Vista is Watching You
greengrass writes "Are you using Windows Vista? Then you might as well know that the licensed operating system installed on your machine is harvesting a healthy volume of information for Microsoft. In this context, a program such as the Windows Genuine Advantage is the last of your concerns. In fact, in excess of 20 Windows Vista features and services are hard at work collecting and transmitting your personal data to the Redmond company."
Vista's biggest enemy is not Linux -- it's Vista. Americans take their privacy too seriously to ignore this if this becomes public. Of course, one could argue that by now the 'war on terror' has taught us to just bend over when the government says so, but hopefully, the reaction will be a little bit more violent when Microsoft asks us to 'submit'....who knows.
I wonder...
Is it paranoia if the OS really *is* sending tons of data to Redmond?
Is it slander if it's true?
How many licks does it take to get to the tootsie-roll center of a tootsie-pop?
Just WTF *is* the cream filling in the middle of Hostess snack cakes????
Karma: Chameleon (mostly due to the fact that you come and go).
Face it, the advent of the internet has brought to the world many great and wonderous things. However, there is a dark side to connectivity, and it's name is, connectivity. If you want to be part of the whole, you have to accept the inherit lose of privacy that is associated with it. Doesn't matter how much you dislike it, but as a whole EVERYTHING is becoming more connected, you can't truly expect your privacy to somehow remain immune from all this "openness".
Those who thrive in this environment (and in this case, thrive means are able to navigate it with the majority of their private information private) will be those who understand, accept, and deal with it.
Disclaimer: I run Vista, I am slightly upset by these findings, but I'm just gonna ponder the positives. As long as the info is sent anonymously, whats the big deal? This information is probably being used to make sure the operating system run the smoothest it can, the info sent can be used to help update the system and keep MS on top of bugs and holes in the OS
heheh Until the first update to Vista which requires that the information be dumped. It appears that Microsoft is slowly trying to head towards a near-constant connection of the end-user to their system, for what purposes is a matter for conjecture. And might this be precursor to a subscription-based OS?
Microsoft is stepping over some big lines here.
Something else comes to mind... what about users still on dial-up? Won't the transmission of this user information completely clog the line?
Good grief, I hate Microsoft as much or more than the average Slashdotter, but most of TFA is just alarmist FUD.
No folly is more costly than the folly of intolerant idealism. - Winston Churchill
Why don't they tell you? Every halfway serious program I use that has to report information home (or at least wants to, for statistical purposes) asks me first, or at least informs me that it is going to do that now. Some programs even tell you what exactly they're going to send (and, behold, checking source and the transfered data shows that they actually tell you the truth).
Usually I don't mind. They probably sell that information (not about me, but about their "user base") to someone to make some money that way, since I don't pay for the honor to use their program for free. No problems there.
A problem arises when said data is transmitted without my consent. Without me even knowing that it is being sent. Am I supposed to trust a company that it isn't going to do shady business with my data when they're sneaky about it?
Now, I'm not saying MS does. But, seriously, why the cloak-and-dagger approach? Just tell the user "Vista is now gonna send MS the following information about your system, anonymized so it can't be tracked, and we want it to see what hardware platforms our system should run best on. Thanks for your co-op."
What's wrong about that? If someone doesn't care, heck, one more click on "accept" isn't going to be even noticed in Vista. And if someone does care, the smell of fish is not gonna hit his nose when something like this is being exposed.
We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
This is not good. Probably only used to invalidate your copy of Windows once you change the motherboard.
This service asks your consent, and is okay and OPTIONAL.
Again: if a device is plugged in, a dialog first comes up and asks the user if he/she wants to search the internet for a driver. And the service NEEDS the name of the device to search for one.
That's because you ASK for it. Similarly if I Google a problem, Google gets my search query. But they're collecting stats on hardware, and that's pretty normal for an OS company. After all, it'll help them build a better OS (not likely though).
Just the extensions?? Big deal. Here's a partial list for my computer: *.raw, *.mov,...wait, this person has some Apple format on their computer...DESTROY. Can they use this information to help with vendor lock-in? Maybe.
Maybe this is going a bit off the deep end. What I install is my business and not theirs.
This asks your consent, and is okay and OPTIONAL. Why are they even including this in this article?
This asks your consent, and is okay and OPTIONAL. So, if you register, it receives the data. No surprise there.
Makes data available to services that contact Microsoft does not mean this data will be SENT to Microsoft. FUD.
If this is actually true, then it's too far. Direct monitoring of the sites!
