Slashdot Mirror
France: Windows 10 Collects 'Excessive Personal Data', Issues Microsoft With Formal Warning (betanews.com)
France's National Data Protection Commission (CNIL) has ordered Microsoft to "stop collecting excessive data and tracking browsing by users without consent," adding that Microsoft must comply with the French Data Protection Act within next three months. BetaNews reports: In addition to this, the chair of CNIL has notified Microsoft that it needs to take "satisfactory measures to ensure the security and confidentiality of user data." The notice comes after numerous complaints about Windows 10, and a series of investigations by French authorities which revealed a number of failings on Microsoft's part. Microsoft is accused of not only gathering excessive data about users, but also irrelevant data. The CNIL points to Windows 10's telemetry service which gathers information about the apps users have installed and how long each is used for. The complaint is that "these data are not necessary for the operation of the service."
It's perfectly fine that Microsoft spies on you because Windows 10 is free! Unlike evil GOOGLE, who reads your email to find people who do things they don't like!
God, I'm tired of refuting this stupid shill argument. Google's services are free. They tell you explicitly what they do with your data. Google does not have a monopoly on email, you're free to use many other providers. Since I'm concerned about my privacy, I only use gmail as a spam box.
Microsoft, on the other hand, has been evasive and deceptive about collecting peoples' data, completely silent about what they *do* with that information, and they collect all this info by leveraging their de facto monopoly on the desktop OS market (yes, you can use macOS or GNU, but billions of dollars of legacy Win32 programs and contracts are wrapped up on Microsoft's end, and so switching is not so simple for the privacy-concerned).
It's about time Microsoft were forced to remove their spyware. Once again Europe seems the only place where there's even a pretence of respecting an individuals rights.
Vive La France !
Apple Mail: using IMAP to my mail servers, pings 3 different apple servers while processing any new incoming email. NOWHERE in the chain does Apple need to be involved. Use any push service and they all much use Apple's control panel, and they all ping Apple servers right alongside whatever service you're using. Apple's official reason: "Ensure product is up to date and to cross reference any known security issues." That could just be done via a single update, say daily, completely unrelated to my personal accounts.
They're all doing it and all in some sort of shitty dog race to see who can be the biggest asshole of the lot.
Peoples browsing/application/usage habits are unique enough that any generated random ID will be just as good and can likely uniquely identify an individual with very high accuracy. You've swapped one identifier for another. Privacy through obscurity?
I doubt swapping a user identifier (first.last, userid, whatever...) for an advertising ID will work. After all, Facebook tracks you by generating a random ID for every visit to a page that has a like button. If you are signed in, that page visit is tracked by them. If you sign in later, that page visit is retroactively added to your history. If you create an account later, that random ID is then merged with your account.
Similarly, I almost never sign into any google stuff other than the infrequent email that for whatever reason I can't get on Thunderbird or my phone. Yet the ads I see when I do sign into gmail are for those same items I searched for days/weeks ago. Though with a phone, Google tracks your location too. I seem to remember there being a patent on location-based coupons being sent to user phones some time ago...
But they arn't.
Have you looked at the sheer amount of shovelware the average PC comes with? It's breathtaking. And a lot of it can be oddball stuff that you've never heard of before, by manufacturers you may well not have heard of. So you are forced to either reinstall the OS from scratch so you have a known clean system, or you have to vet every odd thing you find in your Programs and Features window, and even then hope that there is nothing else installed. And hopefully that's the end of it, which may not be the case. Lenovo has already been caught shoving insecure crapware into the UEFI bios that windows will automatically install whether you want it or not.
Unless you purchase the Enterprise version of Windows 10, you cannot disable telemetry. Period. You cannot disable updates. Period. Microsoft also has the power to extract any and all data from your machine, remotely, without needing your consent first. You flat out do not have control of your own computer anymore if you use Windows 10. And incidentally, some US gov't judge has declared that people no longer have an expectation of privacy when using their computers in their own home. You do the math there.
Of course they can.
There already are special versions of Windows available - there's the "K" ones, which are specially made for Korea (not sure what it entails), and there's the "N" ones which lack media player (earlier Europe ruling).
All Microsoft needs to do is modify the N build to exclude data collection or ask for user permission to collect data.
You can see these builds when you make a Windows 10 image and click Advanced.