Earlier quoted context omitted.
What I want is Little Snitch on steroids built into the OS where every process, You cannot trust an OS you cannot build yourself. That's why I see Linux as the only option for professionals and privacy minded people.
Yeah, this is a strange take to me. Akin to catching the fox guarding your hen house eating the hens and reacting by having the fox install and monitor a security camera for the hen house. The problem is still the fox and he'll just turn the camera off when he wants the hens.
Microsoft is phoning home the content of PowerPoint slides
281–290 of 391 posts
Re: Microsoft is phoning home the content of PowerPoint slides
#282Earlier quoted context omitted.
For Windows, check out simplewall, it does (almost) exactly that. https://github.com/henrypp/simplewall
It uses the windows firewall. Do I trust Windows firewall to block itself? NO!
Re: Microsoft is phoning home the content of PowerPoint slides
#283There's a pervasive lack of precision in privacy discussions. There's a difference between a network request that does some computation on the server side, one that does the same but may log errors and increment counters, and one that actually stores the data temporarily or for a long time. And in the last case, there's a difference between the data being nigh-impossible for internal employees to access (perhaps only…
Do you make the same differentiation when it comes to what Chinese companies may collect from the computers of American companies? Especially this part: > there's a difference between the data being nigh-impossible for internal employees to access (perhaps only used as input for other automated systems), and data with few controls.
A Chinese software vendor could do as much as sending your keystrokes for autocomplete you bet it will be front page news on Reddit and here with every comment reminding me about Xinjiang and 1989.
But Microsoft could upload the entirety of your hard drive and we would find apologists like OP rationalizing away the behavior.
I’m not convinced either governments are not in kahoots with private companies.
Re: Microsoft is phoning home the content of PowerPoint slides
#284Why doesn’t this article include the packet capture or whatever data he has that shows exactly what’s being sent?
One possible reason is that the actual data that's being sent is a lot less nefarious than is being implied. I've seen people vehemently argue that merely checking if a new version is available amounts to horrible invasive unethical tracking. You might want to turn that off for the truly paranoid situations, and that's fair, but it's of course completely different than "sends all your data". I don't have a Windows ma…
Hahaha, I've been there. And in an open-source code base, no less! We were using a closed-source library to actually send the version data up to the telemetry service we were using, but the payload and how we were handing it to that library were clearly defined in our own source. We even had to request a correction to a major IT news outlet because they had some vague language about "and no one could possibly know what kind of telemetry $BigCorp is sending, and it can't even be disabled". Both were demonstrably false: the payload was visible in OSS, and we had a well-documented env variable that you could use to disable the version telemetry before you first start of the application (which was linked from the graphical installers as well).
In this case, I think the entire content payload is probably being sent up--if you've ever used this PowerPoint feature, it's clear that they're suggesting icons and themes based on the words in your slide--but there's a clear as day prompt explaining what's going on when you first enable the feature.
I'd _prefer_, of course, that Microsoft figure out how to bring the model onto the device so you _don't_ have to go off-box. Google managed to pull this off with the Now Playing feature on their newer Pixel devices[1]. But it is really hard, and I do somewhat understand the business aspect of "that's our secret sauce, we don't want to give it away".
[1] https://www.androidpolice.com/if-your-pixel-cant-tell-what-s...
Re: Microsoft is phoning home the content of PowerPoint slides
#285It appears that MS is using our data to continuously train their large DL networks to provide these recommendations...so what is to prevent a bad actor from cunningly constructing an asset that may trick the recommender into leaking insights from another company (or possibly poisoning the network itself)? These adversarial attacks have been well documented in academia.
Re: Microsoft is phoning home the content of PowerPoint slides
#286I can't say whether the blog is correct or not, as I haven't seen the actual network traffic, but there are privacy controls that the author probably hasn't configured [1]. If it was configured correctly, Designer wouldn't even be available. So it's not as though every user of PowerPoint will have their data collected by Microsoft. [1] https://learn.microsoft.com/en-us/deployoffice/privacy/manag...
Still, Designer should display a notice that this is happening on first use (and until the user checks “Don’t show this anymore”, and maybe auto-turn that on again once a year), because a normal user doesn’t necessarily realize that this is happening. You shouldn’t have to be an IT/Office expert to have your privacy being respected.
Re: Microsoft is phoning home the content of PowerPoint slides
#287Earlier quoted context omitted.
What happened in 2014? Also someone told me here that LS should be considered harmful.
It's complicated, but the 2013-2014 years were when the bulk of the Snowden leaks were hitting the internet, and people were starting to dig up really suspicious stuff relating to all big tech companies, not just Apple. However, Apple was still among the companies compliant with PRISM, the NSA's newly established surveillance/tracking effort that also roped in Microsoft, Google, AOL and any other major service provid…
Re: Microsoft is phoning home the content of PowerPoint slides
#288Earlier quoted context omitted.
Joking aside I think we are getting close, Photon did a lot to bridge with Windows in terms of gaming, GUI is often times at least on par with Windows/MacOS, if not better (obviously thats subjective), and reliability/performance has already been there for a while. That being said, I still think theres more work to do, and arguably the hardest work is ahead.
Linux is on par with Windows kind of but not really. It's a little ghetto For example, desktop environments are just wonky and buggy most the time, random games don't work, WINE is the worst piece of software on the planet, drivers suck, other random weird issues.
Re: Microsoft is phoning home the content of PowerPoint slides
#289Earlier quoted context omitted.
> If to use the feature you are explicitly asked to turn it on, with an option to view a privacy policy, that is “blatantly obvious”. I disagree. > How, exactly, would you want it to be more obvious? A big red box every time the feature is mentioned in the help site? Yes, more or less. I would be perfectly happy with a single red box at the top that says this feature sends the contents of your slide to Microsoft. I a…
> Yes, more or less. I would be perfectly happy with a single red box at the top that says this feature sends the contents of your slide to Microsoft. As a user I'd like the ability to opt-in/out of this. I much prefer a privacy policy that captures all of it for the app. Otherwise, I have red boxes showing up non-stop using most apps. Can you imagine the sheer number of red boxes you'd get for Netflix the first few…
Of course it's impractical in today's environment, but I think we'd be in a much better place if we'd established early on the idea that a piece of software that massively violates your privacy (which is to say, all of them, nowadays) comes laden with a terrifying number of red boxes when you read its privacy policy.
Re: Microsoft is phoning home the content of PowerPoint slides
#290Earlier quoted context omitted.
That assumes people actually have the capacity to examine the source to do so and make the requisite adjustments. The real answer IMHO is to control your networking stack outside of your computer instead. Firewall that and you have way better security
How do you do packet inspection when they're all encrypted?