Windows 10 The truth about Windows 10 spying on almost everything you do

[mona]

The truth about Windows 10 spying on almost everything you do

In Security Knowledge / EMSISOFT BLOG - by Carla on September 2, 2015 | Français, English, Deutsch

You have probably heard the news by now: Microsoft has updated a controversial service agreement that lays out in scary detail how your personal data is being used and abused – at least, that’s what the major tech blogs are saying. But the reality is, even if you read the 12,000 word service agreement, it’s still confusing and vague at best.

Horacio Gutierrez, Deputy General Counsel of Microsoft’s legal and corporate affairs, wrote about the company’s commitment to transparency on the Microsoft blog in early June. This move, of course, was preceding the new privacy statement and service agreement that accompanied the release of Windows 10.

As he put it, “We are simplifying the services agreement and privacy statement because we believe that real transparency starts with straightforward terms and policies that people can clearly understand. As our services evolve, we recognize we must continue earning your trust.”

How Windows 10 is spying on you

The reality is, we can’t know what Microsoft is doing with your private data, but the release of the updated privacy policy and service agreement can give us some great insight. Yes, these long and tedious documents leave a lot of room for interpretation, but they also inspire something important: a discussion about how data harvesting and lack of digital privacy has become normalized.

Cortana: your personal assistant, or spy machine?

Cortana is your voice-activated personal assistant, much like Siri and Google Now. But in order for her to operate, Windows 10 collects your personal information to better serve you. This includes calendar events, contact information, alarm settings, what you view and purchase, your browsing history, emails and text messages… “and more”.

An advertisers greatest dream

You may not have realized it, but each user on each Windows device will be issued a unique advertising ID that is tied to the email address they have on file. The idea is that you will be better served through ads, because according to Microsoft, “Advertising keeps many of the services you use free of charge”.

Microsoft will share this profile (created from information aggregated from your personal files) with their partner ad networks – who in turn serve you ads on certain applications, like solitaire. If you were concerned with ad networks collecting information from your browsing history, then be aware that Microsoft is taking it to the next level with Windows 10.

Data syncing with OneDrive

OneDrive is Microsoft’s cloud storage system, and it comes with the Windows 10 territory. You might think it’s great because there is no additional sign up or installment required and you can access it from any of your Microsoft devices. But this new convenience comes with a price.

Every time you are signed into your machine with your Microsoft account, your operating system immediately syncs your settings and other data to company’s servers. This includes browser behavior and history, as well as mobile hotspot and Wi-Fi network passwords.

What are they doing with this information?

If you had the time to read through the long privacy policy and service agreement, you might get a vague understanding of what Microsoft will do with your data, but little more. Besides, we all know better than to take giant corporations for their word – they have their own interests to look after. The real questions end up being, what can Microsoft do with this information? And ultimately, what are they mostly likely to do with it?

Advertisers can “serve” you better!

People are getting used to free services online left and right, so these expectations dominate the tech marketplace right now. Windows 10 doesn’t cost you any money, but it still comes at a price.

As Alec Meer of Rock Paper Shotgun points out, Microsoft is increasingly trying to compete with Google through software and applications. But this model requires that, “money comes from harvesting data and flogging it to advertisers and other organisations who want to know exactly what we’re all up to online”.

Comply with big brother

Microsoft doesn’t beat around the bush when it comes to surveillance state issues:

Finally, we will access, disclose and preserve personal data, including your content (such as the content of your emails, other private communications or files in private folders), when we have a good faith belief that doing so is necessary to: 1.comply with applicable law or respond to valid legal process, including from law enforcement or other government agencies…

It’s important to note that while this may seem horrifying to some, it’s really not so different from any other privacy agreement. Just take a look at this snippet from Apple’s privacy policy:

It may be necessary − by law, legal process, litigation, and/or requests from public and governmental authorities within or outside your country of residence − for Apple to disclose your personal information. We may also disclose information about you if we determine that for purposes of national security, law enforcement, or other issues of public importance, disclosure is necessary or appropriate.

