When chatting on IRC, it is possible to leak data like OS, CPU type if the IRC client happens to leak it in VERSION string. Anybody doing /CTCP VERSION can see it. Same about timezone (/CTCP TIME). This can be mitigated by turning replies to CTCP queries off. Also, IP address is leaked to others (/whois nickname will show it if it's not cloaked).

By analogy, does the mumble client expose such sensitive data to others that are connected to the same server? If it does, what are the ways to mitigate this?

  • To clarify are you talking about mumble.com ? And if YES, are you asking about the server or the downloadable mumble client? – Anthony Hatzopoulos Jul 30 '12 at 20:44
  • I am asking about the mumble voice chat client. Will edit my question to make it clear. – AnonymousLurker Jul 30 '12 at 21:04
  • FYI, mumble.com is a commercial service providing hosting for the Mumble VoIP software. This open-source software can be found on SourceForge : mumble.sourceforge.net . – piernov Jul 5 '14 at 19:00

According to this thread on their developer technical forum. Yes Murmur does send info like operating system and version info.

Here is a list of configuration options for murmur and the source code on github

Add this line to your murmur.ini to stop sending OS version info.


Add this line to obfuscate your IP


You can disable allowing pings


Disable logging which is accessible via RPC


If you run this under linux or mac, do not run it has root or a super user, but if you have to use the uname config option

I could not find anything about timezone.

The only EULA and privacy document I found is the one on their order page, linked in the section about having to agree to their 'Services Agreement'. Second place I found some privacy info was on their wiki

  • 1
    Murmur is the server, not the client, I am concerned about the client. In a [me - mumble server - you] scenario, generally there's no way for you to sniff and find my IP. While mumble is indeed used in online games, my question isn't asked in this context, it's strictly about the mumble client and private data it may eventually leak. – AnonymousLurker Jul 30 '12 at 21:32
  • I would ask your question in their technical forum. You can also check out the source code if you are so inclined github.com/mumble-voip/mumble – Anthony Hatzopoulos Jul 30 '12 at 21:38

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.