Windows 10 traffic - security concern

[Bert]

http://www.disclose.tv/news/a_terrifying_traffic_analysis_of_windows_10/121544

[Jon]

It will be interesting to see when someone comes out with a detailed analysis of all this (there seems to be some questions over this article). Microsoft really know how to create bad PR for themselves, don't they? I'm trying to create a "corporate" image at the moment with all the unneeded settings disabled. There are GPOs for about two privacy settings, everything is registry hacks. That's appalling.

What is interesting is that 90% of this stuff existed in Windows 8.1 but because no-one ever took notice of it we didn't have these revelations.

[JohnOne]

What is interesting is that 90% of this stuff existed in Windows 8.1 but because no-one ever took notice of it we didn't have these revelations.

Perhaps that was not incidental.

[iamtheky]

for every os and software ever, since ever.

1) fire up a fresh image in a sandbox

2) let it sit for a day

3) go block every ip that the machine talked to on the host firewall and your network firewall

 

Sure they are a bag of dicks for not providing a handy mechanism to disable it, but so are adobe/oracle/cisco/google/mozilla/yourmother    We run them all through quarantine.

[Jon]

When I worked at MS we used to have to complete privacy course after privacy course each quarter. It was so important to them. I don't know what's happened.

[iamtheky]

I think the toughest one for me to stomach is 'Skype for Business'.  We havent gone o365 yet, Im waiting to see that light up our SIEM.

Edited August 22, 2015 by boththose

[JohnOne]

for every os and software ever, since ever.

1) fire up a fresh image in a sandbox

2) let it sit for a day

3) go block every ip that the machine talked to on the host firewall and your network firewall

 

Sure they are a bag of dicks for not providing a handy mechanism to disable it, but so are adobe/oracle/cisco/google/mozilla/yourmother    We run them all through quarantine.

It's a good notion, but microsoft could just covertly change the IP's or domains it uses in any update it wanted.

The whole reason I never got windows 8 is because I did not want a mobile phone on my PC, I was really hoping that windows 10 would not be that too. It's a real shame. I'll be using windows 7 until it's dead and start learning some linux OS in the meantime.

[iamtheky]

Win 8.1 is pretty clean, it takes a minimal amount of effort to stop all updates from the internet in gp (stopping the calls home is still a firewall entry).  The risk of them breaking everyone who whitelisted the last update address, just to trick the people who have it blocked, is minimal.  As long as you are gentle, the public will give up the butt.

Edited August 22, 2015 by boththose

[Bert]

http://www.pcworld.com/article/2978239/windows/microsoft-slips-user-tracking-tools-into-windows-7-8-amidst-windows-10-privacy-storm.html

 

[Chimaera]

Ive been using this to help with the known problems so far

It may not cover everything but seems to be a ok for a one use out the box solution

http://www.oo-software.com/en/shutup10

[kaesereibe]

xp-antispy for Win10 will be coming soon (beta atm)

Edited November 27, 2015 by kaesereibe

[Sumitranjan]

Well it is better to keep a check on the Unsuccessful Login attempts in order to keep the data secure. I had to face this problem once and got hacked. With  Event Log Explorer it is easier to explore who logged on and when

[iamtheky]