4 ms·
Most striking for me is not only access to your documents, but also: >events generated by the operating system, and your "inking and typing data." Sounds like
by uranian 10y ago
Most striking for me is not only access to your documents, but also:
>events generated by the operating system, and your "inking and typing data."
Sounds like a key logger virus, but then built-in the OS? Is this for real?
- inkling 10y agoOstensibly it's for debugging crash dumps. In reality you can bet there will be NSL's and other legal tools used to co-opt this stuff for more noble aims, like defending against terrorism and protecting our children via fishing expeditions and secret gag orders.
- r3bl 10y ago> via fishing expeditions... If you already have access to the things I type and my metadata includes the websites I visit, you don't really need to phish me to get my credentials. If a service also happens to not support 2FA and doesn't have some sort of account activity section, you can effectively have control of me over that service, without me ever doing anything wrong and me not even suspecting a thing.
- ethbro 10y agoInkling meant fish, as in the legal enforcement sense of using an unrelated charge to obtain a warrant which is then used to fish for evidence of a more serious crime.
- nebabyte 10y agoIf it is, I applaud their balls if nothing else
- wheelerwj 10y agoreally? that's the most striking? it wasn't the remote code execution approved by an internal "governance" committee?
- Pigo 10y agoSeems like one more reason to let Microsoft be purely for work related stuff, on your work machine, where our network admin (who has a God complex) is already poking through everything I do or save.
- falcolas 10y agoTo be fair, their privacy policy and EULAs called out these usecases from the beginning. Doesn't make them right, but this is not new information.
- helthanatos 10y agoIt's also scary how easy it is, on any version of Windows, to make a keylogger. Any application can log keystrokes with ease... It's like 20 lines of c# code.
- pjc50 10y agoSetWindowsHookEx(). Same functionality is available in XWindows: http://unix.stackexchange.com/questions/129159/record-every-keystroke-and-store-in-a-file http://unix.stackexchange.com/questions/129159/record-every-... It's a consequence of the old security thinking where programs were installed by a "trusted administrator". Everything run by a user is assumed to be sound. The only way to prevent this is either aggressive limiting of features and sandboxing, like in the web browser. (Any windows application running as the user can also remote-control and surveil any other windows application through windows messages.)
- Zachery 10y agoHow do you suspect they suggest typing mistakes? :) (ps chrome does this too)
- freehunter 10y agoGoogle is the master of this. Every piece of software they have keeps logs of everything you do, every key you type and every button you push and what devices you're connecting from and who you talk to and where you are and what you're doing at all times. Neither Microsoft nor Google can be trusted in that department. The only company that tries at all to respect your privacy is Apple. Google has a photo album with facial recognition and automatic tagging and the ability to search based on what the subject of the picture is, but it requires that you upload all your pictures to their servers so they can search through them. Apple does the same thing but the pictures never leave your device. You'd never expect to see Microsoft or Google get up on stage and say "we're intentionally giving up an entire revenue stream because we respect your privacy". Instead they subsidize the cost of their software with privacy invasion and then brag about how much better value for the money their products are.