Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×
Windows Cloud Microsoft Operating Systems Privacy

Windows 10's Privacy Policy: the New Normal? 515

An anonymous reader writes: The launch of Windows 10 brought a lot of users kicking and screaming to the "connected desktop." Its benefits come with tradeoffs: "the online service providers can track which devices are making which requests, which devices are near which Wi-Fi networks, and feasibly might be able to track how devices move around. The service providers will all claim that the data is anonymized, and that no persistent tracking is performed... but it almost certainly could be." There are non-trivial privacy concerns, particularly for default settings.

According to Peter Bright, for better or worse this is the new normal for mainstream operating systems. We're going to have to either get used to it, or get used to fighting with settings to turn it all off. "The days of mainstream operating systems that don't integrate cloud services, that don't exploit machine learning and big data, that don't let developers know which features are used and what problems occur, are behind us, and they're not coming back. This may cost us some amount of privacy, but we'll tend to get something in return: software that can do more things and that works better."
This discussion has been archived. No new comments can be posted.

Windows 10's Privacy Policy: the New Normal?

Comments Filter:
  • We're going to have to either get used to it, or get used to fighting with settings to turn it all off. "The days of mainstream operating systems that don't integrate cloud services, that don't exploit machine learning and big data, that don't let developers know which features are used and what problems occur, are behind us, and they're not coming back.

    I, for one, welcome my new overlords.

    • by mrsquid0 ( 1335303 ) on Saturday August 08, 2015 @08:17PM (#50277185) Homepage

      They already know that.

    • by davester666 ( 731373 ) on Saturday August 08, 2015 @09:39PM (#50277523) Journal

      Except it's not about making the software better. It's about making more money by selling the information you get from this 'feedback'.

      This is happening everywhere you have software running connected to the internet. Vehicles, IoT, mobile apps, desktop software, web apps.

      It's the idea that you didn't pay them enough up front, that they deserve an ongoing revenue stream at long as that license is being used and there are no limits as to what they can do to get that money.

    • This may cost us some amount of privacy, but we'll tend to get something in return: software that can do more things and that works better."

      Bullshit. There had better be a way to turn ALL of it OFF, permanently. I don't give a fuck if you have to hack the shit out of the Registry to do it, either.

      • by mysidia ( 191772 ) on Saturday August 08, 2015 @10:14PM (#50277647)

        I don't give a fuck if you have to hack the shit out of the Registry to do it, either.

        That's a constant battle too. Automatic updates will be mandatory for Windows 10 users, except in Enterprise environments with Windows Enterprise edition and WSUS, etc. You used to be able to disable Google Chrome browser auto-updating with a registry tweak, then Google came back and started changing Chrome so Group Policy settings in the registry will not be honored unless your computer is actually joined to a domain, and even then the policy must be configured through a GPO that the group policy clients knows about, otherwise it will be ignored..

        Same with other settings such as app-autoinstalls. Also, If you want to re-enable Java, it seems as if they intentionally made it difficult to automate such things.

      • Easy to accomplish with a network router that is not completely dumb. A bit more complicated when travelling, but hey a wifi-wifi repeater/router will probably do the trick.

    • Just turn it off ... (Score:5, Interesting)

      by golodh ( 893453 ) on Sunday August 09, 2015 @05:33AM (#50278735)
      @fizzer06

      Or have it turned off for you.

      Seriously. The fact that this *can* be turned off in the enterprise version shows that there is nothing in Windows' archictecture that requires it.

      As long as each and every MS Windows installation makes one administrator when one installs it, one can turn all those things off (or de-install them).

      When I say "one", I don't mean the "average user" of course. It would take 'em (myself included) months of intense study to figure out how to do that (and they won't have the time, the interest, the aptitude, or the stamina for that). The good news is that they probably won't have to.

      For computer-literate people there will probably be utilities / batch files to take care of Microsoft's pre-installed "tattleware" for you.

      For complete end-users I also foresee a market for something like an "add-on control panel" that shows every (known) piece of "tattleware" on MS Windows and allows you to switch it off (or even de-install it). A seperate piece of software that works as a Windows "service" can ensure that this user "policy" is enforced every time Windows boots plus, say, at 2-hr intervals.

    • by Lumpy ( 12016 )

      Maybe for you at home. At work the IT department made several new firewall policies that completely neuters all of windows 10 information gathering and sharing.

      I am all for it as it s finally forcing people and companies to pay attention to security and that information leaks can be built into your OS.

