Live data from Hacker News

I noticed some disturbing privacy defaults in Windows 10

jonathan.porta.codes

71–80 of 596 posts

Re: I noticed some disturbing privacy defaults in Windows 10

#71

I dont' know why so many people are surprised by the Cortana data vacuum. Doesn't Siri send everything you say to it to Apple or a "trusted partner"? Why would Cortana be any different? The keylogger and Start menu ads are just creepy though. I shouldn't have to opt-out of targeted ads INSIDE MY OS.

What do start menu ads look like?

A little "Recommended App" tile underneath your "Most Used" list.

Re: I noticed some disturbing privacy defaults in Windows 10

#72
post #59

Earlier quoted context omitted.

I'm not talking about encryption keys. I'm talking about the data itself. Sitting on my harddrive, as it is. As I understand it microsoft is saying that they could siphon data from my computer if they deemed it necessary. Maybe that's an adversarial reading of their privacy statement[1]. But it clearly speaks of accessing files in private folders. [1]: https://www.microsoft.com/en-us/privacystatement/default.asp...

I believe that you are mistaken. Could they turn over your BitLocker recovery key to the authorities that would then use it to decrypt your HDD that they have already taken from you? Yes. Are they going to reach out over the internet and take your data? No. They are not going to do that. I follow this stuff really closely. I promise I haven't seen or heard of a capability where they can remotely take data from your m…

There are two approaches: give someone a pile of power over you and trust them not to abuse it, or never give them that power in the first place. Given the repeated demonstrations of what can and does go wrong with the former...

Re: I noticed some disturbing privacy defaults in Windows 10

#73
post #9

Earlier quoted context omitted.

> and why is it on by default? Because Cortana would be useless without it and that's a big user-facing feature of Windows 10.

How about a box that shows up the first time you try to invoke Cortana, asking if you want to turn this feature on.

If you have a local account you have to sign into a microsoft account (changing from local) to get Cortana.

Re: I noticed some disturbing privacy defaults in Windows 10

#74
post #4

This is why i think Tim Cook is genius for marketing Apple as the anti "We sell all your data and spy on you" companies.

Apple just spies on you, they're vertically integrated so there's no need to sell the data.

What’s their motive? What’s their pay-off? Where is their benefit in that?

Re: I noticed some disturbing privacy defaults in Windows 10

#75

I dont' know why so many people are surprised by the Cortana data vacuum. Doesn't Siri send everything you say to it to Apple or a "trusted partner"? Why would Cortana be any different? The keylogger and Start menu ads are just creepy though. I shouldn't have to opt-out of targeted ads INSIDE MY OS.

What do start menu ads look like?

I believe it suggests an app from the store to you sometimes.

Re: I noticed some disturbing privacy defaults in Windows 10

#76
post #30

I like how they put that "Customize Settings" Link down there. I missed it the first time I did it completely. Nice job design devils.

How exactly did we reach a stage when this is acceptable behavior for respectable company? Such shady practices should have never become mainstream.

Re: I noticed some disturbing privacy defaults in Windows 10

#77

I dont' know why so many people are surprised by the Cortana data vacuum. Doesn't Siri send everything you say to it to Apple or a "trusted partner"? Why would Cortana be any different? The keylogger and Start menu ads are just creepy though. I shouldn't have to opt-out of targeted ads INSIDE MY OS.

To be fair, Apple needs that messaging for Siri because they outsource the speech recognition to a 3rd party (Nuance, I think). It's not like your phone is doing all of that legwork locally. I'll bet it's the same deal with Google Now and Cortana.

Re: I noticed some disturbing privacy defaults in Windows 10

#78

Earlier quoted context omitted.

OK. What I'm trying to say is that backing up to OneDrive is optional. You get the choice. You can protect the key with a TPM or a smart card...It's not an all or nothing thing. You have options there, if you are interested. The other thing is that it sounds like a lot of privacy minded people can't trust BitLocker despite any number of assurances from MS or code reviews by third parties. AND THAT'S OK. Use something…

> OK. What I'm trying to say is that backing up to OneDrive is optional. You get the choice. You can protect the key with a TPM or a smart card...It's not an all or nothing thing. You have options there, if you are interested. Except that the default is both insecure and privacy-violating.

It's insecure by a standard that you are setting. If they can demonstrate an audit log of every admin who has escalated their permission to logon to the container of your data and access it, including the files they accessed, would that be good? (Because they do that.)

Again privacy-violating by your, arguably, very narrow standard. I'm sorry friend, but you are stating these things as if there's no question as to what you say.

More accurately, you might say that there are higher privacy and audit-ability standards that you would require for your given situation or application. I wouldn't be able to argue with that at all.

Re: I noticed some disturbing privacy defaults in Windows 10

#79

This looks like all the same sort of stuff Google defaults you into on Android. I mean, not that it's any better because of that, but this is the state of things now. You're not going to find better unless you install FOSS. Unless you're ready to go full-in on one of the BSDs or a Linux-that-isn't-Ubuntu, navigating the waters of figuring out how to get a phone that has all the features you want with such an OS, figu…

If there are reasonable opt-outs, then you can have your cake and eat it without jumping ship to Linux/FOSS. (And, to a lesser extent, you might face the same problems there, e.g. with Ubuntu)

The problem is that with all platforms, the opt outs are hard to find and, even worse, hard to even know when the opt outs even exist.

Re: I noticed some disturbing privacy defaults in Windows 10

#80
post #41

Earlier quoted context omitted.

I made a similar suggestion in a somewhat related topic concerning browsers and was told this is bad UX so it shouldn't be done. Informing people of what's going on and giving them power over their choices is bad UX. Somehow.

UX people can't seem to agree on much of anything. On environments where permissions must be explicitly granted (like iOS), I've seen articles saying to go both ways: "ask for everything right at the start", and "ask immediately before use".

[deleted]
Post reply on HN