At the end of the day, there are few companies that are able to take a stance against big government agencies. The best you can hope for is providers who don’t bury this in privacy agreements, but who are upfront and honest about their current operations as they relate to the surveillance state.

What could go wrong? Why should I care?

As an infamous activist once said, “Arguing that you don’t care about privacy because you have nothing to hide is not different than saying you don’t care about free speech because you have nothing to say.”

But if that’s not reason enough to get up in arms, there are a number of practical concerns to consider. First and foremost, you don’t know which ad networks this data is going to, and you don’t know what their policies for dealing with this very private information are.

What happens in the event of a hack? You might feel safe if your information is with a big company like Microsoft, which undoubtedly has major systems in place to protect your data, but do you really trust any of Microsoft’s ad network customers? A hacker could trace these transactions and conduct a large-scale hack just by finding a single vulnerability in this line of data transfer.

You might say you have nothing to hide, and that the only person who does is clearly breaking the law. If that’s truly the case, why don’t you leave your bank account details in the comments below?

The real truth: Microsoft isn’t the only bad guy

Shifting tides in modern culture have created two dangerous and commonly accepted thoughts on digital privacy, which could make you think that:

1. Privacy must be compromised for safety.
2. Privacy must be compromised for convenience.

While there are serious debates on the subject, it’s important to stop and wonder who is ultimately responsible for these ideas, which create the basis for how many companies, institutions, and individuals make their decisions about privacy.

But the reality is, the Windows 10 privacy agreement isn’t so much a revelation as a sign of the times. While it has understandably stirred up some controversy, it hasn’t inspired a mass exodus from use of Microsoft software or products.

This is as it should be, because most of us know that it isn’t different with the developers of other major operating systems and mobile operating systems…like Apple and Google.

Siri’s telling everyone what you did last night

Sure, Apple and Google may have made a show of their commitment to user privacy, with smartphone encryption and very convincing, public battles with high-profile government agencies.

Apple has admitted Siri voice data is being sent to third parties

But you shouldn’t let these PR stunts fool you. Even when these companies have the best intentions, there is still a bottom line at the end of the day, and that’s money.

Don’t believe us? Cortana isn’t the only personal assistant who likes to abuse your privacy. Apple hands your voice recordings over to third parties for analysis, and you agreed to it in the privacy agreement. Whether it’s a personal message to your sweetheart or your child asking Siri silly questions, Apple stores those messages for two years and essentially does with them what they want.

It might be tempting to switch over to Google Now for your voice commands, but that would come at the cost of both your privacy and sanity. Google Now has a feature called Now cards, which are recommendations for products, services, and information based on your messages and recent searches. Even if you don’t rely on Google Now too much for recommendations, Google already knows so much about you because at some point you have probably used their products or services.

And if you use Gmail, you’ll note that Google has been serving ads through Gmail for some time now – and if you haven’t noticed any, just check under your Gmail’s “Promotions” tab. They get information straight out of your private emails to help their ad network partners target you. It’s right there in their privacy agreement. Microsoft even attacked Gmail over these privacy violations and launched a “You got Scroogled” marketing campaign.

What you can do to protect your privacy

The reality is, short of becoming a Linux user or developing your own operating system, there is little you can do to keep your information entirely private. Even recent Windows 7 and 8 updates come with their own host of privacy issues, so don’t think you’re out of the woods just because you haven’t made the move to 10.

But there are several steps you can take to maximize your privacy while using Windows 10, and we encourage you to explore these options – whatever agency you can take over your privacy is better than none.

Windows 10 setting options to look into

If you have yet to install Windows 10 be sure to decline the Express Settings, which enables all of the privacy compromising features. Look through the different setting options and disable anything that makes you uncomfortable.