  • by account_deleted ( 4530225 ) on Saturday August 08, 2015 @08:09PM (#50277169)
    Comment removed based on user account deletion
    • If people don't bite the 'free OS" apple, then they don't need to worry. Slow adoption of Windows 10, even though free, will force MS to offer more configuration and privacy options. I see only downsides to changing from Windows 7 Pro or Ultimate currently. Maybe that will change in the future, but considering the new "free OS" business model, MS is going to be trying to get money out of everyone by other means.

  • Citation needed.
    Is, in principle this possible - sure.

    I would suggest based on past history that you should expect this extra data you have opted to share to leak in ways big and small, from the individual leak, to wholesale compromise of companies databases.
    You should expect inadequately tested rolled out drivers to brick certain device configurations until someone skilled can fix it.
    You should expect the 'automated' things to be increasingly harder to fix if that automatic service goes wrong.
    Increased opa

  • by Anonymous Coward on Saturday August 08, 2015 @08:26PM (#50277217)

    Cortana cannot be disabled without breaking Windows. Yes, you can turn all of the settings off, but the process still runs in the background and auto restarts when killed. I even went into the windows group policy settings and forbade Cortana, and it still ran as a process in the background. So, I tried to use powershell to remove it since it was installed as a "modern app". I removed every trace of modern app, including the Windows store, rebooted, Cortana was still there, running the background, consuming 0%-0.1% cpu and using ~35MB of RAM. So, I found out where Cortana was on the file system, killed the process, and renamed the folder, so that it would not be found. And that did work, Cortana never restarted. The only problem was Windows Update stopped working! Yes, not being able to start Cortana prevents Windows 10 from installing updates. I had to run sfc (which fixed Cortana) to install updates, and now the Cortana process is back. Also, when I renamed the Cortana install folder, the search feature of the start menu stopped working completely (no type to search). Magically started working once Cortana was back. I can't believe how deep this thing has its tentacles into the OS, it really is disturbing.

    • by seven of five ( 578993 ) on Saturday August 08, 2015 @11:21PM (#50277847)
      "I'm sorry, Dave, I'm afraid I can't do that..."
    • by AmiMoJo ( 196126 ) on Sunday August 09, 2015 @05:24AM (#50278725) Homepage Journal

      I installed Windows 10 in a VM, turned all the privacy settings on during the install process, and then checked that Cortana was disabled. It was, and as proof, here is a list of running tasks:

      http://imgur.com/Tzy6e6Z [imgur.com]
      http://imgur.com/Tfr8pRx [imgur.com]

      Search via the start menu works fine. Wireshark shows that data is not being leaked when I search (web search was turned off) and I don't see anything else flowing back to Microsoft, except for periodic Windows Update checks.

      Try searching for "cortana" via the start menu, and then flip the first option in the list. That disables the Cortana process for me.

  • Those that blast Windows 10 as the anti christ and how they are never going to use ... all from the comfort of their Google Chrome browser on their Google Android phones..

    This is not a Android bash but just pointing out the obvious. The real question is the answer to this. As much as many here who are libertarian do you think it is time for laws to prohibit this? The free market appearently is too small to care about this.

    Let's say Putin or the next Hitler comes and wants to spy on political opponents? Well

    • Re: (Score:2, Informative)

      by 0123456 ( 636235 )

      As much as many here who are libertarian do you think it is time for laws to prohibit this? The free market appearently is too small to care about this.

      You don't need laws. You just need to eliminate software copyright, so there's actually a free market in software.

      If anyone could hack the spyware out of Windows and sell their own version, this wouldn't be happening.

      • I think what I meant was should government get involved forcing companies to stop it. Realistically how many people would do this? Shoot 96% do not know what a root is on a phone.

        Yes it would mean Android and 10 won't be free anymore but where do we stop?

        Windows is not the darn enemy thanks to Google and I am sure Apple does the same thing. How do you know Chrome doesn't do the same even if you do not open the browser but have Google Update service on?

  • by pubwvj ( 1045960 ) on Saturday August 08, 2015 @08:54PM (#50277357)

    One more reason not to have windows in your home or business...

    • Re: (Score:2, Informative)

      by Mashiki ( 184564 )

      Unless of course you're a gamer, in which case using a Windows OS is pretty much in the bag still. Most people don't want to screw around with nix to get up and running, and while SteamOS fixes some of it, long way to go.

  • that's the year of Linux on the desktop.
  • +5, Flamebait (Score:3, Insightful)

    by c4757p ( 4213341 ) on Saturday August 08, 2015 @08:58PM (#50277369)

    Haha, this is the biggest "Linux!!!!" flamebait article... Anyway, yeah, it seems fairly obvious. The trend for years has been a move back to server-side processing and services that are very heavy on collected user data.

