[SOLVED] turn off Murmur server information

It crashed, it is bugged, ...
Post Reply
stupidzorz
Posts: 2
Joined: 04 May 2011, 08:11

[SOLVED] turn off Murmur server information

Post by stupidzorz »

Hello reader(s),

I would like to turn off the information that Murmur sends to the client about what operating system the server is running on and which version. This seems a huge security hole to me. Sadly enough I couldnt find a way to turn this off or to spoof it.

How to remove/disable this "feature"?

Thanks in advance.

rawnar
Posts: 243
Joined: 09 Mar 2010, 08:54
Location: Borne, the Netherlands

Re: turn off Murmur server information

Post by rawnar »

Add the following line to your murmur.ini to stop sending this information.

Code: Select all

sendversion=False
Computer specs: AMD FX-8320, 8GB DDR3-SDRAM, AMD Radeon HD 7950, Asus Xonar D1, Windows 7 Ultimate 64bit/Debian Jessie AMD64.

stupidzorz
Posts: 2
Joined: 04 May 2011, 08:11

Re: turn off Murmur server information

Post by stupidzorz »

rawnar wrote:Add the following line to your murmur.ini to stop sending this information.

Code: Select all

sendversion=False
Perfect! This is exactly what I wanted. http://img638.imageshack.us/img638/7615/versioninfo.jpg

In my opinion they should set "sendversion" on "false" by default.

Thank you Rawnar for your quick reply!

ngollan
Posts: 39
Joined: 18 Jul 2010, 19:58

Re: turn off Murmur server information

Post by ngollan »

Just to go on the record:
stupidzorz wrote:In my opinion they should set "sendversion" on "false" by default.
TBH, I don't see the real issue. If anything, it'd be fake security by very weak obscurity, since there are a good number of other ways for OS profiling. In addition, most vulnerabilities result from services (as opposed to the OS proper), and those aren't exposed by murmur.

It's a bit like attempting to secure a WLAN by disabling SSID broadcasts. Spoiler: it doesn't work :P

User avatar
kissaki
Team member
Team member
Posts: 1479
Joined: 09 Jan 2010, 12:15
Contact:

Re: turn off Murmur server information

Post by kissaki »

I’d like the setting to be in the ini.
So ppl. know about it and can falsify, if they want to.

hacst
Team member
Team member
Posts: 339
Joined: 23 Sep 2009, 16:28

Re: turn off Murmur server information

Post by hacst »

kissaki wrote:I’d like the setting to be in the ini.
So ppl. know about it and can falsify, if they want to.
Done.

PhillipHaugh
Posts: 1
Joined: 14 Nov 2019, 13:42

Re: turn off Murmur server information

Post by PhillipHaugh »

rawnar wrote:
04 May 2011, 11:03
Add the following line to your murmur.ini to stop sending this information.

Code: Select all

sendversion=False
https://cheapessaywriter.net/

Thank you) It works ! Easy solution.

Post Reply