Re: hide server-version at connect?

2012-01-10 Thread Johan De Meersman
I suppose the assumption is that any client needs the server version to figure out the compatible set of capabilities, as there is no separate protocol versioning afaik. I suppose you could change the version in the source to the lowest that has the full featureset you need. -- Bier met

Re: hide server-version at connect?

2012-01-10 Thread Reindl Harald
Am 10.01.2012 12:44, schrieb Johan De Meersman: I suppose the assumption is that any client needs the server version to figure out the compatible set of capabilities, as there is no separate protocol versioning afaik. sure? what's the binary between version and mysql_native_password?

Re: hide server-version at connect?

2012-01-10 Thread Johan De Meersman
- Original Message - From: Reindl Harald h.rei...@thelounge.net sure? what's the binary between version and mysql_native_password? No idea, I never bothered to look at the raw protocol :-) mysql 5.5 would be enough i guess, but how to create a patch for rpmbuild which must not be

Re: hide server-version at connect?

2012-01-10 Thread Reindl Harald
Am 10.01.2012 13:29, schrieb Johan De Meersman: - Original Message - From: Reindl Harald h.rei...@thelounge.net sure? what's the binary between version and mysql_native_password? No idea, I never bothered to look at the raw protocol :-) me too :-) mysql 5.5 would be enough i

Re: hide server-version at connect?

2012-01-10 Thread Johnny Withers
Security through obscurity? If none of your MySQL (or samba) servers are open to untrusted networks, why do you need to hide this information. Sent from my iPad On Jan 10, 2012, at 6:35 AM, Reindl Harald h.rei...@thelounge.net wrote: Am 10.01.2012 13:29, schrieb Johan De Meersman: -

Re: hide server-version at connect?

2012-01-10 Thread Johan De Meersman
- Original Message - From: Johnny Withers joh...@pixelated.net Security through obscurity? That sentence has been overused way too much. If you want to remove all obscurity from your security, just publish your passwords and private keys. If none of your MySQL (or samba) servers

Re: hide server-version at connect?

2012-01-10 Thread Chris Tate-Davies
On 10/01/12 15:41, Chris Tate-Davies wrote: On 10/01/12 13:34, Johan De Meersman wrote: - Original Message - From: Johnny Withersjoh...@pixelated.net Security through obscurity? That sentence has been overused way too much. If you want to remove all obscurity from your security, just

Re: hide server-version at connect?

2012-01-10 Thread Chris Tate-Davies
On 10/01/12 13:34, Johan De Meersman wrote: - Original Message - From: Johnny Withersjoh...@pixelated.net Security through obscurity? That sentence has been overused way too much. If you want to remove all obscurity from your security, just publish your passwords and private keys.

Re: hide server-version at connect?

2012-01-10 Thread Paul DuBois
On Jan 9, 2012, at 7:27 PM, Reindl Harald wrote: Nessus/OpenVAS Test detects the exact server version _ NVT: MySQL Detection (OID: 1.3.6.1.4.1.25623.1.0.100152) Overview: MySQL, a open source database system is running at this host. MySQL Version