4 ms·
when the MSI file defaults to sending crash dumps that may contain confidential financial information, to a server located in the developers broom closet, yes,
by sathackr 10y ago
when the MSI file defaults to sending crash dumps that may contain confidential financial information, to a server located in the developers broom closet, yes, we have to control the MSI files.
Because admins have to answer to the auditors(and our conscience) when they ask the question "How do you ensure that personal and confidential information is not leaked from your environment"
Which is why Windows 10 is my worst nightmare.
- CaptSpify 10y agoThat is a legit concern, but if that is the case, Chrome, Win10 and the like should be completely off the table.
- dx034 10y agoI thought it can be switched off in the enterprise version of Windows 10? AFAIK that's the only way how Microsoft was able to start convincing companies to switch from Windows 7.
- sathackr 10y agoThey do provide a GPO object to turn off the "Telemetry" for Enterprise versions. But it still installs the entire Windows store with Candy Crush Saga, Facebook, Minecraft, XBOX, etc. and they make it nearly impossible to remove. Why on earth they would force that crap down the throat of their ENTERPRISE customers is beyond me. I fought with it for months and finally gave up and cancelled the deployment project until MS offers a better way for enterprises to control the Window Store. Update: Added more below ---- IE: When trying to build a secure environment, you must eliminate all unnecessary attack surfaces. The customer did not need "XboxIdentityProvider" installed their Windows 10 Enterprise environment. But this is something MS feels must be installed on all Windows 10 PCs thus they made it nearly impossible to remove.