If you already enabled the Express Settings when you downloaded Windows 10, go to the start menu and select Settings. From there you’ll find that most of these invasive features are listed under Privacy. There are many options to go through, and we encourage you to look carefully at each one. There are several big ones we think you may want to consider disabling:

Cortana

You may not be comfortable with Cortana collecting so much personal information about you, and if that’s the case, you should disable the Getting to know you option under Speech, inking, & typing (this is located in the Privacy box).

Additionally, you can click on the gear icon where you can access the Cortana settings, where you can enable or disable her (as well as manage information kept about you in the cloud).

Advertising ID

If you are concerned about the data harvesting for advertisement purposes, we do recommend you disable setting, “let apps use your advertising ID for experiences across apps”. This is located underneath the General tab in the Privacy box.

Unfortunately, just moving the toggle isn’t enough to keep ad networks from reaching your personal data. You will also have to go to this Microsoft site and disable personalized ads several times over.

Microsoft allows you to personalize your ad settings

Location

You may be used to location services, and they sure are handy when you’re trying to get from point A to B. But Microsoft’s new privacy agreement suggests they are sharing this location information (and your location history) with “trusted” third parties. If that makes you uncomfortable, it may be best to disable this. The Location tab is located directly beneath the General tab.

Wi-Fi Sense

Wi-Fi Sense could be either very practical, or very invasive, depending on how you look at it. The new feature allows you to automatically share your Wi-Fi password with your Outlook, Skype, and Facebook contacts, which saves a lot of hassle when friends come over and need your password.

WIndows 10 Wi-Fi Sense: do you need it?

On the other hand, this may not be wise for those with broad social networks, because this option does not allow you to selectively pick which contacts to share it with. This option should be enabled or disabled on a case by case basis – it’s located in Network & Internet instead of Privacy.

Use a local account

If you’re not concerned with convenience and want maximum privacy, you should consider a using a local account instead of your Microsoft account. You will lose out on a number of features, particularly synchronization across your different devices. But if that doesn’t bother you, locate Accounts under Settings, then click Your account. You should see the option to “Sign in with a local account instead” just above where your picture should be.

Try O&O ShutUp 10

O&OShutUp10

If you’d like to simplify this process, consider using O&O Software’s free privacy tool, ShutUp 10. This tool simplifies the privacy process by giving you a single interface to deal with all of the myriad of settings you’d like to enable or disable on Windows 10. You can also simply apply all of their recommended settings.

O&O ShutUp10 is entirely free and does not have to be installed. Moreover, it will not install or download potentially unwanted or unnecessary software (PUPs), like so many other programs do these days!

O&O ShutUp10 allows you to easily disable Windows 10 settings

Educate yourself about privacy options that feel right for you

At the end of the day, you might be tempted to throw up your hands and give up perusing privacy at all. You might not see the point, since disabling certain settings doesn’t really guarantee that you are not being spied on, or that your personal data isn’t being sold or distributed.

You might feel that you might as well have the conveniences of certain tools then, or would prefer more relevant advertising. But if we all collectively begin to educate ourselves about our privacy options and pursue them, we have a better chance of creating a culture that is concerned with cyber safety and privacy, instead of one that just thinks it’s a cost needed for a better world.

Have a nice (privacy-conscious) day!

Source :

[gipsy]

@ mona

some article baby ;)

beeing fooled is in human nature so win10 doomed for success. the era of a cyberprivacy (pseudoprivacy imo) is gone so fight for privacy is a fiction unfortunatelly.

all above is personal opinion & do not mean we should to stop resistin'.

[Actarusse]

:towel:

[sri]

They wants to bee a Google giant, aprilbe (i mean 'maybe') :)

[virge]

Your options are:

1. Don't use Windows 10 til it's matured, 8.1 works fine.

2. Perform a hackintosh install, some stuff may not work.

3. Get a Chromebook, but you won't be able to do much outside of web browsing.

4. Get a Macbook or Imac

5. Install any variety of Linux Mint or Ubuntu

6. Wait for Windows 11

What's really sad i was flipping channels and one of the shopping networks was touting Cortona as the greatest thing since slice bread, they went on and on how you can screen capture a page or part of a video and makes notes on it. This is all fine and dandy, but i can do that with many 3rd party apps. I don't have a mic on my desktop so i wouldn't be able to ask Cortona questions.