    The thing is, it's not just Evul Micro$oft spying on you with a telescope - the spying comes wrapped in services that people actually want. For many people it's a tradeoff - they know they're giving their data away, but they're willing to give up a bit of privacy for the convenience that comes with the service. I find that the average person doesn't usually have the same reverence for privacy as the average Slashdotter.

    It's already been said, and it'll be said a hundred more times before we let this article go, but yes, Linux and FOSS in general are the answer. We've been going back and forth about the Year of the Linux Desktop, but really, this is where FOSS shines: as a relatively minority choice for enthusiasts. Let people make their privacy tradeoff choice in peace, it's a perfectly valid choice to make if one most of us (myself included) find highly distasteful, and the rest of us can work on and use FOSS to our heart's content.

    Coming from the hardware side too, as more of an EE guy than a programmer: OSHW is getting more and more possible. Powerful hardware that is amenable to use in open designs is becoming more available every year. I can jump over to DigiKey [digikey.com] and buy an ARM chip that is capable of running Linux and has more computing power than some of my first desktop computers for $20. The chip designs themselves tend not to be open, but they do tend to be quite well documented - the high end is almost always closed and subject to NDA, but there is little pressure to move that line backwards, and as the high end moves forward, the devices available to the OSHW developer get better and better.

    I don't think this is the end of computing privacy, I think this is just the logical conclusion of computers (read: the computers in your pocket!) becoming popular, and starting to work the way Average Joe expects them to. Enthusiasts will always be here, and I think this is the start of a new era for them.

  • Has anyone created a list of all the things one needs to do to change Windows 10 settings towards privacy?

    (I know about the Reddit thread, which is full of fail because it tells you to use group policy editor, which does not exist in Home, leaves out items that are mentioned later in the comments, and doesn't describe exactly what each step does.)

    • by rudy_wayne ( 414635 ) on Saturday August 08, 2015 @09:41PM (#50277535)

      For a start, block these in your router, or hosts file:

      http://pastebin.com/ULJjVM7w [pastebin.com]

              vortex.data.microsoft.com
              vortex-win.data.microsoft.com
              telecommand.telemetry.microsoft.com
              telecommand.telemetry.microsoft.com.nsatc.net
              oca.telemetry.microsoft.com
              oca.telemetry.microsoft.com.nsatc.net
              sqm.telemetry.microsoft.com
              sqm.telemetry.microsoft.com.nsatc.net
              watson.telemetry.microsoft.com
              watson.telemetry.microsoft.com.nsatc.net
              redir.metaservices.microsoft.com
              choice.microsoft.com
              choice.microsoft.com.nsatc.net
              df.telemetry.microsoft.com
              reports.wes.df.telemetry.microsoft.com
              wes.df.telemetry.microsoft.com
              services.wes.df.telemetry.microsoft.com
              sqm.df.telemetry.microsoft.com
              telemetry.microsoft.com
              watson.ppe.telemetry.microsoft.com
              telemetry.appex.bing.net
              telemetry.urs.microsoft.com
              telemetry.appex.bing.net:443
              settings-sandbox.data.microsoft.com
              vortex-sandbox.data.microsoft.com
              survey.watson.microsoft.com
              watson.live.com
              watson.microsoft.com
              statsfe2.ws.microsoft.com
              corpext.msitadfs.glbdns2.microsoft.com
              compatexchange.cloudapp.net
              cs1.wpc.v0cdn.net
              a-0001.a-msedge.net
              statsfe2.update.microsoft.com.akadns.net
              sls.update.microsoft.com.akadns.net
              fe2.update.microsoft.com.akadns.net
              diagnostics.support.microsoft.com
              corp.sts.microsoft.com
              statsfe1.ws.microsoft.com
              pre.footprintpredict.com
              i1.services.social.microsoft.com
              i1.services.social.microsoft.com.nsatc.net
              feedback.windows.com
              feedback.microsoft-hohm.com
              feedback.search.microsoft.com
              rad.msn.com
              preview.msn.com
              ad.doubleclick.net
              ads.msn.com
              ads1.msads.net
              ads1.msn.com
              a.ads1.msn.com
              a.ads2.msn.com
              adnexus.net
              adnxs.com
              az361816.vo.msecnd.net
              az512334.vo.msecnd.net

  • by Pikoro ( 844299 ) <init&init,sh> on Saturday August 08, 2015 @09:16PM (#50277437) Homepage Journal

