4 ms·

If you absolutely have to use Windows (like me) is it possible to block all the telemetry at the router level, maybe somekind of hardware firewall? Do we have a

If you absolutely have to use Windows (like me) is it possible to block all the telemetry at the router level, maybe somekind of hardware firewall? Do we have a list of IPs to blacklist?

AlexeyBrin 10y ago
You can try, but to be frank you can never be sure. The only 100% way to stop telemetry is to work disconnected from the Internet. A slightly safer version of Windows is Enterprise LTSB but I don't think you can legally buy it as an individual.
- zebrafish 10y ago
  You can't buy that for a home computer. It's only licensed for PLCs and other manufacturing or enterprise critical computers. edit*: and it's extraordinarily expensive
- thoughtpalette 10y ago
  I just added the above linked endpoints to my hosts file. Not sure how well that'll work.
  - falcolas 10y ago
    Reports from earlier indicate that they don't use the hosts file (or purportedly even DNS) for OS processes like telemetry and update. You'd have to do it at a higher level.
  - MikusR 10y ago
    You have to block using firewall. As hosts file is being bypassed. Plenty of malware modify hosts file.
    - thoughtpalette 10y ago
      Ahhh, it seems I should've read the entire comment thread. Thanks to both of you for the notification!
willyyr 10y ago
The endpoints used can be found here: https://technet.microsoft.com/en-us/itpro/windows/configure/configure-windows-telemetry-in-your-organization#endpoints https://technet.microsoft.com/en-us/itpro/windows/configure/... I work at Microsoft, though have nothing to do with the development of Windows* //edit: typo
- Clownshoesms 10y ago
  I thought the telemetry stuff could avoid DNS lookups? I.e. even if you null out a certain host lookup, it'll use a direct IP?
  - out_of_protocol 10y ago
    Yes it could, according to reports from people. Separate device (firewall on router e.g.) will help though. Some low-level hacking could help as well, no guarantees and i didn't hear positive reports yet
darrmit 10y ago
I've used this with success: https://github.com/MichiMunich/Windows10-Privacy https://github.com/MichiMunich/Windows10-Privacy Looks like it has been updated to include some additional functionality (like update control) since I last used it.
pmoriarty 10y ago
Will blocking this shit on the firewall level break Windows Updates?
- ionised 10y ago
  I've blocked as many telemetry domains as I can find as well as applied Blackbird and O&OSU10 and I still get minor updates and security updates (Defender included) fine. I've deferred major upgrades at this point though because the last two hosed a few things on my system and reset a load of stuff I'm probably still in the process of finding out about.
gspetr 10y ago
You may want to look into this “Reclaim Windows 10” Powershell Script: https://news.ycombinator.com/item?id=13344318 https://news.ycombinator.com/item?id=13344318

If you absolutely have to use Windows (like me) is it possible to block all the telemetry at the router level, maybe somekind of hardware firewall? Do we have a list of IPs to blacklist?

AlexeyBrin 10y ago

You can try, but to be frank you can never be sure. The only 100% way to stop telemetry is to work disconnected from the Internet. A slightly safer version of Windows is Enterprise LTSB but I don't think you can legally buy it as an individual.

zebrafish 10y ago
You can't buy that for a home computer. It's only licensed for PLCs and other manufacturing or enterprise critical computers. edit*: and it's extraordinarily expensive
thoughtpalette 10y ago
I just added the above linked endpoints to my hosts file. Not sure how well that'll work.
- falcolas 10y ago
  Reports from earlier indicate that they don't use the hosts file (or purportedly even DNS) for OS processes like telemetry and update. You'd have to do it at a higher level.
- MikusR 10y ago
  You have to block using firewall. As hosts file is being bypassed. Plenty of malware modify hosts file.
  - thoughtpalette 10y ago
    Ahhh, it seems I should've read the entire comment thread. Thanks to both of you for the notification!

willyyr 10y ago

The endpoints used can be found here: https://technet.microsoft.com/en-us/itpro/windows/configure/configure-windows-telemetry-in-your-organization#endpoints https://technet.microsoft.com/en-us/itpro/windows/configure/... I work at Microsoft, though have nothing to do with the development of Windows* //edit: typo

Clownshoesms 10y ago
I thought the telemetry stuff could avoid DNS lookups? I.e. even if you null out a certain host lookup, it'll use a direct IP?
- out_of_protocol 10y ago
  Yes it could, according to reports from people. Separate device (firewall on router e.g.) will help though. Some low-level hacking could help as well, no guarantees and i didn't hear positive reports yet

darrmit 10y ago

I've used this with success: https://github.com/MichiMunich/Windows10-Privacy https://github.com/MichiMunich/Windows10-Privacy Looks like it has been updated to include some additional functionality (like update control) since I last used it.

pmoriarty 10y ago

Will blocking this shit on the firewall level break Windows Updates?

ionised 10y ago
I've blocked as many telemetry domains as I can find as well as applied Blackbird and O&OSU10 and I still get minor updates and security updates (Defender included) fine. I've deferred major upgrades at this point though because the last two hosed a few things on my system and reset a load of stuff I'm probably still in the process of finding out about.

gspetr 10y ago

You may want to look into this “Reclaim Windows 10” Powershell Script: https://news.ycombinator.com/item?id=13344318 https://news.ycombinator.com/item?id=13344318