How bad is Windows spying?

[@jooch_exe]

AMD, Intel: "IPC has increased!" Microsoft: "Good, let's waste that IPC with telemetry and tell users they need to upgrade their hardware so they don't notice."

[@macicoinc9363]

It’s really quite beautiful isn’t it? The decades and trillions of dollars in hardware research just being thrown away to give you utter garbage.

[@deathhog]

​@@macicoinc9363Not thrown away at all. It gets daddy Microsoft more money. They love it.

[@TheBigLou13]

All in the name of Privacy, Security and Safety!

[@davitdavid7165]

I am sure Intel and amd don't mind

[@hcolider2817]

​@@deathhog achieving valued goals and desired outcomes is more valuable than any amount of profit ever could be

[@Instagramclips69]

Doing anything locally on your system shouldn't require an internet connection.

[@EraYaN]

But having search suggestions shown is not “doing something locally” now is it? And frankly opening a program these days also isn’t most of them fire off at least one update check request or just a data request to get your login state, avatar etc.

[@user-in2cs1vp6o]

​@@EraYaNThe people complaining about telemetry are not the people who want internet search in their task bar. Kinda irrelevant

[@nezu_cc]

Well it doesn't "require" a connection, never did, but it will use one if it's available.

[@Shizaho]

@@EraYaN If I type something in the search bar, I want it to search my computer. If I type something in a search engine in my browser, I want it to search the internet. Simple as that.

[@oo--7714]

​@@user-in2cs1vp6ointernet searcg is fine on a taskbar.

[@CuteSkyler]

With computers getting more powerful, the OS's on them seem to be running slower. Such a weird coincidence.

[@Doomsdayparade]

Linux is significantly better in that regard. Even on the more heavyweight distros.

[@kevinrineer5356]

I'm going to echo @Doomsdayparade that I've noticed Microsoft Windows has quite a few design decisions that make it run poorly. The stuffing ads, recommendations, ai, and a whole bunch of other features while the Microsoft kernel already isn't good at handing starting and stopping processes quickly is my guess as to why. I think the Microsoft kernel is an unwieldy Frankenstein of engineering make up decisions that the technical debt of the kernel is probably insurmountable. I don't work at Microsoft, so I I'm only positing my guess based off being IT support.

[@p0xygen]

​@@kevinrineer5356It's to be expected when Microsoft keeps building upon a system that never had a good foundation in the first place, while trying to keep everything from 25+ years ago compatible with today's systems.

[@DraxilSpada-vc2wg]

Windows 11, still compatible with Windows 3 applications[Windows 3, still compatible with QDOS applications!]. This is what we like to call the "tower of bubble gum and popsicle sticks"

[@Nikolai508]

By OS you mean Windows, Linux these days is so easy I don’t know why more people haven’t moved to it.

[@chamber_hiro256]

What a waste of bandwidth

[@matthewrease2376]

I mean the packets probably aren't huge. I'd be more concerned about the principle of data collection than the bandwidth it uses.

[@5Hydroxytryptophan]

​@@matthewrease2376 I think the comment was about the video.. it is Rather lacking content and advertises a paid tool.

[@lmaoboxuser]

paid??​@@5Hydroxytryptophan

[@xXRealXx]

@@5Hydroxytryptophan O&O Shutup is free

[@5Hydroxytryptophan]

@@xXRealXx Okay, good to know. I'm not using Windows anymore. But still, the video has really little information.. the telemetry is not immediate, so he should have invested more time into research.

[@raul0ca]

I expect the camera on my Windows laptop to follow what I look at and lower my social credit score appropriately

[@Lord-Sméagol]

That's sure to be the case in China!

[@DuncDog]

If the cameras on the majority of Windows notebooks weren't dogshit, that may actually be a threat lol.

[@SirRichard94]

​@@Lord-Sméagolthat is already a thing in america. Many jobs require you to be tracked like that.

[@Cybercerialdestroyer]

@@Lord-Sméagol dude stop deflecting all of this on China this is about America

[@frizzyfrank2985]

@@Cybercerialdestroyerum last time I checked China legitimately has a social credit score program and the US does not

[@DarthSack]

Every breath you take And every move you make Every bond you break Every step you take it'll be watching you

[@themirrazz]

every file you make, every registry item you break

[@SuperStarMan62]

every search you make, every feature you break

[@morgan_bowe]

Oh cant you see, you belong to me-icrosoft.

[@doughnut_panda]

We get robbed twice. We pay a bucket load of money for a OS and then we get our data stolen.

[@debrainwasher]

This is the Economy 4.0 according to its inventor Klaus Schwab (also founder of the WEF): Everything is turned into a service. A purchase does not longer constitute property, but is in fact a license to use a particular good for a limited amount of time and in accordance with the marketing concepts of the supplier. Therefore, you own nothing. Not even your data, your time and your attention. But you will be happy. Welcome in the really existing neofeudalism!

