3 ms·

Has anyone compiled a privacy checklist for Windows 10? What settings people have determined are best to use? I was somewhat forced to do the upgrade and didn't

by adrianb 11y ago

Has anyone compiled a privacy checklist for Windows 10? What settings people have determined are best to use? I was somewhat forced to do the upgrade and didn't have the time to explore all settings (also they got more confusing since Windows 8).

jsf666 11y ago
IMO the thing is You can never be sure what the system is doing underneath. It's like a rooted box, you need to wipe it clean cause you can never be sure if the backdoor is still there
mtgx 11y ago
Here's what I did: 1) turned off everything in the Customization section at install 2) Used http://pxc-coding.com/portfolio/donotspy10/ http://pxc-coding.com/portfolio/donotspy10/ 3) Used https://github.com/10se1ucgo/DisableWinTracking https://github.com/10se1ucgo/DisableWinTracking Then, I installed a traffic monitoring tool - and surprise surprise - I still found some stuff trying to randomly connect to Microsoft's servers, similarly to what Peter Bright from Ars discovered (btw, "telemetry" can only be fully disabled on Enterprise version of Windows 10): http://arstechnica.com/information-technology/2015/08/even-when-told-not-to-windows-10-just-cant-stop-talking-to-microsoft/ http://arstechnica.com/information-technology/2015/08/even-w... I blocked those, too, and for now the Windows 10 spying monster seems to have settled down - BUT - new story points to the fact that you won't even know what Windows 10 updates will do in the future. That means that on machines where they see they can't spy on you anymore, they could push an update to bypass those protections and still spy on you. http://www.theregister.co.uk/2015/08/21/microsoft_will_explain_only_significant_windows_10_updates/ http://www.theregister.co.uk/2015/08/21/microsoft_will_expla... Windows 10 really seems to be designed based on an NSA/law enforcement's wishlist. Any security or privacy measures you might take on it can be rendered useless by an update, and some articles even say Microsoft gets all of your typed keys (so all passwords). http://localghost.org/posts/a-traffic-analysis-of-windows-10 http://localghost.org/posts/a-traffic-analysis-of-windows-10 When I find some time these days, I'll wipe Windows 10 and never look back.
- sillygeese 11y ago
  I wonder why you're getting downvoted.
  - Becca_J 11y ago
    Me too. Found it to be a useful and interesting post – thanks mtgx.
  - hobs 11y ago
    I am also seeing downvotes in this thread I would not have expected, for what appear to be legit issues with Windows 10, even if some of the rhetoric is a wee hyperbolic. I dont normally like to go meta and talk about voting, but this is the worst example I have probably ever seen.
  - UnoriginalGuy 11y ago
    I didn't but I suspect because their first link looks like a malware pinata. They should have just linked to Github, rather than to some site with a whole host of fake "download" buttons, that looks a lot like CNet/Download.com.
  - ionised 11y ago
    Microsoft employees maybe?
- deleted 11y ago
  [deleted]
- ionised 11y ago
  > http://pxc-coding.com/portfolio/donotspy10/ http://pxc-coding.com/portfolio/donotspy10/ This one looks interesting but I'd be wary of using it unless source code was available. The site it is hosted on doesn't appear to have much in the way of info about the author or anything either.
r3bl 11y ago
There were like 3-4 open source projects posted here (yeah, people don't get that the point of publishing an open source project is to actually collaborate) aiming at making privacy on Windows 10 one click away. As far as I can tell, they all did a miserable job and blocked some legit features (like Windows Update) and domains and never updated their projects once we told them about the legit features they're blocking. So, there's plenty of checklists out there, but none of them is actually useful at the moment.
- kijin 11y ago
  The problem with a one-click approach is that one person's "legit feature" is another person's privacy nightmare. I have no use for Cortana, so for me, it's nothing more than an annoyance to be disabled. But for others, it might be the one reason why they upgraded to Windows 10. Likewise, some tutorials out there advocate disabling Windows Defender, but I consider (at least some parts of) Windows Defender to be a legitimate feature. I'm trying out Windows 10 in a VM, and so far I've managed to disable: everything in the privacy control panel, advertising ID in Edge, Cortana, OneDrive, web search from the taskbar, feedback, telemetry, and the half-crippled Start menu. Now it's just a slightly faster and flatter Windows 7. I'm not sure if I'll ever let it out of the hypervisor though.

