2 ms·
This change in the settings menu fixes absolutely NOTHING. Suppose that as the article describes, you go ahead and chose the Basic setting for telemetry. What
by winstonlove 10y ago
This change in the settings menu fixes absolutely NOTHING. Suppose that as the article describes, you go ahead and chose the Basic setting for telemetry. What happens next week when some update is published and reverts back your settings to Full telemetry? This is not a theoretical scenario, many past updates have changed the state of the user chosen settings (including telemetry) without the users knowledge. In Computer Science parlance, the settings menu is non-deterministic, meaning you cannot be sure what state it is in now, as compared to the next minute.
So for example if you are a lawyer, a doctor, or a stock broker, and are typing a sensitive document for a client, even if you are diligent and checked that telemetry was set to Basic, before and after you typed the document, there still exists the possibility that for a few minutes the setting was changed to Full telemetry due to a background windows update, and minutes later reset again to Basic telemetry due to another update, thus leaking the sensitive document without you even knowing about it. That is what being non-deterministic means and is obviously unacceptable for certain professional software usage scenarios.
But the greatest flaw in Windows 10 is not the keylogger. The greatest flaw is the Delivery Optimization module, its new peer-to-peer software delivery system. Basically, with Windows 10, the DLLs that compose your kernel do not come from Microsoft servers directly, but come from Joe down the street, or worse from Boris the hacker from some other country, due to peering. What could possibly go wrong with that? In effect, your attack surface is the entire internet, and all that it would take for someone to compromise your system is some buffer overflow to nullify the hash thar Delivery Optimization uses to validate the peered DLLs.
Windows 10 has many great features, and one can see truly the significant positive progress Microsoft is making every month. But Microsoft really needs to purge the telemetry DLL and the delivery optimization DLL from the base windows install. They introduce unacceptable risks in several professional usage scenarios.