Windows 10 Spying Functions
The extent of W10's spying is even worse than most of us could have imagined ….. Now we know why it was “free”. Get a beverage, this is a rather lengthy post!
With this sort of disclosure, perhaps there will be enough reaction that will convince Microsoft to roll back the invasive spying. Seems that in regards to spyware, Enterprise may have some edge over the other versions.
30 Ways Your Windows 10 Computer Phones Home to Microsoft
http://www.howtogeek.com/224616/30-ways-windows-10-phones-home/
Windows 10 Is Spying On You: Here’s How To Stop It
http://www.rockpapershotgun.com/2015/07/30/windows-10-privacy-settings/
How to disable Telemetry and Data Collection in Windows 10
http://winaero.com/blog/how-to-disable-telemetry-and-data-collection-in-windows-10/
How to protect yourself against Windows 10’s controversial new Wi-Fi Sense feature
There is absolutely no question that the response to Windows 10 has been overwhelmingly positive. Yes, people are running into some problems after they update — here are some of the most common Windows 10 problems and solutions — and yes, there are some privacy concerns that you should absolutely pay attention to if you don’t want Windows 10 to spy on you. But for the most part it has been smooth sailing.
Well… sort of.
Microsoft added a new feature to Windows 10 called Wi-Fi Sense. It’s a very smart feature that allows trusted users to connect to a Wi-Fi network without needing to know the network’s password, and it’s the first time that technology like this has been available so widely.
That said, there are some obvious and serious security implications that have been a big concern for many of Windows 10’s early adopters and critics.
First things first: What is Wi-Fi Sense? “Wi‑Fi Sense automatically connects you to Wi‑Fi, so you can get online quickly in more places,” Microsoft wrote on its website. “It can connect you to open Wi‑Fi hotspots it knows about through crowdsourcing, or to Wi‑Fi networks your contacts have shared with you by using Wi‑Fi Sense.”
The follow excerpt from Microsoft’s Wi-Fi Sense FAQ page will fill in a few key blanks:
Wi‑Fi Sense connects you to Wi‑Fi networks around you. It can do these things for you to get you Internet access:
Automatically connect you to open Wi‑Fi networks it knows about by crowdsourcing networks that other people using Windows have connected to. These are typically open Wi‑Fi hotspots you see when you’re out and about.
Automatically connect you to Wi‑Fi networks that your Facebook friends, Outlook.com contacts, or Skype contacts have shared with you after you’ve shared at least one network with your contacts. When you and your contacts share Wi‑Fi networks with each other, you give each other Internet access, but don’t get to see each other’s passwords. No networks are shared automatically. When you first connect to a network that you decide to share, you’ll need to enter the password, and then select the Share network with my contacts check box to share that network.
The initial settings for Wi‑Fi Sense are determined by the options you chose when you first set up your PC with Windows 10. You can change your Wi‑Fi Sense settings any time by selecting Settings > Network & Internet > Wi‑Fi > Manage Wi‑Fi settings, and then changing one or both of these settings under Wi‑Fi Sense:
Connect to suggested open hotspots
Connect to networks shared by my contacts
There are two main problems here. First, Wi-Fi Sense means people you don’t know can connect to your secure Wi-Fi network without even knowing the password. Second, Wi-Fi Sense creates a direct connection between two computers that the user of the host PC does not initiate. Today, that connection is safe and secure… but as a version of Murphy’s law modified for the digital age states, anything that can be hacked, will be hacked.
So let’s cut to the chase: How can you disable and block Wi-Fi Sense?
There are a couple of things you’ll need to do. First, on your Windows 10 computer, open the PC’s Settings and then click Network and Internet followed by Wi-Fi. Under Manage Wi-Fi, disable all of Wi-Fi Sense’s features.
Next, you’ll have to protect your home Wi-Fi network and ensure that other users with Wi-Fi Sense cannot connect to it. In order to do this, you’ll have to rename your network’s SSID so that it ends with “_optout.” So, for example, if your network’s name right now is “MyISPstinkz,” you’ll have to rename it to “MyISPstinkz_optout.”
Alternatively, you can set up a guest network that visitors will be able to access, but you’ll need a router capable of supporting multiple wireless networks.
A more complete "to do" list translated from Russian (I think).
In order to prevent all spying, it is necessary to change dozens of items:
Before installation
• Do not use the Express setup. Use manual config. as opposed to merely accepting the defaults.
• Do not use the Microsoft account. Create a local one.
After installation
• Start> Settings> Privacy, cut down EVERYTHING!
• In the same section reviews the diagnosis and choose Never / Background Information.
• Settings> Software Update> Advanced Options> Select how to obtain an update, and remove the first item
• Destroy Cortana. Just click on the search icon next to the start-up and later in the settings.
