Advertisement

About the Windows 10 spying issue...

Started by November 03, 2015 02:32 AM
89 comments, last by Servant of the Lord 8 years, 10 months ago

it could be an issue related to intel RST drivers..

"Recursion is the first step towards madness." - "Skegg?ld, Skálm?ld, Skildir ro Klofnir!"
Direct3D 12 quick reference: https://github.com/alessiot89/D3D12QuickRef/

Here's how I block stuff on Win7.

Go to Internet Options in the control panel, and then the Security tab has a few icons for different "zones".

Click on Restricted and then "Sites", and add things there.

I've added apps.skype.com, vortex.data.microsoft.com, vortex-win.data.microsoft.com and settings-win.data.microsoft.com.. not sure if it's actually Windows sending stuff there or Visual Studio or whatever but it was irritating since they sent stuff all the time that showed up when I wanted to analyze network traffic.. Windows Update still works fine.

Another alternative is to go into Windows/System32/drivers/etc/hosts and add bogus IP addresses to those sites, like 127.0.0.1 to make them try to connect back to your local machine, or something non-existant.

The Internet Options are often overridden by programs that simply don't care about them (if they don't use standard Windows HTTP API but handle their sockets on their own).

hosts are generally not overridden unless there's a driver that ignores them or something like that.

Microsoft could of course ignore them but I doubt it.. they want everything to work behind business firewalls and stuff so they probably won't do anything more than send a standard HTTP request.

Advertisement

Not sure of new builds but Windows 10 was noticeably slower than Windows 8.1 Update 3 therefore I reverted back due to this and other reasons.

Clean install or in-place upgrade? As a general rule, in-place upgrades will always carry forward crap from the previous OS version, and are always noticeably slower than a clean install. This isn't specific to Windows 10 - it's been the case with every version as far back as I can remember.

Direct3D has need of instancing, but we do not. We have plenty of glVertexAttrib calls.

Another alternative is to go into Windows/System32/drivers/etc/hosts and add bogus IP addresses to those sites, like 127.0.0.1 to make them try to connect back to your local machine, or something non-existant.


All of the dozens of Microsoft telemetry urls in the host file point to 127.0.0.1 on my machine!blink.png I'm guessing the host file is ignored.


All of the dozens of Microsoft telemetry urls in the host file point to 127.0.0.1 on my machine!blink.png I'm guessing the host file is ignored.

Wow.. didn't expect that. Did you try restricted sites?

If they are willing to override those settings then you can't do it reliably locally probably, but your router should have filters to block unwanted sites before sending them on to the internet.

If they change the IPs of the servers then it might be a bit more complicated to get it to auto-update the IP blocks.. or if Microsoft uses a different nameserver than the one in your settings you could block that.

Wow.. didn't expect that. Did you try restricted sites?


Yeah, but no idea if it will work. If they are going to ignore the hosts file, I doubt they'll consider Internet Settings.

If they are willing to override those settings then you can't do it reliably locally probably, but your router should have filters to block unwanted sites before sending them on to the internet.


I'm guessing that they are pretty serious about this. They are not going to make it easy.
Advertisement

Not sure of new builds but Windows 10 was noticeably slower than Windows 8.1 Update 3 therefore I reverted back due to this and other reasons.

Clean install or in-place upgrade? As a general rule, in-place upgrades will always carry forward crap from the previous OS version, and are always noticeably slower than a clean install. This isn't specific to Windows 10 - it's been the case with every version as far back as I can remember.

I never upgrade an OS, not even Service Pack. I don't care much about booting time but Windows 10 was acting like 8.1 with bloatware. Also was annoyed of process of making Windows 10 usable ( disable automatic updates, defender, telemetry, bundled apps ... ) , finally gave up at ridiculous invisible window borders and no active window color ("fixed" later in a build afaik). So I will postpone update until the last day offer expires or they bring 8.1 style thick window borders.

mostates by moson?e | Embrace your burden

Blocking any data sent to the MS servers would be (relatively) easy as long as you can find out what they are - but I'm sure someone will keep an updated list just as they do for adblockers. Doing this without breaking Update might be harder.

As for the claim these services use resources... technically yes but I very much doubt it's measurable. Far, far less than your virus-checker.

Blocking any data sent to the MS servers would be (relatively) easy as long as you can find out what they are - but I'm sure someone will keep an updated list just as they do for adblockers. Doing this without breaking Update might be harder.

As for the claim these services use resources... technically yes but I very much doubt it's measurable. Far, far less than your virus-checker.

At least your virus checker (supposedly) gives you some kind of value.

Blocking any data sent to the MS servers would be (relatively) easy as long as you can find out what they are - but I'm sure someone will keep an updated list just as they do for adblockers. Doing this without breaking Update might be harder.

As for the claim these services use resources... technically yes but I very much doubt it's measurable. Far, far less than your virus-checker.

At least your virus checker (supposedly) gives you some kind of value.
Yes, this currently works. It is how I detected the covertly installed espionage updates under Windows 7 which I wasn't aware of before (some 2-3 months ago). Having configured Windows update to automatically install security fixes and important updates, I thought not much evil could happen.

I was doing nothing spectacular (basically, typing for the last 5-6 mins) when suddenly a dialog popped up: (unreadable service name) [Microsoft Telemetry Whatever Reporter] is attempting to make a connection to the internet. Wanna allow that?"

Thing is, in the end the operating system is in control of the hardware, so even if you run an application-level firewall, if the OS is malicious enough, it can bypass these checks. Currently, application-level firewalls seem to detect it, but you cannot be sure about the future. What's bad is if you can't trust your operating system.

This topic is closed to new replies.

Advertisement