Slashdot Mirror
Test Version Windows 10 Includes Keylogger
wabrandsma writes From WinBeta: "One of the more interesting bits of data the company is collecting is text entered. Some are calling this a keylogger within the Windows 10 Technical Preview, which isn't good news. Taking a closer look at the Privacy Policy for the Windows Insider Program, it looks like Microsoft may be collecting a lot more feedback from you behind the scenes. Microsoft collects information about you, your devices, applications and networks, and your use of those devices, applications and networks. Examples of data we collect include your name, email address, preferences and interests; browsing, search and file history; phone call and SMS data; device configuration and sensor data; and application usage." This isn't the only thing Microsoft is collecting from Insider Program participants. According to the Privacy Policy, the company is collecting things like text inputted into the operating system, the details of any/all files on your system, voice input and program information.
It's an early test program. The entire reason that it exists is to see how people use it, whether the UI decisions make sense, and what the designers overlooked. It is not intended for normal use and it is not intended for production environments.
There is no justification for this. The purpose of testing is to collect data about the system itself and how it operates in end user environments; this is collecting information about the end users themselves rather than just the machine, Microsoft has no business collecting that.
Windows is a great OS. What they're whining about is what a pre-alpha test version of the software collects. Test versions always deliver far more telemetry than would a retail release, as they should. Windows 10 right now is not for regular daily use or for consumers. It's purely about evaluation and helping designers test the new OS and improve it.
I would have no qualms about this practice if it were completely up front in it's entirety rather than have to read about it in a blog.
This is quote from the page where you agree to the terms of the preview program (this is the top text - the first you read):
Accept the Terms of Use and Privacy Statement
This should be the most boring step. Accept the Terms of Use and Privacy Statement and we can finish up your registration.
By accepting the Terms of Use and Privacy Statement, you agree that:
* The experimental and early prerelease software and services might not be fully tested.
* You might experience crashes, security vulnerabilities, data loss, or damage to your device.
* Your detailed usage and device data will automatically go to Microsoft and our partners to improve our products and services. See the Privacy Statement for more information.
* You will receive communications about the program and related promotions. Once you’ve joined the program, to stop receiving such communications you must leave the program.
Reading slashdot one-liner: (irm http://rss.slashdot.org/Slashdot/slashdot).rdf.item | fl title,desc*
I think there was even some notice when I downloaded it, I only remember it vaguely, but I did see it. It was a prominent warning that said something to the effect of, "We will be collecting data on how you use this, including pretty much anything we want to collect, but the data will be aggregated and anonymized, so we won't collect personally identifiable information." So it's not like they were secretive about it.
So you may not feel comfortable about it, but in that case, you should be able to just use production versions of Windows.
http://windows.microsoft.com/e...
For example, when you:
install the Program, we may collect information about your device and applications and use it for purposes such as determining or improving compatibility,
use voice input features like speech-to-text, we may collect voice information and use it for purposes such as improving speech processing,
open a file, we may collect information about the file, the application used to open the file, and how long it takes any use it for purposes such as improving performance, or
enter text, we may collect typed characters and use them for purposes such as improving autocomplete and spellcheck features.
systemd is Roko's Basilisk.
If you read TFA, you'd notice the important bit that say "could include a keylogger", unlike that shitty title states.
Or you can download the ISO, enter the key (it's all over the net), and set up an entirely fake user account.
Well, now it is here too. The key is NKJFK-GPHP7-G8C3J-P6JXR-HQRJR. Microsoft is using this key for all W10TP installations.
The ISO can be grabbed from http://preview.windows.com/ by anyone who needs it.
You're testing. You're not using it in a normal manner.
You're bug hunting.
For large sets, this will be our guide even unto death, for the LORD will work for each type of data it is applied to...
Watch out! Installing this version of Windows disables the recovery partition.
Like all previous software test versions. So that users could test their actual applications
That's not what the technical preview is for, the details have not been finalized yet so testing your applications against it now is pointless, they make that point quite clear:
Windows Technical Preview may be substantially modified before it’s commercially released.
http://windows.microsoft.com/en-au/windows/preview
So I'm not sure where you're getting any idea that testing on this version would be of any benefit.
Then they detail how they may work to resolve issues:
Also, if your PC runs into problems, Microsoft will likely examine your system files. If the privacy of your system files is a concern, consider using a different PC. For more info, read our privacy statement.
http://windows.microsoft.com/en-au/windows/preview-faq#faq=tab0
So if you've gotten this far and you're paranoid about privacy would you not think "ok maybe this technical preview is not something i want to be involved in?"
The joy with which people defend the jackboot of their opressor as it pounds down upon their faces is a bit scary sometimes.
As is the joy with which people who don't read come up with conspiracy theories about how everybody is out to get you! I'm sure this is all some big conspiracy (probably with the NSA?) to get people to install this technical preview and get their passwords to their email (though I thought the NSA already had all this stuff) so they can find out if you're a terrorist.
Why would they possibly need to know all your key strokes to get feedback data?
Because it's easier than going through the whole system and adding feedback functionality to every control.