Too far. But I'm not sure what a Peer Name is now. And I doubt it's very useful.
"What lies behind us, and what lies before us are tiny matters compared to what lies within us." Ralph Waldo Emerson
The things that get transmitted are:r ary/28cd5e13-e955-4941-91d9-fec2525e96c71033.mspx? mfr=true
1. Activation info. Well, duh.
2. Windows Update. -do-
3. Auto Root Update. Updates the list of trusted certificate authorities. You know, Verisign etc.
4. Windows Media DRM. Not an issue if you don't use DRM files, and no, information isn't transmitted every time you play the song.
5. Windows Media Player. To download album art/track names. Again, no different from other players. Easy to disable completely.
6. Malicious Software Removal. What's the problem if info is transmitted to Microsoft that you had an infection and it was cleaned? Non-issue. You can choose not to use it at all.
7. Network Connectivity Status Icon. This doesn't TRANSMIT anything except the HTTP request. It just downloads a small page to check if the Internet connection is working. Easy to disable, no problem.
8. Windows Time Service. Syncs time. Again, what's the problem? It's easy to disable if you really have a problem.
9. Problem reports. It asks you very clearly if data is to be sent to Microsoft, and asks you again if you want to send personal data. And reporting problems is good.
10. Games. Come on, it downloads fucking info and covers.
11. Event Viewer. Data is sent only when you specifically REQUEST for more online help. http://technet2.microsoft.com/WindowsVista/en/lib
12. Customer Experience Improvement Program. Microsoft *SPECIFICALLY ASKS YOU* if you want to opt-in. Once you say no, it never asks you again.
- etc -
The paranoia claims are really ridiculous. The operating system uses Internet resources to improve your experience, like telling you when you are connected to the Internet. Please take your tinfoil hat off for a minute and look at this objectively.
How about people who pay for bandwidth usage?
Would you be able to charge microsoft for the bandwidth used by this unwanted feature?
http://spamdecoy.net - free throwaway anonymous email - avoid spam!
X-ray machines, Jet engines, and more all report operating conditions and usage information back to the manufacturer. Microsoft is doing this anonymously to improve the products. I have no problem with this. They aren't sending back any "personal information" like credit card numbers or even identification information.
There are plenty of reasons you still don't want this happening. Consider...the war on terror continues and somebody gets caught up in the Feds dragnet. They press charges, but don't quite have the evidence they need. The defendant's lawyer (and the ACLU) is probably going to get him to walk unless they can find something. Little known to all, the President (or these days, the VP) issues a secret Executive Order that strips "terror suspects" of the right to attorney-client privilege. The Feds show up at Microsoft's door with several court orders. They order the tracking of the suspect, and they provide the IP addresses of computer in the offices of the defendant's attorney and the ACLU and demand that Microsoft install a backdoor patch to download documents off that computer. Of course the download will be indiscriminate...maybe this lawyer will also have you as a client, and your files will go to the Feds also.
Far-fetched? Perhaps, but certainly plausible. Suppose it's not the American government, but the Chinese looking for a few journalists or Falun Gong members. Still far-fetched? Which way do you think Microsoft will go when the choice is a few journalists in prison or losing access to the Chinese market?
Privacy is always good.
>It appears that Microsoft is slowly trying to head towards a near-constant connection of the end-user to their system, for what purposes is a matter for conjecture.
/author/ of the software, not the user - more DRM, more restrictions on how I can use the software, instead of better software for /me/. It's seriously getting to where I don't trust commercial upgrades anymore. It seems like 90% of the time or better a commercial upgrade limits what I can do with the application instead of enhances it.
And it's not just Microsoft doing it.
This "phone home" crap is the single biggest thing that is driving me to consider open-source alternative operating systems and software.
The second biggest thing is that it seems more and more that with commercial software every time I install an "upgrade" it is really an upgrade for the
It's really all come down to games for me. If my games would all run on Linux I'd be there tomorrow.
A work that expires before its copyright never enters the public domain and thus enjoys eternal copyright protection.
Microsoft is stepping over some big lines here.
Either that, or they're just using their pool of hundreds of millions of users with tens of millions different hardware/software configurations in order to collect bug data.
That's really the most obvious and the most likely answer.
I don't respond to AC's.
Isn't it ironic that the very company charging insane amounts for a "safe and secure" OS is essentially using spyware embedded in the system itself when the average user shells out a decent amount of money to prevent spyware programs?
War is Peace; Freedom is Slavery; Ignorance is Strength.... and now Spyware is Security.