If you must use Windows 10, remove Media Center, Cortona, IE, disable the spyware services/updates, etc, etc.

[steven36]

The biggest problem I have with Microsoft is they hold a monopoly on computers because there's no other O/S('S) that interest the majority of us . They have really crappy customer support most questions answered by nothing more then insiders .

Most anything Written about there privacy policies or forced updates was written by someone who dont work for Microsoft.

And Microsoft refuses to defend themselves or even give us a real clue of whats going on.

It makes them look as guilty as charged by the media . speak up M$ and defined yourself... if you got the guts?

[OrbingStorm]

Can I be paid for being an employee of microsoft ?Since they want to use my pc for themselves now I think its only fair. :pos:

[straycat19]

Can I be paid for being an employee of microsoft ?Since they want to use my pc for themselves now I think its only fair.

Actually they should pay everyone who installed windows 10 for being an alpha tester, especially since it seems windows 10 isn't ready for the 'beta' tag yet. But then they gave it to you for free so you don't have anything to bitch about.

[212eta]

Windows 10 still needs a lot of fixing

especially when it comes to Privacy.

[Holmes]

If microsoft is breaking the law in anyway a lawsuit against them is going to force them to change what there doing twoonetwoeta is right windows ten still need's alot of fixing and whatever privacy they might be breaching is going to be stopped. Consider this could be a microsoft is finding out what they can and cant do situation what they can do is going to continue what they cant do is going to be stopped by the courts if necessary. The problem is microsoft has alot of money if they get sued there throwing the best lawyers money can buy toward the lawsuit the best they can get is a slap on the wrist fines (which thewy can pay and there going to change what they do and update there policy accordingly. I just wish they would release all the features they plan on releasing to edge browser and add tabs to file explorer.

You can protect yourself from what they do collect using O&O ShutUpTen Im going to use shutupten when I start shutting down shit and you can also go and opt out of additional shit to erase the data they have collected so far. There are also programs like spybot anti-beacon and a company called novi something you can use. Like I said in a different thread shut down what you can shut down and what you cant is going to stop in the future hopefully.

[mona]

Windows 10 'spying' claims investigated by Canadian watchdog

Canada is investigating the terms and conditions that come with Windows 10,after many have claimed that the new operating system is watching its users.

The controversy has come about because the software's data collection functions are turned on by default. While Microsoft have made it clear that the function can be turned off before the OS is even installed, in Canada software must seek consent for the data collection, rather than simply giving the option to turn it off.

With Windows 10, Microsoft is able to collect “your voice input, as well as your name and nickname, your recent calendar events and the names of people in your appointments, and information about your contacts including names and nicknames”, according to its terms. Microsoft also reserves the right to “access, disclose and preserve personal data”.

These privacy problems are further exacerbated by Microsoft’s recent move to download Windows 10 onto all computers using Windows 7 and 8 even when the user decided not to use the free upgrade.

Speaking to The Inquirer Microsoft confirmed: “For individuals who have chosen to receive automatic updates through Windows Update, we help upgradable devices get ready for Windows 10 by downloading the files they’ll need if they decide to upgrade. When the upgrade is ready, the customer will be prompted to install Windows 10 on the device.”

Not only does this take 6GB of storage, it’s also stored in a hidden folder meaning the average user is unlikely to know the download has occurred.

_{Source : Independent}

[mona]

Windows 10 botnet

[Cereberus]

good article but you missed out on the anti piracy info in regards to windows 10. they do forward info from win10 to their anti piracy affiliates specifically markmonitor. whether it's exclusively within the onedrive only, or also on your pc. but definitely deserves some attention :x

“Amongst other things Windows 10 sends the contents of your local disks directly to one of their servers. Obviously this goes way too far and is a serious threat to sites like ours which is why we had to take measures,” they add.

