Bonum Certa Men Certa

Mumble (and Murmur), an End-to-end Encrypted (E2EE) Communication Tool for Voice (Group Chats Included), Likely Withstood Over a Decade Without Security Flaws

posted by Roy Schestowitz on Oct 28, 2024

Mumble

A couple of years ago I made a video about Mumble and how I use it, why it is good, and so on. The development process is dynamic and the latest release was on May 19 of this year. I use it a lot (about 10 people), I host it from home, and sometimes whistleblowers use it too (safely leaking material requires E2EE). There are other options for these sorts of things, but I cannot comment on them based on personal experience.

To avoid repetition, as it would be pointless, this article won't explain how Mumble works (this video covers it) but instead point out this security policy: "Depending on the state of the project, version and environments we may patch older versions or support multiple feature versions."

The page suggests the last of all "Security Advisories" was back in 2016 and in the server side, Murmur. Of course it only impacted Windows, which is back-doored anyway (and thus ought not be the server). "It is possible to cause Murmur on Windows to stop receiving UDP packets by sending a crafted UDP packet," it says. Why put the back end on Windows despite all that we know about Microsoft and the NSA?

Prior to this, one must go to 2014 (earlier months) to find a record of Mumble (or Murmur) flaws. This means that in over a decade the 'suite' (Murmur/Mumble) have had no known security problems, at least based on this record from the Mumble Web site.

Security flaws may not be meticulously documented by the official site, so I've researched a bit and found no further evidence of newer flaws. That does not mean none exist; I just cannot see any. That's a good record.

Other Recent Techrights' Posts

A Week of Sunlight
They say transparency is like sunlight to a vampire
"Linux" Sites That Went Astray
there are even worse things than shutdowns
Links 16/06/2025: Climate, Wildfires, Breaches, and Monopolies
Links for the day
Links 16/06/2025: Summer in Finland and Misunderstandings
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Sunday, June 15, 2025
IRC logs for Sunday, June 15, 2025
Gemini Links 15/06/2025: Rainy Season and OpenDocument Format (ODF)
Links for the day
Links 15/06/2025: Military Games, Parade, and Actions
Links for the day
Links 15/06/2025: Windows TCO, Openwashing, and Wars
Links for the day
Gemini Links 15/06/2025: "AI Fatigue and Crappiness"
Links for the day
When Abusive Law Firms (Working for Microsofters Against Us) Assert That Someone Writing in Social Media About Himself is Confidential Information
There was no reason to throw "GDPR" into 2 SLAPPs; they know it, but the goal was to increase the cost of a Defence and lessen the incentive to challenge the SLAPPs
Microsoft Attack Dogs Against Watchdogs and Guard Dogs in Software
Last year Microsofters hired attack dogs or "guns for hire"
Slop Cannot Replace Domain Expertise
All this "AI" hype (it's not even intelligence, it's all a misnomer, as many of us have insisted all along) will fizzle and be written off as a failed experiment
IBM's Fresh 'PIPs' (Action Before Layoffs)
At times like these, even once-reputable employers resort to PIPs and other procedures/tricks for denial of workers' rights
Microsoft is a Problem Not Just for Denmark
Every country should consider what Denmark is doing, why Denmark is doing it, and then do the same
The Slopfarms' Self Detonation
If more sites like BetaNews go under, then maybe we can still salvage some of the Web
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Saturday, June 14, 2025
IRC logs for Saturday, June 14, 2025
Links 14/06/2025: FDA Changes Priorities, Cassette Data Storage From The 1970s
Links for the day
Gemini Links 14/06/2025: Steam Next Fest and Thoughts on Gemini
Links for the day
Site/Datacentre Maintenance Next Week
speed things up
Bulgaria: GNU/Linux Near 10%
The Bulgarian market seems to be changing
I Never Spoke to BetaNews. But BetaNews Wants to Ensure I Never Will, Either.
Sometimes just the reluctance to talk about it can say a great deal
Throwing Money at Lawyers Can't Stop Us (It Never Did)
Even just trying to censor things can result in the opposite of the desired outcome
Online Search or Large Search Engines Aren't Working Anymore
business models that directly compete with interests of Web users
Holidays and Breaks
I've hardly taken any long breaks since I got married
Danish OpenDocument Freedom
"year of Linux"
Links 14/06/2025: Wars and L.A. Distortion Effect
Links for the day
BetaNews Has More or Less Died After Experiments With LLM Slop, Is Linuxsecurity Next?
It doesn't seem like BetaNews knows what it's doing, let alone what it talks about
Gemini Links 14/06/2025: Historic Ada Design and GeminiSpace.Club to Expire
Links for the day
Links 14/06/2025: India Plane Crash and Middle-Eastern War
Links for the day
Over at Tux Machines...
GNU/Linux news for the past day
IRC Proceedings: Friday, June 13, 2025
IRC logs for Friday, June 13, 2025