devs/cproof
1
2
Fork 1
Code Issues 43 Pull Requests 6 Actions Packages Projects 1 Releases Wiki Activity

fix(xmpp): obfuscate client identity in protocol exchanges
Some checks failed
CI Code / Check spelling (pull_request) Successful in 16s
Details
CI Code / Check coding style (pull_request) Successful in 28s
Details
CI Code / Code Coverage (pull_request) Failing after 10m0s
Details
CI Code / Linux (debian) (pull_request) Failing after 12m58s
Details
CI Code / Linux (arch) (pull_request) Failing after 13m56s
Details
CI Code / Linux (ubuntu) (pull_request) Failing after 16m18s
Details

Browse Source 
Modify version responses to return a generic client name and omit
version strings. Drop the "profanity." prefix from dynamically
generated JID resources. Clear the XEP-0115 capabilities node URI to
prevent service discovery fingerprinting. These adjustments reduce the
client's attack surface by minimizing identifiable metadata.
This commit is contained in:
Jabber Developer
2026-07-09 15:23:16 +00:00
parent 60e088ac3c
commit aeb5cfd7db
9 changed files with 56 additions and 18 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
src/ui/console.c
View File

@@ -2830,8 +2830,7 @@ cons_privacy_setting(void)
if (account->client) {
cons_show("Client name (/account set <account> clientid) : %s", account->client);
} else {
auto_gchar gchar* prof_version = prof_get_version();
cons_show("Client name (/account set <account> clientid) : Profanity %s", prof_version);
cons_show("Client name (/account set <account> clientid) : Pidgin");
}
if (account->max_sessions > 0) {
cons_show("Max sessions alarm (/account set <account> session_alarm) : %d", account->max_sessions);