    Blocking these domains will make your version of Windows 10 "Unconnected". To Microsoft at least.

    dns.msftncsi.com
    ipv6.msftncsi.com
    win10.ipv6.microsoft.com
    ipv6.msftncsi.com.edgesuite.net
    a978.i6g1.akamai.net
    win10.ipv6.microsoft.com.nsatc.net
    en-us.appex-rf.msn.com
    v10.vortex-win.data.microsoft.com
    client.wns.windows.com
    wildcard.appex-rf.msn.com.edgesuite.net
    v10.vortex-win.data.metron.life.com.nsatc.net
    wns.notify.windows.com.akadns.net
    americas2.notify.windows.com.akadns.net
    travel.tile.appex.bing.com
    www.bing.com
    any.edge.bing.com
    fe3.delivery.mp.microsoft.com
    fe3.delivery.dsp.mp.microsoft.com.nsatc.net
    ssw.live.com
    ssw.live.com.nsatc.net
    login.live.com
    login.live.com.nsatc.net
    directory.services.live.com
    directory.services.live.com.akadns.net
    bl3302.storage.live.com
    skyapi.live.net
    bl3302geo.storage.dkyprod.akadns.net
    skyapi.skyprod.akadns.net
    skydrive.wns.windows.com
    register.mesh.com
    BN1WNS2011508.wns.windows.com
    settings-win.data.microsoft.com
    settings.data.glbdns2.microsoft.com
    OneSettings-bn2.metron.live.com.nsatc.net
    watson.telemetry.microsoft.com
    watson.telemetry.microsoft.com.nsatc.net

    http://init.sh/?p=236 [init.sh]

  • by walterbyrd ( 182728 ) on Saturday August 08, 2015 @09:24PM (#50277469)

    Apple, and Microsoft, have always been just as bad.

  • > If you're taking up Microsoft on its offer of a free upgrade to Windows 10, you should know that the new operating system has a feature, called Wi-Fi Sense, that automatically shares your Wi-Fi passwords with others.

    https://www.yahoo.com/tech/s/windows-10-may-share-wi-164057617.html

  • > It’s your own fault if you don’t know that Windows 10 is spying on you. That’s what people always say when users fail to read through a company’s terms of service document, right?

    http://bgr.com/2015/07/31/windows-10-upgrade-spying-how-to-opt-out/

  • by nehumanuscrede ( 624750 ) on Saturday August 08, 2015 @10:03PM (#50277609)

    If you must use Windows 10, ( believe it or not there is some software that is still Windows only, or would cost a fortune to purchase new licences for another OS, if it's even an option ) just air gap the damn thing.

    Load it, patch it to current, get all your software running on it, then deny it internet access completely. You can air gap it, but then you'll need to manually transfer your data over to another non Win 10 system. Use it as a workstation, not an all in one solution.

    Or ( what I would do ) is simply put a route map or ACL on the router that explicitly denies access for that machine off the local network or Vlan. Hell, put it in its own VLAN and block the whole damn thing if you have to. Personally, I would disallow any talking between it and any other device on the local network outside of a network connected NAS drive so you can still transfer files. If you gotta get your game on I suppose you could allow very specific connections to very specific addresses, but block everything else.

    Use a Windows box for specialized applications, use anything but to connect to the internet.

    • This is exactly what I do on my MacBook Pro with Windows7 currently running on Boot Camp.

      I installed and updated Windows7 once 4 years ago, turned off networking and have never run email or internet or the network again. Win7 has continued to run just fine without "Microsoft Updates."

  • Just (Score:5, Insightful)

    by rossdee ( 243626 ) on Saturday August 08, 2015 @10:49PM (#50277759)

    Stick with 7

  • More things? (Score:4, Informative)

    by Dunbal ( 464142 ) * on Saturday August 08, 2015 @11:31PM (#50277877)
    Which "more things" can Windows 10 do that say Windows 8 or Windows 7 can't? Apart from spy on you I mean.
  • I think I speak for all of us when I say, "Fuck this shit".

    I'll stick with WIn 7 until my PC dies, and then I'll probably move to some popular Linux distro.
  • by taustin ( 171655 ) on Sunday August 09, 2015 @12:14AM (#50277993) Homepage Journal

    As an IT professional, the only way I could use this would be if Microsoft provided me with appropriate documentation on their PCI compliance status regarding all this information they're collecting, which they will never do, since those documents would be legally binding.

    Anybody who accept credit cards is walking in to a mindfield with Windows 10.

Without life, Biology itself would be impossible.

Working...