Slashdot Mirror


Does Windows 10's Data Collection Trade Privacy For Microsoft's Security? (pcworld.com)

jader3rd shares an article from PC World arguing that Windows 10's data collection "trades your privacy for Microsoft's security." [Anonymized] usage data lets Microsoft beef up threat protection, says Rob Lefferts, Microsoft's director of program management for Windows Enterprise and Security. The information collected is used to improve various components in Windows Defender... For example, Windows Defender Application Guard for Microsoft Edge will put the Edge browser into a lightweight virtual machine to make it harder to break out of the browser and attack the operating system. With telemetry, Microsoft can see when infections get past Application Guard defenses and improve the security controls to reduce recurrences.

Microsoft also pulls signals from other areas of the Windows ecosystem, such as Active Directory, with information from the Windows 10 device to look for patterns that can indicate a problem like ransomware infections and other attacks. To detect those patterns, Microsoft needs access to technical data, such as what processes are consuming system resources, hardware diagnostics, and file-level information like which applications had which files open, Lefferts says. Taken together, the hardware information, application details, and device driver data can be used to identify parts of the operating system are exposed and should be isolated into virtual containers.

The article points out that unlike home users, enterprise users of Windows 10 can select a lower level of data-sharing, but argues that enterprises "need to think twice before turning off Windows telemetry to increase corporate privacy" because Windows Update won't work without information about whether previous updates succeeded or failed.

12 of 181 comments (clear)

  1. Crowdsourced Security by Anonymous Coward · · Score: 5, Insightful

    So we are all essentially honeypots for Microsoft Security. Good to know.

    1. Re:Crowdsourced Security by skids · · Score: 5, Insightful

      There is no such thing as a customer anymore, only unpaid beta testers.

    2. Re:Crowdsourced Security by Motherfucking+Shit · · Score: 4, Insightful

      You got it. After Microsoft fired all their QA testers, the SDLC concept for Windows 10 seems to be:

      • * Insiders are the alpha testers, but at least they volunteered for that.
      • * The general public are unwitting surveillance subjects and beta testers. Microsoft will Do The Needful to your computer whether you want it done or not. These mandatory patches can make your computer stop working, blue screen, lose data, or somehow fuck up previously perfectly working peripherals at any time. You can't decline a patch even if you know in advance it's going to fuck you up!
      • * Only Enterprise users get the finished product and they have to pay through the teeth for that privilege. Whatever patches didn't fuck up millions of consumer PCs may eventually make their way here.

      Add in the telemetry/spying and the only winning move is not to play.

      --
      "BSD: Free as in speech. Linux: Free as in beer. Windows 10: Free as in herpes." --Man On Pink Corner in #52607549.
    3. Re:Crowdsourced Security by butzwonker · · Score: 5, Insightful

      Actually, Windows 10 is less secure than any previous version of Windows, because it is almost impossible for any administrator to distinguish legitimate outbound network traffic from that of trojans and viruses. If Microsoft published a definitive list of all servers their software connects to without asking the user, explain what it does and what it transmits, and allowed you to block the traffic at will, then maybe it would be more secure. But right now, no way. It opens so many connections, it's impossible for anyone outside Microsoft to know what's really going on. (Don't forget that allegedly Microsoft-owned can also be hijacked, e.g. by direct attack on Microsoft's infrastructure or by DNS poisoning.)

  2. MS is completely wrong by melting_clock · · Score: 5, Insightful

    Telemetry should be able to be switched off entirely, on all Windows installs, so that our right to privacy in respected. Many of the apps that I use include telemetry but I only use those that provide an option to disable their telemetry, even though I will allow telemetry from some trusted apps. MS have repeated demonstrated that they cannot be trusted and it is scary that the released an entire OS that is actually spyware. In any case, it means that Windows 7 will be the last version I allow to be installed on any computer I own.

    If Windows update doesn't work without telemetry, that is a demonstration of MS incompetence and a very bad design decision. Linux is my main OS and it sends no telemetry for updates, while still managing to install updates. Those Linux updates also cover every piece of software I have installed in that OS, not just OS updates.

