View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0005016 | unreal | ircd | public | 2017-09-27 23:20 | 2019-07-12 00:13 |
| Reporter | Amiga600 | Assigned To | argvx | ||
| Priority | normal | Severity | trivial | Reproducibility | N/A |
| Status | resolved | Resolution | fixed | ||
| Fixed in Version | 5.0.0-alpha1 | ||||
| Summary | 0005016: Ability to Hide OS Version in /VERSION | ||||
| Description | Unreal<ver> <server> <flags> [ (this bit here) =2311] Realistically end users do not need to know such information Perhaps have the ability to fully hide the Complete OS information? | ||||
| Tags | No tags attached. | ||||
| 3rd party modules | |||||
|
|
It would be possible. I must say I like it for statistics, though :D Is it really a concern? |
|
|
Well most people tend to frown or make a fuss if its hosted on Windows, and then leave. I cant understand why people have this sorta attitude towards the OS but they do, Personally I do not care what OS anything runs on. |
|
|
The bit you are referring to... the OS name. That only shows up for opers, otherwise it is a * (asterisk). I don't think you mean to hide it for opers, right? Or did you? The only thing users can see is that there is a 'W' in the serveropts. Although I doubt people know about that. And it only indicates Windows, nothing very specific. You will always be able to use fingerprinting to differentiate *NIX and Windows... So, if my hunch is right, you probably thought the OS name was shown to regular users, now that you know this is not the case.. this can probably be closed? Let me know... |
|
|
Well if normal users cannot see the full version and only the "W" then I guess it would be good to hide that, although the last guy we had on said he did a port scan of the server, so it must return something from that The only thing what should ever be returned is just the name and version number imo, anything else is too much information, eg. "Unreal4.2.3" |
|
|
Ok, let's change the issue to hiding that indeed: The serveropts should no longer be shown to regular users, instead show something like 0 (zero). Only opers will see the real serveropts. In the past showing serveropts to users had some use, one could see if a spying module was installed and all that, nowadays you cannot tell the difference so it's effectively useless. |
|
|
I backup this Ability to Hide OS Version in /VERSION The less users know about the OS the less info of potential malicious uses it be target of. This ability should be optional. (on/off) |
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2017-09-27 23:20 | Amiga600 | New Issue | |
| 2017-11-01 10:20 | syzop | Note Added: 0019938 | |
| 2017-11-01 11:31 | Amiga600 | Note Added: 0019943 | |
| 2019-07-08 08:47 | syzop | Relationship added | child of 0005328 |
| 2019-07-08 09:04 | syzop | Note Added: 0020765 | |
| 2019-07-08 13:48 | Amiga600 | Note Added: 0020769 | |
| 2019-07-08 15:50 | syzop | Note Added: 0020771 | |
| 2019-07-08 15:50 | syzop | Status | new => confirmed |
| 2019-07-09 01:10 | HeXiLeD | Note Added: 0020773 | |
| 2019-07-12 00:13 | argvx | Assigned To | => argvx |
| 2019-07-12 00:13 | argvx | Status | confirmed => resolved |
| 2019-07-12 00:13 | argvx | Resolution | open => fixed |
| 2019-07-12 00:13 | argvx | Fixed in Version | => 5.0.0-alpha1 |
