Slashdot Mirror
Microsoft To Enhance User Privacy Controls In Upcoming Windows 10 Update (hothardware.com)
MojoKid writes: When Microsoft first launched Windows 10, it was generally well-received but also came saddled with a number of privacy concerns. It has taken quite a while for Microsoft to respond to these concerns in a meaningful way, but the company is finally proving that it's taking things seriously by detailing some enhanced privacy features coming to a future Windows 10 build. Microsoft is launching what it calls a (web-based) privacy dashboard, which lets you configure anything and everything about information that might be sent to back to the mothership. You can turn all tracking off, or pick and choose, if certain criteria don't concern you too much, like location or health activity, for example. Also, for fresh installs, you'll be given more specific privacy options so that you can feel confident from the get-go about the information you're sending Redmond's way. If you do decide to send any information Microsoft's way, the company promises that it won't use your information for the sake of targeted advertising.
If I'm using a web based console to change my local OS privacy settings, I'm guessing I'm telling some server that's already collecting the info just not to use the info it's already collecting.
1. Transgress 100 meters
2. Say you're sorry
3. Backtrack 75 meters.
4. Profit from more analytics gold than you know what to do with.
This is the same way horrific laws are passed. First they propose something completely absurd, then "compromise" with something slightly less absurd.
Eat shit Microsoft.
but the company is finally proving that it's taking things seriously
Not quite. Proof that they are taking things seriously would be disabling all the telemetry, phoning home, adware, crapware, etc., and making it strictly opt-in.
For example, the first time you hit the start menu, it can show you a balloon: "Would you like to see customized content here? This would require sending blah-blah-blah to Microsoft." Then two clearly labeled buttons. One for "yes, phone home and show me ads" and another for "no, and don't show me this ever again." They could something similar in other places where they think there might be a benefit to the users.
Microsoft is launching what it calls a (web-based) privacy dashboard, which lets you configure anything and everything about information that might be sent to back to the mothership. You can turn all tracking off...
If it is on by default and the user has to log in to a Microsoft website to control/configure it, then Microsoft is demonstrating that they are willing to do only the bare minimum to appease the critics. How much do you want to bet that in order to even access the dashboard the user will have to have a Live account (giving MS even more of their personal information). The screenshot in the article doesn't look web-based to me, so perhaps a Live account won't be required, but either way the big problem is that they opt you in (likely against your will) and only if you are sufficiently determined can you opt out.
Taking things seriously, indeed!
"Microsoft is launching what it calls a (web-based) privacy dashboard..."
Why does it have to be web-based? Was it too fucking hard to build it into the Control Panel or Settings app?
This sounds like horseshit to me, and I've heard enough horseshit in my life to be able to reliably identify it when I hear it.
Just cruising through this digital world at 33 1/3 rpm...
This sounds like a good move. While they're giving users some control back, can we get back the ability to control when updates run?
From TFS: "When Microsoft first launched Windows 10, it was generally well-received"
By whom? I don't recall much in the way of rave reviews except from paid promotors. I do recall quite a few people saying they'll stay on Windows 7, thank you.
I "upgraded" to Win10 because I was about to click on something when the "psst! Hey bud, wanna upgrade?" window appeared. It started upgrading and I was afraid to stop it.
My opinions? The uptime is less than a week. It reboots whenever it wants without asking. Working on something, lunchtime, close the laptop, come back an hour later? Oh hey, fucking machine rebooted. Not to mention some of these updates take a good 20 minutes after the reboot to finally come up.
The spying pisses me off. I disable most of it, but after every "upgrade" they turn it all back on.
And it's flakey. With Win8.1 this laptop worked fine for months on end, only rebooting when I told it to. With Win10 after 4-5 days I'll open my laptop to find it won't wake up and I have to power cycle it.
IMHO, any OS that reboots without asking is a POS nobody should support. Microsoft doesn't know what I'm doing when the laptop is closed, how the hell do they feel entitled to reboot my machine without asking?
.
At this point I am skeptical that this system actually prevents the collection of data from Windows 10 systems.
But presuming this nifty new privacy system works, what is to stop Microsoft from suddenly saying that they are now removing privacy controls?
Is this just an empty promise on Microsoft's part to get everyone to move to Windows 10? What sort of assurances are in place that guarantee the privacy controls will continue to work in future upgradtes and releases?
You're right in that the headline text is filled with lies (typical of the corporate tech press and their corporate repeater friends like /.) and things like this should all be opt-in by default. But without software freedom, even those changes would be necessary but insufficient to ensure user's privacy because there's no way to check to make sure the software actually behaves in accordance with the settings.
Microsoft's record shows this to be the case. The GNU Project's surveillance section of the Microsoft malware page does a good job of collecting stories about how this has already failed Windows users who thought they had tweaked the settings in just the right way to get Windows 10 to not "phone home" or report details of what happened outside the machine. These settings failed to do that job because the software was designed to fail in this way.
Much to the apparent chagrin of moderators in the recent Microsoft thread about letting Windows 10 users opt-out of automatic updates who marked down posts about software freedom, the real answer remains the same here—no software freedom means no real control over one's computer and that includes no privacy for the user. Network dumps reveal some of what the software does but not all; it's very easy for programmers to encrypt data they want to send somewhere and/or delay sending data in an attempt to not show up when the system's network output is being watched.