by adrianb 11y ago

jsf666 11y ago

IMO the thing is You can never be sure what the system is doing underneath. It's like a rooted box, you need to wipe it clean cause you can never be sure if the backdoor is still there

mtgx 11y ago

Here's what I did: 1) turned off everything in the Customization section at install 2) Used http://pxc-coding.com/portfolio/donotspy10/ http://pxc-coding.com/portfolio/donotspy10/ 3) Used https://github.com/10se1ucgo/DisableWinTracking https://github.com/10se1ucgo/DisableWinTracking Then, I installed a traffic monitoring tool - and surprise surprise - I still found some stuff trying to randomly connect to Microsoft's servers, similarly to what Peter Bright from Ars discovered (btw, "telemetry" can only be fully disabled on Enterprise version of Windows 10): http://arstechnica.com/information-technology/2015/08/even-when-told-not-to-windows-10-just-cant-stop-talking-to-microsoft/ http://arstechnica.com/information-technology/2015/08/even-w... I blocked those, too, and for now the Windows 10 spying monster seems to have settled down - BUT - new story points to the fact that you won't even know what Windows 10 updates will do in the future. That means that on machines where they see they can't spy on you anymore, they could push an update to bypass those protections and still spy on you. http://www.theregister.co.uk/2015/08/21/microsoft_will_explain_only_significant_windows_10_updates/ http://www.theregister.co.uk/2015/08/21/microsoft_will_expla... Windows 10 really seems to be designed based on an NSA/law enforcement's wishlist. Any security or privacy measures you might take on it can be rendered useless by an update, and some articles even say Microsoft gets all of your typed keys (so all passwords). http://localghost.org/posts/a-traffic-analysis-of-windows-10 http://localghost.org/posts/a-traffic-analysis-of-windows-10 When I find some time these days, I'll wipe Windows 10 and never look back.

sillygeese 11y ago
I wonder why you're getting downvoted.
- Becca_J 11y ago
  Me too. Found it to be a useful and interesting post – thanks mtgx.
- hobs 11y ago
  I am also seeing downvotes in this thread I would not have expected, for what appear to be legit issues with Windows 10, even if some of the rhetoric is a wee hyperbolic. I dont normally like to go meta and talk about voting, but this is the worst example I have probably ever seen.
- UnoriginalGuy 11y ago
  I didn't but I suspect because their first link looks like a malware pinata. They should have just linked to Github, rather than to some site with a whole host of fake "download" buttons, that looks a lot like CNet/Download.com.
- ionised 11y ago
  Microsoft employees maybe?
deleted 11y ago
[deleted]
ionised 11y ago
> http://pxc-coding.com/portfolio/donotspy10/ http://pxc-coding.com/portfolio/donotspy10/ This one looks interesting but I'd be wary of using it unless source code was available. The site it is hosted on doesn't appear to have much in the way of info about the author or anything either.

r3bl 11y ago

There were like 3-4 open source projects posted here (yeah, people don't get that the point of publishing an open source project is to actually collaborate) aiming at making privacy on Windows 10 one click away. As far as I can tell, they all did a miserable job and blocked some legit features (like Windows Update) and domains and never updated their projects once we told them about the legit features they're blocking. So, there's plenty of checklists out there, but none of them is actually useful at the moment.

kijin 11y ago
The problem with a one-click approach is that one person's "legit feature" is another person's privacy nightmare. I have no use for Cortana, so for me, it's nothing more than an annoyance to be disabled. But for others, it might be the one reason why they upgraded to Windows 10. Likewise, some tutorials out there advocate disabling Windows Defender, but I consider (at least some parts of) Windows Defender to be a legitimate feature. I'm trying out Windows 10 in a VM, and so far I've managed to disable: everything in the privacy control panel, advertising ID in Edge, Cortana, OneDrive, web search from the taskbar, feedback, telemetry, and the half-crippled Start menu. Now it's just a slightly faster and flatter Windows 7. I'm not sure if I'll ever let it out of the hypervisor though.