Source:

https://torrentfreak.com/torrent-trackers-ban-windows-10-over-privacy-concerns-150822/

if all they did was monitor their own software then fine, thats fair game. but if they go outside that and start scrutinizing and passing on info on other irrelevant stuff, then thats just carte blanche on your privacy rights. even benjamin franklin warned that if you don't care or protect your privacy, then you don't deserve any :/

[KamenRiderBlack]

Paranoia runs high here.

[DLord]

Paranoia my :moon: !!!

After all ignorance is bliss for some :wtf:

[Cereberus]

sure i don't have all the proofs either since i'm citing third party references. but that is still more than 1 liners as an ultimatum beyond doubt >_<:

so i would think being way lax about this privacy issue and calling out others for being even a bit skeptical, is way more naive and lacking in thought on subject matter in comparison.

this is why i'm using o&oshutup10 cause it lessens the unecessary chatter going on without causing any downside. safer than sorry :/

but i wonder though how effective is this app in preventing all the privacy invasive issues pertaining to windows 10 ?

[steven36]

but i wonder though how effective is this app in preventing all the privacy invasive issues pertaining to windows 10 ?

Comparison of Windows 10 Privacy tools

http://www.ghacks.net/2015/08/14/comparison-of-windows-10-privacy-tools/

I guess its all in what you want to block in witch tools you use the only surefire to tell if you have them blocked is use ip sniffers Some tools block very little and some block right much.

One the most trusted companies is Spybot they been fighting spyware since the year 2000. ;)

[Cereberus]

Comparison of Windows 10 Privacy tools

http://www.ghacks.net/2015/08/14/comparison-of-windows-10-privacy-tools/

I guess its all in what you want to block in witch tools you use the only surefire to tell if you have them blocked is use ip sniffers Some tools block very little and some block right much.

One the most trusted companies is Spybot they been fighting spyware since the year 2000. ;)

ty for the link, reading now. definitely what i was looking for.

o&oshutup10 seems safest to use. though they advise saving a system restore before applying their fix, i haven't encountered any issues so far.

but some of these other options, have big warnings advising that some of these fixes are unchangeable, and really really need some hard backup. thats what really put me off from trying those ones.

thought i may be a vigilant netizen, i don't go out of my way to shooting myself in the foot with a setup thats bound to be too complex to maintain, or create problems down the road :x i like things and simple and clean.

[dMog]

lots of paranoia but for some reason the hate only goes to microsoft...does anyone really think apple was not doing this for years and years too...it is called target marketing and everytime you use your credit card, bank card or any loyalty program of any stripe you are being tracked...aka spied on... live with it or get off the grid... they are looking to spy on you to see what you are doing....NOT so much and to say oh my look at what he or she does but just to target you in order to sell you more shite you do not need or want to buy

[steven36]

lots of paranoia but for some reason the hate only goes to microsoft...does anyone really think apple was not doing this for years and years too...it is called target marketing and everytime you use your credit card, bank card or any loyalty program of any stripe you are being tracked...aka spied on... live with it or get off the grid... they are looking to spy on you to see what you are doing....NOT so much and to say oh my look at what he or she does but just to target you in order to sell you more shite you do not need or want to buy

it pretty obvious its not just paranoia when people like spybot step up to the plate . Witch has been fighting spyware for 15 years ,One the 1st companies to ever help me remove spyware. by the way none of these tools cost any money at all there free . I respect Microsoft's decision to collect data but they should give the user a choice too really opt out if they dont want too partake in it . fact is you can opt out of every setting they give and it still collects data. They dont respect my rights so I must take matter into my own hands.

Windows10 is just like Kazaa or the old IMesh witch gives you a something for free but bundles it with spyware and millions of people installed these programs to download songs and stuff and infected themselves with spyware . But even back then I was smart enough to use light versions of program were reverse engineers removed all the icky spyware .

