Test Version Windows 10 Includes Keylogger

wabrandsma writes From WinBeta: "One of the more interesting bits of data the company is collecting is text entered. Some are calling this a keylogger within the Windows 10 Technical Preview, which isn't good news. Taking a closer look at the Privacy Policy for the Windows Insider Program, it looks like Microsoft may be collecting a lot more feedback from you behind the scenes. Microsoft collects information about you, your devices, applications and networks, and your use of those devices, applications and networks. Examples of data we collect include your name, email address, preferences and interests; browsing, search and file history; phone call and SMS data; device configuration and sensor data; and application usage." This isn't the only thing Microsoft is collecting from Insider Program participants. According to the Privacy Policy, the company is collecting things like text inputted into the operating system, the details of any/all files on your system, voice input and program information.

Comments

Yeah

[ceide2000]

I shall pray to my new overlord!!! How long till the goverment demands that data to protect our children from terrorists?

Windows 1984

[Anonymous Coward]

All your privacy are belong to us!

What do you expect?

[TheRaven64]

It's an early test program. The entire reason that it exists is to see how people use it, whether the UI decisions make sense, and what the designers overlooked. It is not intended for normal use and it is not intended for production environments.

Re:What do you expect?

[Anonymous Coward]

It's an early test program. The entire reason that it exists is to see how people use it, whether the UI decisions make sense, and what the designers overlooked. It is not intended for normal use and it is not intended for production environments.

The nature of the data collection will force the collected data to be skewed, because nobody in their right mind will put their "real" stuff on that machine, so they won't end up using it in a normal manner.

Re:What do you expect?

[wisnoskij]

This. What would even be the point of releasing a test version of windows if they were not tracking what you do?

Re:What do you expect?

[Anonymous Coward]

It's an early test program. The entire reason that it exists is to see how people use it, whether the UI decisions make sense, and what the designers overlooked. It is not intended for normal use and it is not intended for production environments.

There is no justification for this. The purpose of testing is to collect data about the system itself and how it operates in end user environments; this is collecting information about the end users themselves rather than just the machine, Microsoft has no business collecting that.

Re:What do you expect?

[Anonymous Coward]

Yes, it's a test version.
In final release this keylogger will be built in and hidden much better, so you won't find it that easily.

Re:What do you expect?

[Anonymous Coward]

This. What would even be the point of releasing a test version of windows if they were not tracking what you do?

Like all previous software test versions. So that users could test their actual applications, especially with the private data that they can't hand over to Microsoft, and report back if there are problems.

The joy with which people defend the jackboot of their opressor as it pounds down upon their faces is a bit scary sometimes. Does nobody think "how did everybody live and produce software for the last 40 years before there was total surveillance" before they post this kind of explanation?

Re:What do you expect?

[X0563511]

You're testing. You're not using it in a normal manner.

You're bug hunting.

Re:What do you expect?

[r_naked]

Absolutely there is justification for this, and as has been pointed out MANY times on this thread already, THEY MAKE IT VERY CLEAR.

* Install it in a VM
* Don't visit your normal sites / "private" sites that you don't want MS (or whoever) to know about
* Create new accounts for any site that you don't care that they know you visit, but you don't want them to have your login credential.

I mean this is brain dead stupid obvious shit...

I am running it because I WANT MS to get that feedback. I don't want them to be tracking my normal usage though.

I have switched to Linux Mint after the Win8 fiasco, but I don't want to see MS fail. They keep me in business, so I want to give them as much feedback as possible.

This whole article is a non-issue if you pay attention to what you are agreeing to. *sigh*

-- Brian

"This isn't a permanent feature"

[Constantin]

The article mentions that this 'feature' will be turned off once Windows 10 reaches broad distribution. Makes perfect sense actually

First you prove that the back door you've installed in the OS operates as expected. Then you sell key logger access to your user base on a case-by-case basis to the FBI, CIA, NSA or any other agency that is shaking big wads of cash in front of your nose while holding a 'keep it all secret' and 'get out of jail free' card for good measure (see various sections of the patriot act and other anti-terrorism, save-the-children, etc. legislation that have been aggressively 'interpreted').

Thus, encryption and other defensive measures are easily rendered useless as no AV system will detect a key logger 'feature' that is part of the operating system.

More profit for MS, less security for it's users. Brilliant.

Re:"This isn't a permanent feature"

[BarbaraHudson]

Any bets that MS will "forget" to turn this off in the RTM?

If it weren't turned off in the RTM version, people would figure it out within a few hours. It's not like everyone's going to accept Microsoft's statement at face value, so they'll be logging packets, etc. Microsoft knows this.

Re:So no company is going to install it?

[benjymouse]

Tell me what larger corporation concerned about information control is going to accept anything close to that?

Don't install the preview version for production purposes then.

This is telemetry from the preview version. You explicitly accept the telemetry when you join the preview program.

If a larger corporation does not like that, even for testing purposes, then they can simply wait for the final (RTM) version.

Because they says they can doesn't mean they will

[Dorianny]

This is all speculation based on the privacy policy. To my knowledge no one has done any research to find out exactly what data. if any besides Crash Reports, Microsoft is actually collecting.

Re:I would not have a problem with this if...

[benjymouse]

I would have no qualms about this practice if it were completely up front in it's entirety rather than have to read about it in a blog.

This is quote from the page where you agree to the terms of the preview program (this is the top text - the first you read):

Accept the Terms of Use and Privacy Statement

This should be the most boring step. Accept the Terms of Use and Privacy Statement and we can finish up your registration.

By accepting the Terms of Use and Privacy Statement, you agree that:

* The experimental and early prerelease software and services might not be fully tested.

* You might experience crashes, security vulnerabilities, data loss, or damage to your device.

* Your detailed usage and device data will automatically go to Microsoft and our partners to improve our products and services. See the Privacy Statement for more information.

* You will receive communications about the program and related promotions. Once you’ve joined the program, to stop receiving such communications you must leave the program.

Re: Friends

[Anonymous Coward]

I don't know about you, but I don't think I could properly evaluate it if I had to avoid browsing to any website where I might need to enter a password, or unzip password-protected zip files, or, well, do anything that would involve me entering a password.

Re:I would not have a problem with this if...

[wonkey_monkey]

http://windows.microsoft.com/e...

For example, when you:

        install the Program, we may collect information about your device and applications and use it for purposes such as determining or improving compatibility,

        use voice input features like speech-to-text, we may collect voice information and use it for purposes such as improving speech processing,

        open a file, we may collect information about the file, the application used to open the file, and how long it takes any use it for purposes such as improving performance, or

        enter text, we may collect typed characters and use them for purposes such as improving autocomplete and spellcheck features.

Re: Friends

[atlasdropperofworlds]

If you read TFA, you'd notice the important bit that say "could include a keylogger", unlike that shitty title states.

Re: Friends

[Anonymous Coward]

Or you can download the ISO, enter the key (it's all over the net), and set up an entirely fake user account.

Well, now it is here too. The key is NKJFK-GPHP7-G8C3J-P6JXR-HQRJR. Microsoft is using this key for all W10TP installations.

The ISO can be grabbed from http://preview.windows.com/ by anyone who needs it.

Re:In soviet Russia...

[binarylarry]

in Soviet Russia old joke makes fun of you!