Live data from Hacker News

Windows 10 Enterprise ignores various privacy settings

twitter.com

21–30 of 269 posts

Re: Windows 10 Enterprise ignores various privacy settings

#21

Earlier quoted context omitted.

I don't think they do it on purpose. I think Windows is just a patchwork of cruft at this point. I'm sure the Enterprise version shares all the code with the non Enterprise versions which have all the spying ... analytics... enabled, so bugs are bound to happen that let this escape into the Enterprise version.

The fact that they renamed the telemetry setting from "Off" to "Security" is no coincidence.

Point taken...

Re: Windows 10 Enterprise ignores various privacy settings

#22

Another year of another decade; Microsoft as dishonorable as ever.

But look, then allow you to run their database on Linux now!!

It's proven time and time again that if the entire org isn't behind something, the good deeds of some get vastly overshadowed by these kind of games.

Re: Windows 10 Enterprise ignores various privacy settings

#24
post #12

I read that Windows 10 uses peer-to-peer file sharing with any other Windows hosts it locates on the same network. This way each Windows computer does not have to connect to Microsoft to download, e.g., the Windows 10 "upgrade". It seems like this could also be used to evade attempts by users to block such downloads by blocking Microsoft IP addresses. Windows 10 could propagate itself through a network of Windows com…

Windows has done this forever with enabled apps like SCCM. I think it was released in 2008. It allowed us to remove hundreds of local depot servers unless there was an SLA on reimaging.

Yes, but you needed to configure that. This comes enabled by default. And on Windows Home/Pro, it downloads updates from third-parties on the internet too.

Re: Windows 10 Enterprise ignores various privacy settings

#25
post #12

I read that Windows 10 uses peer-to-peer file sharing with any other Windows hosts it locates on the same network. This way each Windows computer does not have to connect to Microsoft to download, e.g., the Windows 10 "upgrade". It seems like this could also be used to evade attempts by users to block such downloads by blocking Microsoft IP addresses. Windows 10 could propagate itself through a network of Windows com…

Yes, this is called "delivery optimization" and it's on by default. By default, Windows Enterprise/Education only pull updates from Microsoft and the local domain, while Windows Home/Pro will also pull updates from other peers on the internet. You can turn it off, or disable pulling from internet peers, but given the OP, who knows if MS actually respects that setting? I guess we have to roll the dice now. https://pri…

Maybe they changed it, but I just checked my fresh install of Pro build 1703 from MSDN and it was disabled.

Re: Windows 10 Enterprise ignores various privacy settings

#26

I run Windows in a Parallels VM on my Mac. This VM needs to, on occasion, connect to the Internet. Any way I can--from the outside, without needing to trust Windows--be forced to whitelist what the VM is and isn't allowed connect to?

outside /etc/hosts redirect to 0.0.0.0 inside (c:\Windows\System32\Drivers\etc\hosts) assuming it is being respected, but how to find list? is very difficult I think, as can change by Redmond c&c server at no notice,

Re: Windows 10 Enterprise ignores various privacy settings

#27

I run Windows in a Parallels VM on my Mac. This VM needs to, on occasion, connect to the Internet. Any way I can--from the outside, without needing to trust Windows--be forced to whitelist what the VM is and isn't allowed connect to?

IIRC Parallels in NAT ("Shared Network") mode will respect macOS's PF firewall. I'm not sure if the same is true for bridged virtual adapters.

Re: Windows 10 Enterprise ignores various privacy settings

#28
This is a little chilling. As a home user on Win7, I've avoided Win10, but thought I'd eventually upgrade, just to enjoy newer hardware. I'd thought I could just invest in Enterprise, about $100 these days, and be able to control the more intrusive aspects. Guess not. On a semi-related note, I'm using uMatrix, and it never ceases to amaze me how promiscuous every single web site is these days. It's not just in Soviet Russia. You don't use the internet. The internet uses you.

Re: Windows 10 Enterprise ignores various privacy settings

#29
post #12

I read that Windows 10 uses peer-to-peer file sharing with any other Windows hosts it locates on the same network. This way each Windows computer does not have to connect to Microsoft to download, e.g., the Windows 10 "upgrade". It seems like this could also be used to evade attempts by users to block such downloads by blocking Microsoft IP addresses. Windows 10 could propagate itself through a network of Windows com…

Yes, this is called "delivery optimization" and it's on by default. By default, Windows Enterprise/Education only pull updates from Microsoft and the local domain, while Windows Home/Pro will also pull updates from other peers on the internet. You can turn it off, or disable pulling from internet peers, but given the OP, who knows if MS actually respects that setting? I guess we have to roll the dice now. https://pri…

malware delivery optimization hehe

Re: Windows 10 Enterprise ignores various privacy settings

#30

Earlier quoted context omitted.

Yes, this is called "delivery optimization" and it's on by default. By default, Windows Enterprise/Education only pull updates from Microsoft and the local domain, while Windows Home/Pro will also pull updates from other peers on the internet. You can turn it off, or disable pulling from internet peers, but given the OP, who knows if MS actually respects that setting? I guess we have to roll the dice now. https://pri…

Maybe they changed it, but I just checked my fresh install of Pro build 1703 from MSDN and it was disabled.

Odd, their docs say it's on by default.

https://docs.microsoft.com/en-us/windows/deployment/update/w...

Post reply on HN