Windows 10 is a keylogger

[Agazed]

Source: http://localghost.org/posts/a-traffic-analysis-of-windows-10

 

Some Czech guy did a traffic analysis of data produced by Windows 10, and released his findings the other day. His primary thesis was that Windows 10 acts more like a terminal than an operating system -- because of the extent of the "cloud" integration, a large portion of the OS functions are almost dependant on remote (Microsoft's) servers. The amount of collected information, even with strict privacy settings, is quite alarming.

Information transmitted

All text typed on the keyboard is stored in temporary files, and sent (once per 30 mins) to:

oca.telemetry.microsoft.com.nsatc.net
pre.footprintpredict.com
reports.wes.df.telemetry.microsoft.com

There isn't a clear purpose for this, considering there there's no autocorrect/prediction anywhere in the OS. The implications of this are significant: because this is an OS-level keylogger, all the data you're trying to transmit securely is now sitting on some MS server. This includes passwords and encrypted chats. This also includes the on-screen keyboard, so there is no way to authenticate to a website without MS also getting your password.

Telemetry is sent once per 5 minutes, to:

vortex.data.microsoft.com
vortex-win.data.microsoft.com
telecommand.telemetry.microsoft.com
telecommand.telemetry.microsoft.com.nsatc.net
oca.telemetry.microsoft.com
oca.telemetry.microsoft.com.nsatc.net
sqm.telemetry.microsoft.com
sqm.telemetry.microsoft.com.nsatc.net

You might think that "telemetry" has to do with OS usage or similar... turns out it's telemetry about the user. For example, typing a phone number anywhere into the Edge browser transmits it to the servers above. In another example, typing the name of any popular movie into your local file search starts a telemetry process that indexes all media files on your computer and transmits them to:

df.telemetry.microsoft.com
reports.wes.df.telemetry.microsoft.com
cs1.wpc.v0cdn.net
vortex-sandbox.data.microsoft.com
pre.footprintpredict.com

It's hard to imagine any purpose for this other than the obvious piracy crackdown possiblities.

When a webcam is first enabled, ~35mb of data gets immediately transmitted to:

oca.telemetry.microsoft.com
oca.telemetry.microsoft.com.nsatc.net
vortex-sandbox.data.microsoft.com
i1.services.social.microsoft.com
i1.services.social.microsoft.com.nsatc.net

Everything that is said into an enabled microphone is immediately transmitted to:

oca.telemetry.microsoft.com
oca.telemetry.microsoft.com.nsatc.net
vortex-sandbox.data.microsoft.com
pre.footprintpredict.com
i1.services.social.microsoft.com
i1.services.social.microsoft.com.nsatc.net
telemetry.appex.bing.net
telemetry.urs.microsoft.com
cs1.wpc.v0cdn.net
statsfe1.ws.microsoft.com

If this weren't bad enough, this behaviour still occurs after Cortana is fully disabled/uninstalled. It's speculated that the purpose of this function to build up a massive voice database, then tie those voices to identities, and eventually be able to identify anyone simply by picking up their voice, whether it be a microphone in a public place or a wiretap on a payphone.

Interestingly, if Cortana is enabled, the voice is first transcribed to text, then the transcription is sent to:

pre.footprintpredict.com
reports.wes.df.telemetry.microsoft.com
df.telemetry.microsoft.com

If Windows is left unattended for ~15 mins, a large volume of traffic starts being transmitted to various servers. This may be the raw audio data, rather than just samples.

Other concerns

While the inital reflex may be to block all of the above servers via HOSTS, it turns out this won't work: Microsoft has taken the care to hardcode certain IPs, meaning that there is no DNS lookup and no HOSTS consultation. However, if the above servers are blocked via HOSTS, Windows will pretend to be crippled by continuously throwing errors, while still maintaining data collection in the background. Other than an increase in errors, HOSTS blocking did not affect the volume, frequency, or rate of data being transmitted.

[TheKDub]

Hmm, guess I'm going back to windows 7.

[TopWargamer]

I thought this was only an issue in early beta builds. This is why I went from using the beta build as my primary OS back to Windows 8.1. And now I think I might switch back. Freaking come on Microsoft. 

[Hackzzila]

Are you f*cking kidding me

[Trik'Stari]

We already essentially knew this. Good to see it confirmed.

 

Inb4 the "it's not a big deal" crowd.

[Ceatra]

Bruh

 

 

You know what? FUCK DIRECTX 12! AND MICRSOFOT IF YOU'RE READING SUCK MY.... DATA!

 

 

what you thougt I was going to say dick? you perv 

[Emkryan]

Tadah!

[RollinLower]

wait what? this is getting really creepy now. probably going back to 8.1 now. or does that have the same issues?

[Accursed Entity]

I'm waiting a bit longer for other sources to shine some more info on this.

[Tim Drake]

Okay lesson learned.

 

Don't piss off hackers and you're safe

[lokilowkey]

If this is true, I wish I didn't jump on the switch so quickly. So much shady and obtrusive stuff going on here.

[Dabombinable]

And now myself and everyone in my family will be staying with their current OS (Windows XP, Vista, 7 and 8.1).

[KemoKa]

We need those guys working on making OS X Binaries compatible on Linux funded the shit out of so that Windows can just die.

[Trik'Stari]

I'll be staying on Windows 7 and once support is gone I'm off to Ubuntu.

Keep a chair open for me.

 

Oh wait, it's linux, there's always a chair open. Free of charge.

[iamdarkyoshi]

damn. I hope it doesnt whine about my "software"

[Guest]

Was it just me that expected this kind of shit when they announced it would be free? Windows 10 Windows DataMiner

[Polyvalent]

i have nothing to hide but this is still pretty fucked up.  dx12 isnt really enough to get me to want to stay with w10 anymore..

[KemoKa]

There are people at the source commenting that this is a kind of clickbaity article from an unreliable source, but it does warrant investigation. I'll have no company keylogging my every move, that should just be illegal to the nth degree,

Linux, here I come!

... again...

[Dabombinable]

We need those guys working on making OS X Binaries compatible on Linux funded the shit out of so that Windows can just die.

I still can't believe that I was able to play most Windows 98 games on my Asus A3H better under WINE than Windows XP-and the version of XP I was using was tweaked to be lighter than even Lubuntu.

[KemoKa]

Keep a chair open for me.

 

Oh wait, it's linux, there's always a chair open. Free of charge.

And completely Open Source.

[KemoKa]

I still can't believe that I was able to play most Windows 98 games on my Asus A3H better under WINE than Windows XP-and the version of XP I was using was tweaked to be lighter than even Lubuntu.

I hate windows so fucking much... I hate microsoft. So Fucking Much.

[Glenwing]

http://linustechtips.com/main/topic/11724-read-before-posting-in-this-section/