devs/cproof
1
2
Fork 1
Code Issues 43 Pull Requests 6 Actions Packages Projects 1 Releases Wiki Activity

Increase software and version privacy #165

New Issue
Closed
opened 2026-07-09 16:25:13 +00:00 by jabber.developer · 1 comment
jabber.developer commented 2026-07-09 16:25:13 +00:00
Owner
Copy Link

Currently the software in many ways advertises Profanity as a default resource or default client id. In addition, it shows build hash, which constitutes version disclosure, and might be categorized as CWE-200. This disclosure might lead to targeted attacks with known vulnerabilities in previous versions. It simplifies target recon and violates privacy of our users.

As a proposed solution, we might spoof client id with one popular client which can be easier to emulate.

Currently the software in many ways advertises `Profanity` as a default resource or default client id. In addition, it shows build hash, which constitutes version disclosure, and might be categorized as CWE-200. This disclosure might lead to targeted attacks with known vulnerabilities in previous versions. It simplifies target recon and violates privacy of our users. As a proposed solution, we might spoof client id with one popular client which can be easier to emulate.
jabber.developer added this to the Plans (2025-2026) project 2026-07-09 16:35:55 +00:00
jabber.developer self-assigned this 2026-07-09 16:36:23 +00:00
jabber.developer commented 2026-07-10 10:39:27 +00:00
Author
Owner
Copy Link

Resolved by #166

Resolved by #166
jabber.developer moved this to Done in Plans (2025-2026) on 2026-07-10 10:39:50 +00:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
Compat/Breaking
Breaking change that won't be backward compatible
Kind/Bug
Something is not working
Kind/Documentation
Documentation changes
Kind/Enhancement
Improve existing functionality
Kind/Feature
New functionality
Kind/Security
This is security issue
Kind/Testing
Issue or pull request related to testing
Priority
Critical
1
The priority is critical
Priority
High
2
The priority is high
Priority
Low
4
The priority is low
Priority
Medium
3
The priority is medium
Reviewed
Confirmed
1
Issue has been confirmed
Reviewed
Duplicate
2
This issue or pull request already exists
Reviewed
Invalid
3
Invalid issue
Reviewed
Won't Fix
3
This issue won't be fixed
Status
Abandoned
3
Somebody has started to work on this but abandoned work
Status
Blocked
1
Something is blocking this issue or pull request
Status
Need More Info
2
Feedback is required to reproduce issue or to continue work
No Label
Kind/Enhancement
Kind/Security
Priority
High
2
Reviewed
Confirmed
1
Milestone
No items
No Milestone
Projects
Clear projects
No project Plans (2025-2026)
Assignees
Clear assignees
admin jabber.developer jabber.developer2
No Assignees jabber.developer
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: devs/cproof#165
No description provided.
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?