Slashdot Mirror


Security Analyst Concludes Windows 10 Enterprise 'Tracks Too Much' (xato.net)

A viral Twitter rant about Windows 10 Enterprise supposedly ignoring users' privacy settings has since been clarified. "I made mistakes on my original testing and therefore saw more connections than I should have," writes IT security analyst Mark Burnett, "including some to Google ads." But his qualified results -- quoted below -- are still critical of Microsoft:
  • You can cut back even more using the Windows Restricted Traffic Limited Functionality Baseline but break many things.
  • Settings can be set wrong if you aren't paying attention. Also, settings are not consistent and can be confusing to beginners.
  • You are opted-in to just about everything by default and have to set hundreds of settings to opt out, even on an Enterprise Windows system. Sometimes multiple settings for the same feature. Most Microsoft documentation discourages opting out and warns of a less optimal experience... But you can't completely opt-out. Windows still tracks too much.
  • Home and Professional users are much worse off due to limitations of some settings and lack of an IT staff... I'm not saying ditch Windows. I'm saying let's fix this. If we can't fix it, then we ditch Windows.

10 of 284 comments (clear)

  1. Defective by design? by El+Cubano · · Score: 5, Insightful

    You are opted-in to just about everything by default and have to set hundreds of settings to opt out, even on an Enterprise Windows system. Sometimes multiple settings for the same feature. Most Microsoft documentation discourages opting out and warns of a less optimal experience... But you can't completely opt-out. Windows still tracks too much.

    Correct me if I'm wrong, but isn't this essentially the definition of "defective by design?"

    The increasingly hostile and draconian moves by Microsoft simply serve to prove that the majority of Microsoft customers are in a co-dependent relationship with Microsoft: afraid that no matter how bad things are with Microsoft, they will be worse without Microsoft. It must suck to live like that.

    I know, I know. Some people cannot ditch Microsoft, but most people can and it would cost them only marginally more effort (and probably less in many cases) than they expend dealing with all the crap Microsoft is throwing at their customers these days.

    1. Re: Defective by design? by teg · · Score: 4, Insightful

      Most people don't give a crap about use privacy.

      Proof: just a small uprising (mostly online by the same people who complain) when net neutrality and privacy rules were obliterated

      More proof:

      All of which have a business idea of knowing as much as possible about you, so they can monetize you effectively.

    2. Re: Defective by design? by Anonymous Coward · · Score: 2, Insightful

      Whats worse? The company that gives you something free and takes your personal info in return or the company that charges you and still takes your personal information?

      Hint: Windows ain't free and you dont have to use android to use google products.

  2. You can't fix this. by Anonymous Coward · · Score: 5, Insightful

    The problem isn't Windows. The problem isn't even Microsoft.

    The problem is that we don't have strict laws governing the protection of user data. There needs to be serious and utter consequences for pulling this sort of shit. The sort of consequences that would make any shareholder board go "holy shit, let's not fucking do that". Until that happens, absolutely nothing is going to change. You might be able to pressure Microsoft into releasing a patch or two that appears to offer some sort of reprieve, but then they'll get back to doing exactly what they've been doing before, and probably torque down the screws just a little bit tighter while they're at it.

    Unfortunately, with the USA now gunning for net neutrality, I doubt anything like this would ever happen. Corporations have too much money and nobody gives a shit about the user. As long as the users keep paying for stuff (because they "have no choice" or don't want to slightly inconvenience themselves), nothing will ever change.

    So you better get used to it, because Windows 10 is just the start.

    1. Re:You can't fix this. by Anonymous Coward · · Score: 2, Insightful

      >What the security analyst forgets to mention is that the telemetry data sent to MS is anonymized.

      Yeah I work at a place where I sometimes get "anonymized" data. Let me tell you I can still easily find out who it was about.

      >I don't know how you would "protect" user data any better than that.

      Don't send it in the first place. There's no law in the universe that says that you have to send it. Just stop sending it.

      >A lot of new vehicles today upload data to the manufacturer and this data does include enough information to identify the owner.

      And that has to stop.

      >If Windows was really as bad as the OS political activists say MS would never have turned into one of the most successful companies on the planet. There has never been anything stopping someone from creating a platform to compete with MS.

      What? Halloween documents etc. Microsoft has been colluding with OEMs to stop exactly that. Also, they break stuff on purpose. What are you talking about? Some parallel universe where Microsoft is not an asshole?

      >All the early potential competition willingly sold their technologies to MS and took the money and ran.

      Who?

      >The applications that try to compete with MS Office suite are buggy clones that the Linux faithful promote as "good enough".

      True. But that's in part because the specifications by Microsoft are incomplete. At least by now they were forced to release them - earlier it was *all* reverse engineering.

      >And users do not run OS's they run applications. In the business world a competent IT can configure a stable and safe OS platform. Linux is not magically safe or stable by default and requires someone knowledgeable to configure the OS.

      I agree.

  3. Better Solutioin by Murdoch5 · · Score: 5, Insightful

    It's call Linux and it's vastly superior in almost every way to Windows. Don't worry about Windows 10, just switch to the worlds best Desktop Operating system.

  4. We? by PinkyGigglebrain · · Score: 4, Insightful

    " If we can't fix it, then we ditch Windows."

    "We" can't fix MS Windows, only Microsoft can.

    Any one think they will?

  5. Ditch proprietary software. Not just Windows. by jbn-o · · Score: 3, Insightful

    I'm not saying ditch Windows. I'm saying let's fix this. If we can't fix it, then we ditch Windows.

    You should be saying ditch proprietary software precisely because nobody but the proprietor (the very party you can't trust) is legally allowed to fix this (where the word "fix" is a fix from the user's perspective, of course, since the software already works as the proprietor has programmed it to work). That's what proprietary software means and that power over the user is why proprietors distribute their software without respecting a user's freedoms to run, share, and modify the software at any time for any reason. The system's behavior can change at any time, so even if someone monitors what a particular variant of a non-free, user-subjugating OS does now that can change later. Perhaps the software only does something bad under conditions one doesn't typically reach, or maybe an update changes how the software behaves. Furthermore, said software updates don't have to come through an updating program which seeks a user's approval before installation (such as Windows Updates).

    The GNU Project has no shortage of proprietary Microsoft malware and that includes universal backdoors, snooping on user's activities, ignoring user's settings on so-called 'privacy' settings, and sending identifiable data to Microsoft and third parties ("even if a user turns off its Bing search and Cortana features, and activates the privacy-protection settings").

  6. Re:BS by davester666 · · Score: 5, Insightful

    While the guy might not be a world-class IT specialist, he does report the truth. Window 10 does track too much, and you can't even opt out of it.

    Unfortunately, the last sentence of the summary is delusional. There is only one company that can "fix" it, and they refuse to.

    --
    Sleep your way to a whiter smile...date a dentist!
  7. Re: Will you finally get to work already? by Anonymous Coward · · Score: 2, Insightful

    I've found the opposite to be true. Linux ships with 99% of the drivers you'll ever need, on Windows part of the install is traditionally using another machine to search vendor sites for drivers. Also many things that are trivially simple on Linux, like channel bonding, are hard or impossible on Windows depending on vendor and hardware support.