X-ray machines, Jet engines, and more all report operating conditions and usage information back to the manufacturer.
And X-ray machines and jet engines are multi-purpose devices that store gobs of personal information?
They aren't sending back any "personal information" like credit card numbers or even identification information.
I'd like to know how you've achieved that conclusion given the fact that you and just about everyone outside of Microsoft lacks meaningful information as to what *is* being sent, in what form, and how.
Someone long ago said "Doubt is not a pleasant state of mind, but certainty is a ridiculous one." But no worries, right?
It's fully-disclosed and hardly sneaky. If you block it, it will still work fine, but you lose updates to Windows and its components, you won't get your DRM certificates for media it's introduced to, your IPv6 NAT service won't work as expected, and online help features stop working. Want to stop them? Firewall rules, or disable the services.
:)
Everything has to be considered a security risk from your position, otherwise you're not doing your job
As long as companies write such ridiculous EULAs, it is only natural that people will react this way to them. Frankly the only reason that more people are not scared and appalled at EULAs is that no one actually reads them. Probably many of the things claimed in EULAs would not hold up in a court of law. But if all the terms of the EULAs were actually legally enforceable, then it would not be at all paranoid to be concerned about them: the terms are, after all, very consumer-hostile.
As long as the info is sent anonymously, whats the big deal? This information is probably being used to make sure the operating system run the smoothest it can, the info sent can be used to help update the system and keep MS on top of bugs and holes in the OS
Hello, we're with the police. We'd like to install these realtime video cameras and microphones into all the various rooms of your home. The information gathered will only be used to make sure your home is run the smoothest it can, and that no criminals can get in to do you harm, or in case a fire or storm damage or medical emergency then we can send the appropriate first-responders right away.
Even if you decide that you believe MS 100% and trust that they won't quietly change the terms in a year or two (a right they do reserve) to allow them to collect personally identifying information AND sell, it, just how secure are their servers? Any chance their admins will sell the data on the side for obscene amounts of cash?
Does any unique but not personally identifying information also appear in personally identifying Word documents? What is their policy if the NSA wants a copy? What is their policy if Bill needs a favor from Congress?
Funny, my Linux boxen don't collect any information at all and still they run nice and stable and get their updates as needed.
Considering you indirectly agreed to it all in the EULA, i doubt it.
---- Booth was a patriot ----
The bottom line is you have to transmit personally identifiable information to Microsoft to keep Vista running properly. Unless you're willing to go to extreme lengths to sanitize every bit of outbound data.
I know my ISP is keeping records of where I visit on the internet. But if that really worried me I could tunnel through to a secure proxy and all they get is the proxy IP. If you block Microsoft at the firewall your operating system will stop working and you won't be able to get security updates.
Finished updating my home network to Kubuntu this weekend. Very nice. I support Microcrap all day and going home to my Linux network is like diving into a clear, cool pool at the end of a hot day. Everything is so fluid, easy to manage, low stress computing. Funny thing, I remember a day when going with Microsoft was the low stress networking option.
Those days are over.
That's our life, the big wheel of shit. - The Fat Man, Blue Tango Salvage
EXACTLY! I mean honestly its heresay whether MS even logs the IP's of the people sending the data or not. Who cares. I'm sure by simply reading TFA that very news website logged your ip, browser, etc also, just like ANY website does. Why dont people sit here and get all pissy about that? I mean in all reality Netscape was the first app to do this that I could recall, sending back crash information when it crashed; brilliant. This expands on the idea somewhat seeing what are the most common features used, as well as their reliabilty and performance. Also if you are really worried about the cpu time it will use to do this then you aren't really that bright or you are still using a 486, I mean seriously its essentially negligible. It will only be time before some of the big Linux distros follow suit-- but of course everyone will praise them for doing exactly the same thing... Oh well.
Technophile
Bush's DOJ switched sides and now our government supports Microsoft so vigorously both here and in abroad.
Besides the free gift of your personal info, the are those backdoor keys. They didn't call them "NSA keys" for no reason.
Running with Linux for over 20 years!
Why oh Why don't console game developers allow the use of keyboard and mouse in their games?
My left thumb is the LEAST dexterous digit, and yet that it what I am forced to 'aim' with.
The first PS3 game to release with a keyboard/mouse controller option will sell off the shelves!
You hear me? Just do it!
Thanks
If Microsoft wanted to spy on you they could easily get an IP that isn't Microsoft. Besides, do you really trust your host file on a Microsoft system? They're known for bypassing it specifically for that kind of stuff.
Please, for the good of Humanity, vote Obama.