  3. Sounds like a pretext to me... by gweihir · · Score: 5, Insightful

    Because that could be done with a fairly small number of users, no need to spy on all of them. Anyways, while I would pay money for Win10, it would have to be the LTSB-version, because spying can be fully turned off and no new "features" all the time. As at the moment there seems to be no way to get LTSB as private user or small business, I will stay on Win7 for anything that needs Windows (Office, gaming) and try to move everything else to Linux, where I at least have control over what gets sent to the distro (nothing). In the worst case I will get a gaming-only PC with Win10 (no email, no browsing, no work) in a few years, jail Office in a no-network Win7 VM and do everything else on Linux.

    --
    Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
  4. Re:No, ABMers. No. For the last time. NO. by Anonymous Coward · · Score: 2, Insightful

    Helping the creators and coders of the OPERATING SYSTEM you use though the use of limited anonymous data it can only help.

    Until they happen upon some supposedly anonymous data that ends up connecting you personally to WrongThink. Of course, your "re-education" may be seen as a bug fix by those who decide what WrongThink is.

  5. The same PR talk crap that everyone else does. by XSportSeeker · · Score: 5, Insightful

    Stop skirting around the theme and get to the point: the fact that data collection is obligatory and there is no option to completely disable it is the problem itself. Data collection in Windows systems have always been there more or less, the problem is how it became something that cannot be disabled, which is bad specially for companies with sensitive data.

    I don't care if Microsoft can post updates faster and enhance security with it, the way they figure that out is the company's own responsibility. Stuff like that cannot be pinned down as something users should be responsible for, specially for OSs that are still essencially commercial in nature.

    This has always been the problem with data collection schemes, and it'll continue being regardless if Microsoft PR talks it'll improve the experience or not. It's the same crappy excuse that all companies that profit on data collection use. All of them say the exact same thing. So I couldn't care less on what Microsoft PR declares they'll do with it, it doesn't diminish the disgust in any way. Privacy has always been a matter of principle, not on what some company says it'll do after the fact.

    If they want to go that route, fine, keep sending data back and making it harder and harder for clients to dial back on that shit. But don't expect users to change their views if they are not willing to back down. Windows 10 will keep having and deserving the image of being an OS that spy on it's users. And that's exactly what it does. It's extracting data from people's desktop, doing it's best to make that invisible, and taking away options to disable it.

    Much like they forced the Windows 10 update down lots of people's throats using some very dirty tactics, there's no excuse for what they are doing with ads and with stealing user data. I don't care if they say it's anonymized or whatever, I don't want my desktop sending anything back, period. People who are against this trend don't want to hear your promises on what you'll do with the data, we don't care. We're going for alternative routes that are not opting for data collection. That's it.

  6. Re:Subscription model by fahrbot-bot · · Score: 3, Insightful

    If you want to continue to use Windows, they either make their money off your data, or a subscription fee. It's really that simple.

    You sure it's one or the other? I'm betting MS will collect your subscription fee *and* money off your data.

    --
    It must have been something you assimilated. . . .
  7. Re:No, ABMers. No. For the last time. NO. by Anonymous Coward · · Score: 2, Insightful

    Oh stop whining, shill. If Microsoft wants my data to help their business, then they can fucking PAY ME for it.

    Privacy *is* security. Without privacy, you cannot have security because they are one and the same.

  8. Re:No, ABMers. No. For the last time. NO. by Opportunist · · Score: 4, Insightful

    Never before has "those that give up freedom for security deserve neither" has been truer, and more blatantly obvious. We gave up our privacy and what did we get in return? An OS where every update has become a gamble whether it's going to boot up after again or whether we have a brick now. An OS that is STILL every bit as insecure as every predecessor.

    --
    We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
  9. Re: No, ABMers. No. For the last time. NO. by UnknowingFool · · Score: 3, Insightful

    False dichotomy: Your premise is that Trump won't start a war with Russia. Someone who is so thin skinned as to be butt-hurt by SNL is more likely to start a war over trivial reasons.

    --
    Well, there's spam egg sausage and spam, that's not got much spam in it.