Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Windows 10 Enterprise ignores various privacy settings

twitter.com

Post reply on HN
Print view View original

101–110 of 269 posts

Re: Windows 10 Enterprise ignores various privacy settings

#101

Post by flukus »

fl0wenol wrote: post #58
DonkeyChan wrote: post #15

MS Support consistently and repeatedly told me that enterprise allowed me to disable this stuff. If I can't control the egress then I can't verify PCI compliance. I've already had to revert a client to Win 7 because they failed a PCI compliance audit using Win 10 Enterprise. Which, by the way, is very expensive for small businesses. Win 10 Enterprise isn't viable for business. I have a bunch of small business clients…

Use LTSB. Microsoft tries to scare you into not using it because it doesn't support the Windows store or Edge or have telemetry or any of that fun stuff. But they keep coming out with respins of it to otherwise keep feature parity with CB Enterprise. A 2017 LTSB based on 1703 should be out soon.

> Microsoft tries to scare you into not using it because it doesn't support the Windows store or Edge or have telemetry or any of that fun stuff.

Scare me? It sounds like those awesome stripped down versions of XP that pirates removed all the cruft from back in the day.

Re: Windows 10 Enterprise ignores various privacy settings

#102

Post by omegaham »

sathackr wrote: post #94
omegaham wrote: post #92

Earlier quoted context omitted.

> 5. PUTTING AN ISO ON A USB DRIVE dd if=myiso.iso of=/dev/sdx && sync Be careful! :)

I've tried that -- it's what I would think would work, but the few times I did, it didn't work. I don't recall what I was testing with, but it was likely either a Windows OS ISO, or a VMWare ESXi ISO. I haven't tried since then, I just go boot up the Windows 7 desktop I keep just for this purpose and use Rufus. I think it only works that way with ISOs made in a way to support it?

Huh, I guess it is a problem with Windows OS ISOs. I'll test this posted solution[1] when I have some time later this week.

[1] https://arstechnica.com/civis/viewtopic.php?p=30645773&sid=6...

Re: Windows 10 Enterprise ignores various privacy settings

#103

Post by flukus »

DonkeyChan wrote: post #18
oridecon wrote: post #11

Since the first release of W10 several registry keys and policies have changed in very confusing ways. I can't remember what exactly but I had to change my personal scripts several times based on the changelog of other tools. Privacy and settings like default apps were also reverted (reset to default) when you updated. They installed some apps like Candy Crush Saga on Enterprise. I don't see that much of a problem he…

I can't agree with this more. A client straight up failed a PCI compliance audit, replete with daily fines, for using 10 Enterprise. They decided to pursue legal measures against MS for false claims. I really hope this gets elevated because reverting to win 7 is a solution with a short life span. The other solution is to rebuild infrastructure on top of a different platform but that's prohibitively expensive.

> The other solution is to rebuild infrastructure on top of a different platform but that's prohibitively expensive.

I really don't have a lot of sympathy for companies that lock themselves in to a proprietary platform.

Re: Windows 10 Enterprise ignores various privacy settings

#104

Post by yjftsjthsd-h »

weeks wrote: post #87
userbinator wrote: post #80

Earlier quoted context omitted.

but also the version Microsoft discourages people from adopting. Not surprising, because MS wants to push all the features (and ads, telemetry, etc.) to users regardless of whether they actually want them. Indeed I wish MS would just keep supporting XP as the "Windows LTSB" with nothing but critical security patches, and keep doing it until the OS becomes nearly invulnerable to remote attacks.

Playing whack-a-mole with memory corruption vulnerabilities isn't how you create a secure operating systems.

The OpenBSD folks seem to be doing alright.

Re: Windows 10 Enterprise ignores various privacy settings

#105

Post by sqldba »

nthcolumn wrote: post #26
JumpCrisscross wrote: post #9

I run Windows in a Parallels VM on my Mac. This VM needs to, on occasion, connect to the Internet. Any way I can--from the outside, without needing to trust Windows--be forced to whitelist what the VM is and isn't allowed connect to?

outside /etc/hosts redirect to 0.0.0.0 inside (c:\Windows\System32\Drivers\etc\hosts) assuming it is being respected, but how to find list? is very difficult I think, as can change by Redmond c&c server at no notice,

It's not respected.

Re: Windows 10 Enterprise ignores various privacy settings

#106

Post by cwyers »

mjevans wrote: post #100
brainfire wrote: post #74

Earlier quoted context omitted.

