Windows 10: Forget Cloudobile, put Security and Privacy First

But - dammit - It would be insane to say 'don't collect, because NSA'


Sysadmin Blog Controversy has erupted around Microsoft's Windows 10 preview. More specifically, questions are being raised about the amount of tracking – and the depth of tracking – that was built into the preview.

The Windows 10 technical preview goes so far as to monitor your typing, potentially crossing the line from instrumentation of alpha-level software into creepy corporate surveillance.

Truth be told, I honestly don't think anyone but the extreme nutter fringe had, or has, a problem with being tracked in the preview. When you download the preview it is pretty upfront about the fact that it will monitor everything it can find to monitor.

The problem is that both Microsoft and the US government have lost the trust of the general populace. Discovering borderline technologies incorporated into Windows 10's technical preview (like the built-in keylogger of ultimate controversy) simply serves as a catalyst for concerned citizens to ask the questions that have been bothering them for some time.

How much of this instrumentation will be in the release version? What are the specifics of the type and quantity of data being collected during the preview and – far more critically – what data will our Redmondian overlords be collecting on us in the release version of the operating system?

Can we remove – not merely "disable" – this instrumentation from the release version of the OS? Since we already know the answer to that question is "no", what mechanisms exist for Microsoft to reactivate its instrumentation once we've tried to set it to "disabled"?

What if the NSA reactivates the tracking against the wishes of the user? Can Redmond stop this from happening? Will Microsoft encrypt the information that will inevitably be collected on us so there is the faint hope that the NSA has to at least work for their dinner?

I'm curious to know how my government will cash in on this so that it, too, can "instrument" its citizens. I hear that UK.gov is big into keeping an eye on Brits' online activity, Australia doesn't seem fussed about protecting its citizens and I'm pretty sure that Canada's speech-suppressing Tory dynasty can't be far behind.

One Windows: Windows 10 will be delivered on multiple device types



Do you find the above too hyperbolic? Some people will ... and some people won't. It's a fact of life that some elements of a modern operating system will be instrumented. Basic things like "what programs are installed" and "what is the hardware configuration of your PC" are generally collected as part of operating system updates and/or automated troubleshooting systems because they provide clear technical benefits in solving technical issues. It would be pretty insane to say "don't collect this info, because NSA".

Similar topics


Other stories you might like

  • Battlefield 2042: Please don't be the death knell of the franchise, please don't be the death knell of the franchise

    Another terrible launch, but DICE is already working on improvements

    The RPG Greetings, traveller, and welcome back to The Register Plays Games, our monthly gaming column. Since the last edition on New World, we hit level cap and the "endgame". Around this time, item duping exploits became rife and every attempt Amazon Games made to fix it just broke something else. The post-level 60 "watermark" system for gear drops is also infuriating and tedious, but not something we were able to address in the column. So bear these things in mind if you were ever tempted. On that note, it's time to look at another newly released shit show – Battlefield 2042.

    I wanted to love Battlefield 2042, I really did. After the bum note of the first-person shooter (FPS) franchise's return to Second World War theatres with Battlefield V (2018), I stupidly assumed the next entry from EA-owned Swedish developer DICE would be a return to form. I was wrong.

    The multiplayer military FPS market is dominated by two forces: Activision's Call of Duty (COD) series and EA's Battlefield. Fans of each franchise are loyal to the point of zealotry with little crossover between player bases. Here's where I stand: COD jumped the shark with Modern Warfare 2 in 2009. It's flip-flopped from WW2 to present-day combat and back again, tried sci-fi, and even the Battle Royale trend with the free-to-play Call of Duty: Warzone (2020), which has been thoroughly ruined by hackers and developer inaction.

    Continue reading
  • American diplomats' iPhones reportedly compromised by NSO Group intrusion software

    Reuters claims nine State Department employees outside the US had their devices hacked

    The Apple iPhones of at least nine US State Department officials were compromised by an unidentified entity using NSO Group's Pegasus spyware, according to a report published Friday by Reuters.

    NSO Group in an email to The Register said it has blocked an unnamed customers' access to its system upon receiving an inquiry about the incident but has yet to confirm whether its software was involved.

    "Once the inquiry was received, and before any investigation under our compliance policy, we have decided to immediately terminate relevant customers’ access to the system, due to the severity of the allegations," an NSO spokesperson told The Register in an email. "To this point, we haven’t received any information nor the phone numbers, nor any indication that NSO’s tools were used in this case."

    Continue reading
  • Utility biz Delta-Montrose Electric Association loses billing capability and two decades of records after cyber attack

    All together now - R, A, N, S, O...

    A US utility company based in Colorado was hit by a ransomware attack in November that wiped out two decades' worth of records and knocked out billing systems that won't be restored until next week at the earliest.

    The attack was detailed by the Delta-Montrose Electric Association (DMEA) in a post on its website explaining that current customers won't be penalised for being unable to pay their bills because of the incident.

    "We are a victim of a malicious cyber security attack. In the middle of an investigation, that is as far as I’m willing to go," DMEA chief exec Alyssa Clemsen Roberts told a public board meeting, as reported by a local paper.

    Continue reading

Biting the hand that feeds IT © 1998–2021