XP, Phone Home

Randomeyes writes: "The Register reports that Windows XP has functionality built-in to the Search Companion module that allows Microsoft to log users internet searches. Information collected includes user IP address, search term and related information. A cookie is also set. 'TrustUnWorthy Computing' anyone?" Tanveer1979 writes: though, that "the bright side is that it doesn't send anything to internet, it only downloads files, and compares the files on your computer with the files on server. And I guess a little effort is needed for the malicious to program it to send your data to web."

Comments

It remembers your IP address

[Anonymous Coward]

The article contradicts itself: XP does send information to Microsoft, namely users' IP address. Microsoft correlates this with search terms. An IP address isn't personally usually personally identifying, but it can identify a specific company, university, etc. Microsoft will thus have good statistical information about who is searching for what.

The individual search engines have been able to collect this data for years, of course. But this covers all the search engines toge. And most of us don't trust Microsoft as much as we trust Google.

Slashdot editors please read the article !!!

[miklernout]

It states very clearly that it only attempts to download certain files when searching on the local machine / LAN / ... and DOES send information to a *.microsoft.com server when searching on the internet through the utility.

Re:Please explain

[Zico]

Yes, but Bash, Netscape etc. doesn't trasmit that dat back to an 800lb gorrila, my friend.

Preach on, brother! Erm, oh wait...

Newsbytes: Netscape Navigator Browser Snoops On Web Searches

"According to a network traffic analysis performed by Newsbytes, Netscape is capturing Navigator 6 users' search terms, along with their Internet protocol (IP) address, the date Navigator was installed and a unique identification number."

Hmmm, a unique identification number, eh? So forget logging your IP address with your search (which Microsoft and the other search engines claim not to do), forget gathering demographic data (which the XP Search Assistant also doesn't do), but Netscape is actually using a unique ID numbers to tie searches to specific individual users.

Wanna try again? ;)

Host file.

[AVee]

I don't have an XP box handy, but I'd like to see what happens if you change add sa.windows.com to the host file and make it point to 127.0.0.1. Or to some other server. It would be nice to be able to send other files then the ones MS wants you to get...

Re:What a non story! A waste of space!

[nmg196]

No sorry, you're not quite right here; The Register says that a local search only results in the search agent doing a quick version check on some XSL files - it doesn't send your search terms. Hardly an invasion of privacy.

It's only when you do an internet search that it sends your search terms.

It even says "For now it appears that there's nothing here for users to worry about." - and this is The Register talking!

When you do an internet search, it sends your search terms (so it can do the search!). This is hardly an invasion of privacy... If you really want privacy - don't connect your computer to a public network.

Nick...

Re:In places where Internet is still expensive

[fruey]

Yes, but ISDN isn't all that popular. Most people who have per-minute connections are modem users who definately WOULD notice if their machine was trying to connect in the background.

Where are you from to generalise like that? ISDN is very popular here, where DSL is not available at all, and regular phone lines suck.

IMHO, internet integration is a good thing. I like the net integration with KDE for instance. However, the type of "internet integration" Microsoft practices is not normally to the benefit of the user. This doesn't invalidate the whole concept though.

Only if Internet is not expensive (my whole point).

Better get a flat rate connection then. Per-minute connections are good for low-level users, the type that check their email once every couple of days etc.

I don't live in Europe. I am giving Europe as an example. I live in Morocco. There is NO SUCH THING as a flat rate connection buddy. That's why it costs me $2/hour whatever I do, unless I can kick down $400/month for a 64kbps leased line. Yes, that's four hundred bucks.

Re:In places where Internet is still expensive

[atomico]

That's a truly good point. I happen to have an ISDN modem by my side, and I am tired of switching it off as soon as the 'connecting' dialog box pops up. Being ISDN, you have to be as fast as lightning, otherwise you are paying another call (first three minutes are always billed, so bad luck if you are connected just for 5 seconds).

In many countries, flat rates are just during off-peak hours; for instance, mine starts at 18:00. Now that every single application or operating system component feels entitled to call home whenever it wants to, having an external modem you can physically switch off in tenths of seconds really pays off.

XP has a host of these in the EULA to name a few..

[K7001]

for instance , you're not supposed to connect to the remote assistance feature using VNC. M$ also reserve the right to inspect the contents of your hard drive and disable unlicensed software (also on behalf of other firms). There is a whole host of this in the EULA which is why I won't use XP for home use and limit what I'm prepared to use XP and .NET for at work.
Netstat your machine every once in a while and check out what state various ports are in (i do it habitually)