[@Tantakugames]

who tf pays for windows?

[@doughnut_panda]

@@Tantakugames my company.

[@steel5897]

I don't pay a cent and I block 95% of the telemetry (the 5% is required for some core stuff to function). I'd have dropped Windows for Linux if didn't use my PC primarily for gaming.

[@doughnut_panda]

@@steel5897 if I get a inspection you know what happens.

[@JV-pu8kx]

The fact that it sends something to their servers while I am _not_ doing anything that would require access to a server somewhere not on my premises is enough for me!

[@gabriel55ita]

Literally requests for windows update or apps install and update related. It's not new ms collect a lot of data but you can disable it and it won't anymore. Telemetry is good when it is clearly stated what it does and what data it collects, with the possibility to disable it. For example for an application crash report it's very useful to the developers because most of the time a user won't send it manually

[@IntensiverPinguin]

App updates.

[@linuxramblingproductions8554]

@@gabriel55itathats not really true Microsoft has been caught collecting telemetry with settings disabled

[@gabriel55ita]

@@linuxramblingproductions8554 for legal purposes it's not something sensitive obviously, you know that would cause them a huge problem. It's probably something more bland like crash log/defender asking the server if it knows a suspicious file for example

[@delofon]

​@@gabriel55itaNo, it should be the possibility to enable it instead. Opt-in is far better than opt-out for the consumer in this regard, and it's what I also like about KDE.

[@Acetyl53]

The future turned out not only malicious, but kind of braindead too. The sheer waste, the sloppiness in obfuscation, the passivity of the general population.

[@mekelopte7071]

Unwashed masses accepting malovent rulers to guide them through age. Classic

[@macicoinc9363]

@@mekelopte7071 You smite the people, and not the oppressor? It sounds like you are no different than then those responsible for this mess.

[@magoleo-pr7if]

Dumb people being dumb and evil corporations being evil are not mutually exclusive things

[@mekelopte7071]

@@macicoinc9363 How can single man rule over so many people sounds like all of them are NPCs and deserve it. Nom im sayin

[@CloudObsolete]

Brazil, the movie

[@kmg501]

There should be zero collection, your tolerance is the problem.

[@Max15691]

Problem is that most software do this stuff already, even the beloved Firefox, so I can get why he has some tolerance 😢

[@TVPInterpolation]

depends on the perspective. im against how microsoft is handling the data, not that they collect data. users usually dont do proper bug reports, so telemetry for this case as an example would be beneficial.

[@Carlos-kh5qu]

​​@@TVPInterpolation funny enough, a gamedev on reddit said that despite being only 13% of the playerbase, Linux users were responsible for 60% of bug reports on his game and would go till the end to help out

[@ilonachan]

​@@Max15691 but that's not really an excuse, is it. First of all, non-optional telemetry is ILLEGAL. Just plain up not allowed under EU law, and they do that shit anyway. Second, even open source software that has telemetry will by necessity be more transparent about it, and more open to allowing the user to disable it, which already improves the situation.

[@LilZesty]

@@Carlos-kh5qu this is nothing more than a reference to a racist joke. that 'gamedev' aint telling the truth

[@elmariachi5133]

It doesn't matter what information Windows is publishing. What matters is, that it does without us wanting to and without us having another choice than not even using a PC anymore - unless we are using Linux.

[@woodsmn8047]

also the slowdown of your system while it's collecting this data ...that's the part I most dislike !

[@felixjohnson3874]

"Ignoring the alternatives, there are no alternatives!"

[@nolram]

Or BSD :)

[@whoman0385]

​@@nolram"damn linux is becoming too popular, time to switch to bsd"

[@nolram]

@@whoman0385 nah I just like BSD :)

[@chri-k]

The thing with the XML messages not showing up correctly is because Windows still uses UTF-16 for some godforsaken reason.

[@pawer_themaw]

"CoMpAtIbIlITy!!!!11!1!"

[@SFSAtlas]

And they passed that fucking idiotic behaviour onto UEFI which makes it a pain to deal with

[@chri-k]

@@SFSAtlas i did not know that.

[@Corteum]

9:36 _"I'm not personally worried about all this information"_ It's not just about the information, it's also about the fact theyre using your computers resources/cpu/memory/bandwidth, and also what theyre doing with the information they collect.

[@kmg501]

I permanently switched to Linux over four years ago. My only regret is that I didn't do it much earlier.

[@Holahelloholahello]

What distro?

[@kmg501]

@@Holahelloholahello Linux Mint.

