Groo The Wanderer
Regular
It's not like MS hasn't questionable things before but I'm really curious about this. Could you elaborate on this topic?
Anyway, what prevents you from having an <insert fave Linux/BSD> firewall between your Windows box and the router that drops those packets?
Sure. MS was caught stealing personally identifiable info in XP, they backpedaled, and did it again when they felt eyes were off. For Vista, they changed that bad behavior, they just encrypted it all so you couldn't tell what was being transmitted, and they flat out will not tell you what it is. I have asked.
http://news.softpedia.com/news/Forg...s-Harvest-User-Data-for-Microsoft-58752.shtml
There are a few dozen other links like this you can find if you want, but this is one of the easiest reads. All you do is install a windows box and put a logging firewall between you and the net. Log every packet and connection to known MS domains. If you want to be really scientific, install a clean box, turn off power management so it doesn't sleep, turn off all automatic updates and such checks, and let it sit in a corner for a month or three. There should be no traffic to MS.
Unfortunately, there is, and there is lots of it, to places, from processes that have no explanation of what they are sending and why. It is much harder to trace on the windows side, but if packets are going back and forth, packets are going back and forth.
What is in them? Beats me, modern encryption, even when implemented by MS, works well enough to keep me out. If you ask MS, they will deny it. If you show them the traces (I haven't done this, but others have), they will point to the EULA and say it is OK. They will NOT however tell you what you need to know.
To me, this is unacceptable. I require the ability, not want, but require, to control what comes in and out of my box. People talk to me because they know it will be confidential. I don't mind that MS needs some data, I understand that. I have to know what is going, and be able to manually decline to provide it. If that causes problems, I am OK with that as long as it is my choice.
MS also pushes things to your PC, and simply will not apologize or put rules into place to say they will not do it again. The main link is on Windows Secrets, but that is down right now, so I can't link it. There is a summary here:
http://www.seattlepi.com/business/331579_windowsupdates14.html
Note the MS response. That should scare you silly. They have been caught several times since doing this on other DLLs and programs. Scary. Really scary.
As for firewalling externally, that is what I would personally do, but MS is crafty there too. With the Broken OS and the Broken OS SP7, MS forces you to check in with an activation server. Last time I checked, it was once every 30 days, and after 90, it turned off. I know MS changed the terms on this several times, so it might be out of date.
If you firewall off the MS domains/IPs, Windows stops working. Wonderful, eh? If you open it up for short periods of time, MS dumps all the data as soon as you open it up. Crafty buggers. No, just buggers.
What they are saying is that if you don't allow them to steal your data, they will turn you off. That part they can do in the EULA for basically any reason, and you have no recourse. Why anyone would touch this festering pile of an OS is beyond me, but some people really are that stupid.
XP does work if you get a version that is pre-WGA, and don't install any of the WGA patches it asks for. This is what I do on the one XP box I have for testing. Yes, you could crack Vista/7, it is trivial, but why do I want to commit a felony to promote their products? Screw that, I put my time and effort into Linux now where I can make a difference. MS is no longer worth the trouble.
-Charlie