25 ms·

I went into this article skeptical (due to the title, ZDNet, and how often unreasonable Windows 10 complaints get posted) but this one seems legitimate. The Wa

I went into this article skeptical (due to the title, ZDNet, and how often unreasonable Windows 10 complaints get posted) but this one seems legitimate. The WaitList.dat really does seem like a legitimate threat to security and privacy. I don't currently have a touch device to test the including Powershell script, but I'd be interested to hear what others find. I actually understand why Microsoft is recording this information (since it helps them understand the user's sentence structure/words, to make recognition more accurate) but it is also a huge treasure trove of personal information that many wouldn't have been aware of. I wonder if there is a way to store this information more securely?

walterbell 8y ago
If input text is used to train/update a model, would the input text still be needed after the model has been trained/updated? Would text from random documents or emails on the system improve the recognition of handwritten text by a specific user?
- blt 8y ago
  Even if the data is not retained, it's possible that the trained model can leak information about the training examples. The field of differential privacy explores ways to make sure this doesn't happen.
ocdtrekkie 8y ago
It's "legitimate"... but anyone concerned about privacy should've already has this turned off (as I have ever since Windows 10 released). This won't happen if you turn off "inking and typing recognition" in the Windows setup screen during initial install (or later via the Settings app). https://privacy.microsoft.com/en-us/windows-10-speech-inking-typing-and-privacy-faq https://privacy.microsoft.com/en-us/windows-10-speech-inking... The argument could be made that Microsoft should do a better job to secure this file on your PC, but since if you're letting them create this file, they're sending all this data to the cloud anyways...
- NullPrefix 8y ago
  >It's "legitimate"... but anyone concerned about privacy should've already started using an alternative operating system.
  - leetcrew 8y ago
    ridiculous! there's nothing wrong with the windows privacy model; these cheapskates just don't want to pay up for an enterprise volume license.
- dustfinger 8y ago
  >It's "legitimate"... but anyone concerned about privacy should've already has this turned off What about those that are ignorant? They may be ignorant about the implications of having personal data collected. They may be technically ignorant and thus unaware that they can turn off this feature. In the end it doesn't matter because the vast majority are, and arguably will remain, ignorant. Is there privacy no less important? Features that collect personal information should always follow an explicit opt in policy to protect the ignorant. If companies are concerned that too many people will leave these features off then they need to take the steps required to educate the end user.
  - ocdtrekkie 8y ago
    I agree, but my point is that when this setting is already keylogging you and sending your data to the cloud by default, the fact that it's also stored on your PC is hardly increasing your risk much.

walterbell 8y ago

If input text is used to train/update a model, would the input text still be needed after the model has been trained/updated? Would text from random documents or emails on the system improve the recognition of handwritten text by a specific user?

blt 8y ago
Even if the data is not retained, it's possible that the trained model can leak information about the training examples. The field of differential privacy explores ways to make sure this doesn't happen.

ocdtrekkie 8y ago

It's "legitimate"... but anyone concerned about privacy should've already has this turned off (as I have ever since Windows 10 released). This won't happen if you turn off "inking and typing recognition" in the Windows setup screen during initial install (or later via the Settings app). https://privacy.microsoft.com/en-us/windows-10-speech-inking-typing-and-privacy-faq https://privacy.microsoft.com/en-us/windows-10-speech-inking... The argument could be made that Microsoft should do a better job to secure this file on your PC, but since if you're letting them create this file, they're sending all this data to the cloud anyways...

NullPrefix 8y ago
>It's "legitimate"... but anyone concerned about privacy should've already started using an alternative operating system.
- leetcrew 8y ago
  ridiculous! there's nothing wrong with the windows privacy model; these cheapskates just don't want to pay up for an enterprise volume license.
dustfinger 8y ago
>It's "legitimate"... but anyone concerned about privacy should've already has this turned off What about those that are ignorant? They may be ignorant about the implications of having personal data collected. They may be technically ignorant and thus unaware that they can turn off this feature. In the end it doesn't matter because the vast majority are, and arguably will remain, ignorant. Is there privacy no less important? Features that collect personal information should always follow an explicit opt in policy to protect the ignorant. If companies are concerned that too many people will leave these features off then they need to take the steps required to educate the end user.
- ocdtrekkie 8y ago
  I agree, but my point is that when this setting is already keylogging you and sending your data to the cloud by default, the fact that it's also stored on your PC is hardly increasing your risk much.