It's pretty basic Windows GPO knowledge. Lots of them work this way.

It's a pretty broken configuration system that makes it needlessly difficult to do things the correct way.

It's a pretty shoddy security researcher that doesn't read the documentation before posting a lot of falsehoods to Twitter.

Re: Windows 10 Enterprise ignores various privacy settings

#107

Post by sathackr »

mjevans wrote: post #100
brainfire wrote: post #74

Earlier quoted context omitted.

It's pretty basic Windows GPO knowledge. Lots of them work this way.

It's a pretty broken configuration system that makes it needlessly difficult to do things the correct way.

Agreed.

It should read "unconfigured" -- not "disabled"

Some of the GPO settings make me feel like I'm reading a contract written by a lawyer out to get me.

I don't have any concrete examples, but I swear I've stumbled across settings like this :

Setting - Disable Windows Error Reports.

Description: Disable the submission of error reports

Options: Unconfigured - Use client settings.

Disable - Send only minimal information in error reports.

No - Do not send any error reports.

Yes - automatically send full error reports.

So when you Enable the "disable windows security reports" option, it Enables sending of the security reports, and when you "Disable" the option, it still sends reports.

Many of them are extremely confusingly worded like this. It takes several reads to figure out which option actually disables it.

edit: fix formatting

Re: Windows 10 Enterprise ignores various privacy settings

#108

Post by sathackr »

omegaham wrote: post #102
sathackr wrote: post #94

Earlier quoted context omitted.

I've tried that -- it's what I would think would work, but the few times I did, it didn't work. I don't recall what I was testing with, but it was likely either a Windows OS ISO, or a VMWare ESXi ISO. I haven't tried since then, I just go boot up the Windows 7 desktop I keep just for this purpose and use Rufus. I think it only works that way with ISOs made in a way to support it?

Huh, I guess it is a problem with Windows OS ISOs. I'll test this posted solution[1] when I have some time later this week. [1] https://arstechnica.com/civis/viewtopic.php?p=30645773&sid=6...

That looks like it would probably work -- it looks a lot like one of the methods I used on Windows --

diskpart

> select disk 2

> clean

> create partition primary

> format fs=fat32 quick

> active

> assign

> exit

mount ISO and drag/drop contents of ISO to drive.

But I think that method stopped working with Win8/10, maybe something to do with UEFI/Secure Boot?

edit: fix formatting

Re: Windows 10 Enterprise ignores various privacy settings

#109

Post by Bakary »

Sir_Cmpwn wrote: post #77
eropple wrote: post #73

Earlier quoted context omitted.

I've been using Linux as a daily driver for fifteen years. I have shot my share of trouble and the next two guys' too. It's not a good experience . It's bad . Even when things aren't breaking left, right, and sideways (which, to be clear, definitely happens less often today than five years ago, with the corollary that that breakage is usually something a mere mortal can't do too much about), it feels kinda...well, sh…

It's not really my thing, but Plasma seems like a really solid desktop. What are your complaints with it? And I'll raise this point again: >You and people like you are the reason that it's not as good as it could be. I use Linux as my daily driver and it works extremely well. But if you continue to let it languish with a small market share because you can't be bothered to troubleshoot it for 10 minutes or maybe live…

From my perspective as a normal user the trade-off isn't worth it. The pain of using Linux is very real, and the benefits you describe are nebulous and uncertain, considering the amount of time people spend on their computers.

I tried really hard to make it work. If it only took 10 minutes of troubleshooting, then it would have been fine, but it was instead hours of crawling through forums.

Ultimately, this is a theory of mind issue, since proficient users and developers can't quite seem to grasp how regular joes use the software. Or if they do grasp it, they react with contempt instead of trying to fix the issue. Without making it REALLY convenient there is simply no way it will gain more than a small market share. Whether the contempt is justified is irrelevant if the goal is to have the Year of the Linux Desktop.

Re: Windows 10 Enterprise ignores various privacy settings

#110

Post by kevingadd »

withinrafael wrote: post #67

Most of his configuration is invalid, due to his misconfiguration of group policy. For example, he disabled the Teredo policy. But here's the help text for that policy: "If you disable or do not configure this policy setting, the local host settings are used." He made this error countless times, rendering the entire experiment a failure. Oops.

It's a huge bummer that the (wildly implausible) results he got didn't discourage him from spreading them widely. He later said they were 'unexpected' and he was working on verifying them from scratch reproducibly, but that comes only after misinformation about telemetry is spreading around the web. :(
Post reply on HN