Same Old marketing ploy done by software companies time and time again every since there was a internet as we know it . History keeps repeating its self over and over . And its in human nature to be gullible enough to fall for it over and over again. And even try to ignore the fact it even exist. (Denial is not just a river in Egypt) This is not my first rodeo maybe it is yours ? :lol: :P

[dMog]

lots of paranoia but for some reason the hate only goes to microsoft...does anyone really think apple was not doing this for years and years too...it is called target marketing and everytime you use your credit card, bank card or any loyalty program of any stripe you are being tracked...aka spied on... live with it or get off the grid... they are looking to spy on you to see what you are doing....NOT so much and to say oh my look at what he or she does but just to target you in order to sell you more shite you do not need or want to buy

it pretty obvious its not just paranoia when people like spybot step up to the plate . Witch has been fighting spyware for 15 years ,One the 1st companies to ever help me remove spyware. by the way none of these tools cost any money at all there free . I respect Microsoft's decision to collect data but they should give the user a choice too really opt out if they dont want too partake in it . fact is you can opt out of every setting they give and it still collects data. They dont respect my rights so I must take matter into my own hands.

Windows10 is just like Kazaa or the old IMesh witch gives you a something for free but bundles it with spyware and millions of people installed these programs to download songs and stuff and infected themselves with spyware . But even back then I was smart enough to use light versions of program were reverse engineers removed all the icky spyware .

Same Old marketing ploy done by software companies time and time again every since there was a internet as we know it . History keeps repeating its self over and over . And its in human nature to be gullible enough to fall for it over and over again. And even try to ignore the fact it even exist. (Denali is not just a river in Egypt) This is not my first rodeo maybe it is yours ? :lol: :P

i never said they are not spying and gathering info...but they are doing it for totally different reasons than nefarious ones everyone is paranoid about...not to mention why is everyone ONLY whining about windows 10...apple is and has been doing this too and as i mentioned your banks and your credit card company and your loyalty clubs have been doing it for longer ...i am just saying Microsoft is late to the game and everyone is only pointing fingers at them alone

[steven36]

lots of paranoia but for some reason the hate only goes to microsoft...does anyone really think apple was not doing this for years and years too...it is called target marketing and everytime you use your credit card, bank card or any loyalty program of any stripe you are being tracked...aka spied on... live with it or get off the grid... they are looking to spy on you to see what you are doing....NOT so much and to say oh my look at what he or she does but just to target you in order to sell you more shite you do not need or want to buy

it pretty obvious its not just paranoia when people like spybot step up to the plate . Witch has been fighting spyware for 15 years ,One the 1st companies to ever help me remove spyware. by the way none of these tools cost any money at all there free . I respect Microsoft's decision to collect data but they should give the user a choice too really opt out if they dont want too partake in it . fact is you can opt out of every setting they give and it still collects data. They dont respect my rights so I must take matter into my own hands.

Windows10 is just like Kazaa or the old IMesh witch gives you a something for free but bundles it with spyware and millions of people installed these programs to download songs and stuff and infected themselves with spyware . But even back then I was smart enough to use light versions of program were reverse engineers removed all the icky spyware .

Same Old marketing ploy done by software companies time and time again every since there was a internet as we know it . History keeps repeating its self over and over . And its in human nature to be gullible enough to fall for it over and over again. And even try to ignore the fact it even exist. (Denali is not just a river in Egypt) This is not my first rodeo maybe it is yours ? :lol: :P

i never said they are not spying and gathering info...but they are doing it for totally different reasons than nefarious ones everyone is paranoid about...not to mention why is everyone ONLY whining about windows 10...apple is and has been doing this too and as i mentioned your backs tour credit card company and your loyalty clubs have been doing it for longer ...i am just saying Microsoft is late to the game and everyone is only pointing fingers at them alone

I dont use apple so this dont concern me or do I care what they do . Being cautious like me and being paranoid like some is 2 different things . I avoid as much stuff as possible that collects data. But i use windows so this concerns me because even if I install windows 8.1 back i even have to prevent data collecting because they dont respect my rights even you're own country is investigating this .