM, AMD Radeon HD 7950, Asus Xonar D1, Windows 7 Ultimate 64bit/Debian Jessie AMD64. Link to comment Share on other sites More sharing options...
stupidzorz Posted May 4, 2011 Author Share Posted May 4, 2011 Add the following line to your murmur.ini to stop sending this information.sendversion=False Perfect! This is exactly what I wanted. http://img638.imageshack.us/img638/7615/versioninfo.jpgIn my opinion they should set "sendversion" on "false" by default.Thank you Rawnar for your quick reply! Quote Link to comment Share on other sites More sharing options...
ngollan Posted May 17, 2011 Share Posted May 17, 2011 Just to go on the record: In my opinion they should set "sendversion" on "false" by default.TBH, I don't see the real issue. If anything, it'd be fake security by very weak obscurity, since there are a good number of other ways for OS profiling. In addition, most vulnerabilities result from services (as opposed to the OS proper), and those aren't exposed by murmur.It's a bit like attempting to secure a WLAN by disabling SSID broadcasts. Spoiler: it doesn't work :P Quote Link to comment Share on other sites More sharing options...
Administrators kissaki Posted May 19, 2011 Administrators Share Posted May 19, 2011 I’d like the setting to be in the ini.So ppl. know about it and can falsify, if they want to. Quote Link to comment Share on other sites More sharing options...
Administrators hacst Posted May 19, 2011 Administrators Share Posted May 19, 2011 I’d like the setting to be in the ini.So ppl. know about it and can falsify, if they want to. Done. Quote Link to comment Share on other sites More sharing options...
PhillipHaugh Posted November 14, 2019 Share Posted November 14, 2019 Add the following line to your murmur.ini to stop sending this information.sendversion=False https://cheapessaywriter.net/ Thank you) It works ! Easy solution. Quote Link to comment Share on other sites More sharing options...
ELIORRASA Posted April 19, 2020 Share Posted April 19, 2020 I’d like the setting to be in the ini.So ppl. know about it and can falsify, if they want to. Done. the server is running on and which version. This seems a huge security hole to me. Sadly enough I couldnt find a way to turn this off or to spoof it. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.