Slashdot Mirror
Windows 10 Still Phones Home With Data In Spite of Privacy Settings
Penguinisto writes: According to Ars Technica, Windows 10 will still send telemetry and other data to Microsoft-owned domains — no matter how tightly you crank down the privacy settings. Even with everything buttoned down, Cortana, OneDrive, and Web Search from the Start Menu disabled, the OS still phones home, using a random system ID that persists across reboots. It apparently also tries to bypass proxies to do it. "Some of the traffic looks harmless but feels like it shouldn't be happening. For example, even with no Live tiles pinned to Start (and hence no obvious need to poll for new tile data), Windows 10 seems to download new tile info from MSN's network from time to time, using unencrypted HTTP to do so. ... Other traffic looks a little more troublesome. Windows 10 will periodically send data to a Microsoft server named ssw.live.com. ... The exact nature of the information being sent isn't clear—it appears to be referencing telemetry settings—and again, it's not clear why any data is being sent at all. We disabled telemetry on our test machine using group policies."
They said they'd used group policies to enact this change. If group security policies don't encompass the entirety of the OS, how could you ever be secure in the first place?
Additionally, "Response Times" are not the king for people who *do not want this*.
Same as the old Microsoft.
Group Policy explains if you try it on other editions it will act as if set to Basic.
.
When I start up my PC in the morning, the hard drive just grinds away for about 5 or 10 minutes, and the CPU is sluggish. At first I thought it was an A/V scan, so I removed my A/V. No effect.
Then I stumbled upon the InfoWorld article, and removed the Windows Updates that were mentioned in the article. The scanning stopped. Until I did a Windows Update earlier this week. And I had to remove once again the offending updates.
What in the world is going on in Redmond?
It is interesting to see not only the technical influence, but the design philosophy inherited from the Skype acquisition: That is, from the perspective of a running service, it's perfectly ok or even desirable to worm your way out and communicate with the hivemind, no matter what the user says. For example, if the user configures the app not to communicate with a voip service, the app will respect the exact letter of the user's intent -- not to make voip calls or display presence -- but it will still update itself, download patches, and update directory data so that you *could* make voip calls if you changed your mind... which it will assume you did at the next update when the settings are reset to default-open...
Opting out entirely is within reach for most people/orgs, it's the momentum that keeps people choosing this crapware. I keep Windows around because I like Visio, but my company does everything else in Google services, so my main machine for actual work has been Linux Mint for several years. The kids have Windows tablets but never use them; they just use pocketable android for comm and big iron for gaming/steam/AV/dev. It's not even worth much effort to criticize msft, they're not going to stop doing stupid things, they don't offer an advantage at the consumer level anymore, and I just don't have the time for it.
(Now, ask me as a security geek, do I like having windows event data along with netflow? Sure thing, but the infrastructure to get that is insanely costly to license and run. I just wouldn't build a company that way anymore.)
I think not...(*poof*)
Obligatory "I'm shocked, SHOCKED I TELL YOU!"
Just cruising through this digital world at 33 1/3 rpm...
Wasn't auto update, upgrade the give away clue?
Watch as time goes by how much worse it gets, from broken apps (due to auto upgrades) to massive security fails.
"If any question why we died, Tell them because our fathers lied."
OpenWRT builds should soon come with "none of this telemetry shit" big red switch on the frontpage. And not just Msft, but apple, oracle, etc included. And then, i want OpenWRT built into a usb-ethernet dongle that i can take with me to travel.
http://validator.w3.org/check?uri=http%3A%2F%2Fwww.slashdot.org Errors found while checking this document as HTML5!
Here are a few others, and some scheduled tasks that I was surprised to find on Windows 7 machines.
Thanks to the War on Drugs, it's easier to buy meth than it is to buy cold medicine!
Windows 8 was a fuck up because of the UI.
It looks like Microsoft said, with 10, let's just go deeper and fuck up the user's privacy instead.
The more I hear about 10, the less it looks like a saviour to Windows woes and the more it looks like an even bigger disaster.