[@TwstedTV]

I did the same thing as soon as Windows 10 came out. I used Manjaro for a long time. Now I am on both original Debian KDE on one computer and the other on EndeavourOS KDE. I had to change that purple blob though. To a normal background and look. 😋👍

[@te-wei]

@@TwstedTV Debian KDE, too. It's simply better. 👍

[@c101vp]

Same here, did it a year ago, wanted to like three years ago

[@te-wei]

The real problem was that all these data are binded with your Microsoft account, which is being forced on, no local account allowed. Every pieces of data can be used to profile an user all together. They know your name, location, when to use what software and device with what behavior. The OS SHOULD NOT transmit anything encrypted to any server when running a local app without a need of internet, if it's encoded with some string that you don't know the actual meaning, you don't actually know what they transmitted. And, all these should be DEFUALT OFF, and ask if users are willing to share the record of their behavior to "help improving the development". The enrollment should not be default on. Even you thought some should be turned off, and yet, they're default on.

[@WeinerTouchy]

There are still ways to enable local accounts only - which I agree are hoops that shouldn't be forced to jump through - but at the same time it's a beast of two heads. I'd say that 90% of users got an upgrade to Windows 11 for free - free software isn't free. You're going to pay with data. Apple has collected the same data for decades across their entire ecosystem and no one throws a fit about it the same way they do with Microsoft. At the end of the day, if you really don't want to send data, pony up the extra $50 and upgrade your Windows version and run a local account from the start.

[@te-wei]

@@WeinerTouchy 1. If the local user needs a workaround, then 90% of the user will be milked, workaround exist doesn't meant it's not a problem. And, even if you activate local user, it only solve half of the problem. 2. If you pay for a new license, you won't get a different windows, they're the same. I just set a media machine for elder relatives last year, I bought an official license for them, and it's the same. You paid and you still get milked. 3. At the end of the day, I really don't want to send data at this level, so I migrated to Debian, FYI. Microsoft can do whatever they want, and you can accept it if you like to, it's not my problem anymore.

[@WeinerTouchy]

@@te-wei No one said anything about buying a new license. Buy the Pro edition. Solves all your issues. Local user and fully able to disable telemetry. Otherwise, enjoy your free upgrade and send data. Really no further discussion to be had.

[@computernerd8157]

​​@@WeinerTouchyApple does collect data but its no where near windows bull shit levels. Last I check key loggers were not included on Macs but Windows have them since 10. Make a video proving it just as bad then I will shut up, but I used Apples before and I never had shit like this shoved down my throat like I have endured when I switched to Windows xp, Windows 8 and breifly 10 on a hp stream lol. I stopped using Windows because they flat out said Windows is a services. 8 was already forcing Windows account down my throat which is funny. Every new version, Microsoft gotta force some new thing. I used Mac classic all the way to 10 and no, I never had shit like this forced on me. Linux was totally freedom until Ubuntu Amazon deal. I swicthed to a Ubuntu Mate because I liked the interface better at the time. However the Mac os 11 Might require an account for certain featured similar to Windows but if they did, its to make the walled garden work better(Not sure if they actiually do) not just to force something with absolute no benfit to the user unlike Windows. I quit using those systems as my primary a long time ago. All I can say is if you have no interest in the mac eco system then their no point to it but Micrsoft does not even offer an ecosystem at all so it only befits Microsoft to be fair. The only thing I like about Apple is their computers but planned Obsolences is the one thing I hate about Macs.

[@gabriel55ita]

The majority of applications and systems have telemetry default enabled and ask at initial startup if you want it or not, macOS same thing (it asks for a lot of shit that is enabled by default so you need to disable it on the setup page, just like windows)

[@magatamass]

As a personal user you at least have a choice. Imagine large companies in sensitive areas like medicine, which are basically forced to use windows to maintain compatibility.

[@marschallblucher6197]

Most of the computers used in those situations use either: Pro/enterprise windows where you can disable nearly all telemetry Linux, BSD, or some other open source Unix-like system. A _really_ old version of windows (I've seen some stores use windows 98 for their POS)

[@EbonySaints]

Unless you're working for a small "family" business where using anything other than Windows Home is going to either bankrupt you or confuse everyone but the boss and you, and the boss was a god tier Windows admin... in 1999. Also, you deal with the Chinese on a regular basis, so WeChat gets thrown in for good measure. I was seconds away from not taking the job, but I've long given up my right to privacy thanks to stupid actions, so I stopped caring for a long time. I even stopped running Linux at home for a long while. I wish I had the money for a burner phone though.

[@swagmuffin9000]

@@marschallblucher6197seriously!!!! I've even seen hospitals with 98

[@itskdog]

Most of the changes that ShutUp10 did were just registry tweaks that businesses with set with Group Policy.