Microsoft's promises (which boil down to "Trust us this time! Really!") must be interpreted in the context of taking the word of a liar whose secret software should now be trusted. That makes no sense to do, and the same logic applies to all non-free/user-subjugating software. No matter how much technical skill you have you have to assume proprietary software is doing what you don't want it to do because you don't have the permission to check out what it's actually doing, change it to make it obey you, or help your community by sharing copies of improved software.
Digital Citizen
Remember when everyone was complaining about Microsoft's security issues? Microsoft actually did an admirable job cleaning up that leaky ship.
This is true. And while I have no evidence to support it, I suspect that the whole telemetry stuff is meant to give them information about how the system behaves in various situations for engineering purposes, not ads. This impression is based in part on the fairly decent level of privacy in hotmail/outlook.com compared to other free mail providers like gmail or yahoo where they milk your inbox to tweak ads.
Firefox has the same kind of telemetry features. Chrome too. And pretty much everything else. But when it comes from Microsoft people freak out first, ask questions later.
This being said, once they started to push hard to have people use "Microsoft accounts" instead of local accounts to login on Windows it became obvious that something was changing so maybe they are truly a bunch of fuckers nowadays.
lucm, indeed.
Firefox has the same kind of telemetry features. Chrome too. And pretty much everything else. But when it comes from Microsoft people freak out first, ask questions later.
Maybe that's because Firefox and Chrome don't try to trick and/or force you into upgrading. Ever.
Maybe because the "X" or "Close" control in Firefox and Chrome never magically change what they do to mean "yes" instead of "no".
Just cruising through this digital world at 33 1/3 rpm...
From TFA:
If you do decide to send any and all information Microsoft's way, the company promises that it won't use any of your information for the sake of targeted advertising.
Meanwhile, on the screenshot right above this line is the option "Relevant Ads".
General Relativity: Space-time tells matter where to go; Matter tells space-time what shape to be.
Your point is entirely fair, but it's also reassuring that we've now seen a couple of announcements in as many days, one on automatic updates and the second on privacy, where Microsoft seem to be backtracking at all. It might not be enough to fix the problems or satisfy the critics, but it does suggest that they aren't confident they can just continue with their previous aggressive Windows 10 strategy and be successful.
If you disagree, post your argument. (-1, Overrated) isn't your personal censorship tool for views you don't like.
Doesn't everyone get their Win10 cousins to use 'Spybot Anti-Beacon'? Do we think the authors of that won't keep up with any new challenges?
This seems to be another article trying to put Microsoft in a better light on privacy than reality.
1) What is the option for Diagnostics other than "Full"? If it is "Basic" or "Enhanced" that is still quite a lot of data sent to Microsoft (configuration data including the network which includes WiFi and network connections and IP addresses, software and hardware installed, and performance and reliability data including usage information). Even the "security" level that is available in Enterprise and Education includes data from the Malicious Software Removal Tool which can include confidential data.
I won't be happy with Windows 10 privacy until there is an "Off" option or "Ask before sending data" option and no data is sent without consent. If the Malicious Software Removal Tool asks before sending data and shows me what it is going to send so I can verify that it isn't confidential data before sending, that is fine. As long as I can just say "No" if I don't have time to verify it at the time also.
It looks like one can disable sample submission for Windows Defender (Settings > Update & security > Windows Defender > Sample submission), but not for the Malicious Software Removal Tool.
2) As stated above, why is it Web-based? Does it require a live account?
3) Is there a simple way to disable all of Cortana's data gathering? Cortana is a privacy disaster:
https://privacy.microsoft.com/...
4) Are they updating the Windows 10 terms of service/privacy policy to specify that data is only sent with consent? They probably can't even do that with the current Diagnostic options. The terms of service for Windows 10 are a privacy nightmare compared to Windows 7.
Is it to much to ask for a simple option in privacy that limits information sent to Microsoft to license key verification? Microsoft would also get my public IP from Windows Update in their server logs. Anything more than that I want to have control over.
This message is encrypted with Quad ROT-13 to protect the author's copyright under the DMCA.
for engineering purposes, not ads
While the engineering purposes are valid I'm fairly sure that Microsoft are happily exploiting the commercial value of that data too.
They're pulling far too fucking much data for it to be purely engineering anyway.
Arrange all the privacy settings in a single, coherent arrangement, not scattered through different panels and advanced dialogs. Summarize what the data is being collected and what it may be used for. Perhaps even have a single button that says "I want to remain private" and clicking it sets everything to secure. Don't try and bury the settings. Don't throw the switches wide open by default. Inform the user, ask the user and do what the user says. And for new installations, explicitly ask the user what settings they want.
According to the Ghacks article, for "diagnostics" the choice is between "full data" and "less data" with no explanation of what it means.
Microsoft furthermore announced that it will reduce the data collection of the basic level. Myerson did not reveal what Microsoft intents to change though in this regard.
Also, the "web-like" interface is for controlling the Microsoft account settings which are, unsurprisingly, on the web.
All in all, a much more informative reporting.