• (Optional) You can also turn off the search network.
• Rename your PC. Search> Type "on the computer"> Rename
For advanced
• Right-click on Start> Command Prompt (Administrator)
Register (it is possible to copy, Win10 finally is able)
sc delete DiagTrack
sc delete dmwappushservice
C: \ ProgramData \ Microsoft \ Diagnosis \ ETLLogs \ AutoLogger \ AutoLogger-Diagtrack-Listener.etl
• Next Group Policy. Run (win + R)> gpedit.msc (the admin rights needed) go at Computer Configuration> Administrative Templates> Components Windows> Build data collection and preliminary assembly> Allow telemetry - Disabled
This is true for versions of Enterprise. But Pro users will also find it helpful.
• In the same place in the policies of the Computer Configuration> Administrative Templates> Components Windows> OneDrive> Disable OneDrive file storage> Turn
• Computer Configuration> Administrative Templates> Components Windows> Windows Defender> knocked him> Enabled. I have to say, I have not found this item at home. Therefore I turned off in the registry.
the path HKEY_LOCAL_MACHINE \ SOFTWARE \ Policies \ Microsoft \ Windows Defender option DisableAntiSpyware change the value to 1
• Through the registry editor (Run> regedit) are on the path HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Policies \ DataCollection, AllowTelemetry parameter is set to zero.
• prescribes nishtyaki in Hosts. Hands. Right on Start> Command Prompt (administrator), write to notepad C: \ Windows \ System32 \ drivers \ etc \ hosts, and enter all hosts addresses:
127.0.0.1 localhost
127.0.0.1 localhost.localdomain
255.255.255.255 broadcasthost
:: 1 localhost
127.0.0.1 local
127.0.0.1 vortex.data.microsoft.com
127.0.0.1 vortex-win.data.microsoft.com
127.0.0.1 telecommand.telemetry.microsoft.com
127.0.0.1 telecommand.telemetry.microsoft.com.nsatc.net
127.0.0.1 oca.telemetry.microsoft.com
127.0.0.1 oca.telemetry.microsoft.com.nsatc.net
127.0.0.1 sqm.telemetry.microsoft.com
127.0.0.1 sqm.telemetry.microsoft.com.nsatc.net
127.0.0.1 watson.telemetry.microsoft.com
127.0.0.1 watson.telemetry.microsoft.com.nsatc.net
127.0.0.1 redir.metaservices.microsoft.com
127.0.0.1 choice.microsoft.com
127.0.0.1 choice.microsoft.com.nsatc.net
127.0.0.1 df.telemetry.microsoft.com
127.0.0.1 reports.wes.df.telemetry.microsoft.com
127.0.0.1 wes.df.telemetry.microsoft.com
127.0.0.1 services.wes.df.telemetry.microsoft.com
127.0.0.1 sqm.df.telemetry.microsoft.com
127.0.0.1 telemetry.microsoft.com
127.0.0.1 watson.ppe.telemetry.microsoft.com
127.0.0.1 telemetry.appex.bing.net
127.0.0.1 telemetry.urs.microsoft.com
127.0.0.1 telemetry.appex.bing.net:443
127.0.0.1 settings-sandbox.data.microsoft.com
127.0.0.1 vortex-sandbox.data.microsoft.com
127.0.0.1 survey.watson.microsoft.com
127.0.0.1 watson.live.com
127.0.0.1 watson.microsoft.com
127.0.0.1 statsfe2.ws.microsoft.com
127.0.0.1 corpext.msitadfs.glbdns2.microsoft.com
127.0.0.1 compatexchange.cloudapp.net
127.0.0.1 cs1.wpc.v0cdn.net
127.0.0.1 a-0001.a-msedge.net
127.0.0.1 statsfe2.update.microsoft.com.akadns.net
127.0.0.1 sls.update.microsoft.com.akadns.net
127.0.0.1 fe2.update.microsoft.com.akadns.net
127.0.0.1 65.55.108.23
127.0.0.1 65.39.117.230
127.0.0.1 23.218.212.69
127.0.0.1 134.170.30.202
137.116.81.24 127.0.0.1
127.0.0.1 diagnostics.support.microsoft.com
127.0.0.1 corp.sts.microsoft.com
127.0.0.1 statsfe1.ws.microsoft.com
127.0.0.1 pre.footprintpredict.com
127.0.0.1 204.79.197.200
127.0.0.1 23.218.212.69
127.0.0.1 i1.services.social.microsoft.com
127.0.0.1 i1.services.social.microsoft.com.nsatc.net
127.0.0.1 feedback.windows.com
127.0.0.1 feedback.microsoft-hohm.com
127.0.0.1 feedback.search.microsoft.com