Corporation, n. An ingenious device for obtaining individual profit without individual responsibility. - Ambrose Bierce
Finally, we will access, disclose and preserve personal data, including your content (such as the content of emails, other private communications or files in private folders), when we have a good faith believe that doing so is necessary ...
"If you have nothing to hide, you have nothing to fear." - Every fascist, ever
Which, it should be pointed out, can be disabled on 7 and 8.
Telemetry and error reporting cannot be effectively disabled on 10, because Microsoft refuses to make Enterprise available via retail channels.
This AC is also remaining on 7 here. And has refused to install the offending updates (KB3068708 KB3022345 KB2952664 KB2990214 KB3035583 KB971033 KB3021917 KB3044374) from Windows Update. (Another thing that cannot be disabled in Win10.)
And I'm pretty sure it's been established that a EULA can't be used to do things that go against the law.
-=This sig has nothing to do with my comment. Move along now=-
Actually, Apple does have the settings. In OS X, since 10.10, it has been due to Spotlight doing online queries. In iTunes, for many years, it has been due to their suggestions system and retrieving additional data about your music.
It is, as the article suggests, the price of convenience. It would be nice though if you had the option to turn off those conveniences if you don't want them.
There is a Vas Deferens between what Spotlight (for "Spotlight Suggestions") and iTunes does and what Windows 10 is doing. For one thing, Apple is straightforward about what is, and what is not, sent to Apple and/or Microsoft from Spotlight. And more importantly, Apple has a nice, simple GUI way to disable "Spotlight Suggestions".
As far as iTunes goes, if you are referring to the "Genius" feature, unless you turn on iTunes Match, you can disable the Genius feature (which I think is now called "Share details about your library with Apple"). If you are referring to retrieving CD Song Names and other info from the internet, you can disable that, too. Both are available as simple GUI checkboxes in iTunes' Preferences, along with the SWITCHABLE "Share details about your library with Apple", "Limit Ad Tracking", "Automatically download album artwork", "Always check for available downloads", "Sync playback information across devices", "Sync podcase subscriptions and settings", and "check for new software updates automatically".
So, compare that with what TFA says about Windows 10 still leaking data no-matter-what, and I think that any sensible person will agree that there is virtually no comparison between the two "mindsets".
No. It's not PEBKAC. Go fucking research. To stop Windows from talking, you need several privacy toggles, some of which won't toggle all the way. Then you need a registry workaround, because Windows is so about user friendliness that you need to modify DWORDS in their shitted up binary fuckfest. Then you need to disable like three services, and remove two binaries. Then you need a big hosts file, and that's becoming an issue because Windows will actually work around a hosts file in some cases, using a list of known IPs specifically to circumvent that. So for now, you can block them on your external firewall.
Eventually, you'll need a dedicated Application Firewall to block all that plus the mandatory Windows Update- you obviously don't want to allow Windows Update unless and until the Application Firewall has updated rules, because we can assume Microsoft will sidestep them weekly if allowed to. The advantage of that approach is that Microsoft can't beat it- it's not on their computer- and further, that you can eventually deep packet inspect and sanitize, allowing the use of Cortana with just the information YOU want to share with her.
Again, really, we need to get off Microcock. This level of drama- needing a second computer to use your first computer- is absolutely insane. But for those that want all those lesser applications that only have Windows support, this will be the option.
Windows 7 is looking even better. Staying put.
In windows 7 I disabled every call home excuse under the sun from UI, group policy, CLI, scheduler... Must have spent hours disabling various bullshit yet despite considerable efforts windows 7 still keeps making connections to settings.data.microsoft.com, telemetry.microsoft.com with nothing running, with updates set to manual while doing absolutely nothing but executing tcpdump. In the end I gave up and blackholed these sites in DNS to get it to stop.
To be clear I am not nor would I ever make the lame argument that windows 7 does it too as an excuse to give win10 a pass or cover to try and justify a fundamentally indefensible activity. Microsoft's squandering of their customers trust will ultimately only end badly for them. Wireshark is your friend... try it and see what all windows 7 is doing don't assume that Windows 7 is trustworthy.
--
"Finally, we will access, disclose and preserve personal data, including your content (such as the content of your emails, other private communications or files in private folders), when we have a good faith belief that doing so is necessary."