[@magatamass]

Yes, it is true you STILL can disable telemetry, but (1) you wouldn't have to if it wasn't there in the first place - it costs additional time and money , (2) at some point you might not be able to disable these settings due to terms and conditions, yet you will be forced to use this particular system and have no other choice in order to maintain backwards compatibility.

[@lanatrzczka]

As a user and admin of Windows machines for a small company, I was really surprised when Windows 10 seemingly "backtracked" to users finding apps on the system by typing in the name. It seemed to be the opposite of the intentions of a GUI. I see the reason now. It's tracking and sending, silently in the background. Can I just get a security-patched Windows 2000 again please? Back when everything wasn't a damn keylogger.

[@Monody512]

I mean… It is also genuinely faster and easier to press a couple of keys than to scroll through a list or grid with a couple hundred entries. It basically turns the keyboard into a shortcut board for instantly navigating a ~46-item-per-layer tree. Them turning it into a web search is where I object. The spyware behavior would've happened even with a standard list or grid, but the web search function gave them the perfect excuse.

[@Jay45V-official]

Gosh, no wonder my internet is so bad on modern windows... Because it's being wasted on useless telemetry reports...

[@gregcampwriter]

No kind or amount of collection is acceptable. Every time I see something about Windows, I'm glad I switched to Linux.

[@Slugbunny]

It's been a load off my mind, too. No system is perfect, but I can easily choose my battles and who to trust on Linux. Microsoft left me no choice.

[@TVPInterpolation]

i would totally agree if user would be easier to deal with when it comes to bug reports. for such cases, i think its totally fair to collect data.

[@gregcampwriter]

@@TVPInterpolation That should be solely the user's choice. No corporation has any business making that decision for me.

[@TVPInterpolation]

@@gregcampwriter i see what you mean, but this is only properly possible in a perfect world where everybody reports bugs in proper fashion. do we want buggy software? no. do we want bugs fixed fast? yes. then its just a necessity in many situations. im not happy in how microsoft handles the collection of data, but can atleast see a few reasons aside from ad businesses in general.

[@norger]

@@TVPInterpolation don't be a shill, there are better and more straightforward ways to report bugs

[@littlecake453]

.... So remember how pirating adobe products is morally correct (currently even encouraged)? We should add Windows to that list.

[@luipaardprint]

I mean you’ll get it for free if you want to, the problem is they should be paying you to be able to collect all that data.

[@IIlIlIlIlIlIlIII]

gl getting ratted

[@Caved111]

Win11 literly forced me to exchange the perfect standard email app i had for outlook and now there is adds in my mail program disquised as regular mails. I mean are they for real? I seriously need to concider using linux.

[@TVPInterpolation]

definitely worth to do so

[@simonmaracine4721]

100% recommend. I have been using Linux for the past six years.

[@dazperson8228]

A temporary solution is Thunderbird, have been using it for a while now and it works well.

[@Blankult]

Linux makes me want to carve my brain out

[@karsh001]

If you are serious about switching. Get an easy-to-use distro on a thumb drive and try running it for a bit. My favourite is Mint, and my kid is using Nobara as his daily driver.

[@IshayuG]

By 4:10 I'm like... dude, you're just opening paint. What in the absolute heck. This is crazy.

[@ferabon]

But I mean, who the hell cares whether or not Microsoft knows if you've opened Paint? Why should I care about this?

[@IshayuG]

@@ferabon because them caring about something so hilariously trivial begs the question of what they have enough control to do when the stakes are higher. For example on iOS it was discovered that they constantly read your clipboard with linkedin and sucked it up into the cloud, after which we have no idea what happened to it. This is potentially outright dangerous. For example it may contain a password from my password manager, and then there’s political espionage. This sort of trivial info can be used as secondary information, too. For example, a declaration of war can be predicated through a large amount of pizza deliveries to state offices in DC. In this case it’s probably a signgature check, but I don’t like it. Apps I open on my device for local use should not be hopping onto the internet.

[@everypizza]

@@ferabon they don't need to know when i open up paint let me paint in peace please

[@romulo2714]

​@@ferabon Why should they know I'm opening paint? Also people who got nothing to hide did get screwed over data collection before, don't think you're safe just because you're a saint.

[@Tiishen]

​​​@@ferabon because why would they want/need to know your every click? I mean, forget the fact this telemetry data is being used for profit in some way (like selling to advertisers, etc.) and the fact data can be mishandled or stolen. Even if they weren't doing anything besides collecting it - it's the principle Think of it this way: You rent an apartment and there's cameras and microphones set up by the owner, which record everything 24/7/365 and send it to his personal PC. They're in every single room, even the bathroom and your bedroom. Would you really be okay with him having your whole life recorded on tape, even if you're not doing anything illegal or questionable?

[@itzarty]

This is insane. The sheer volume of information transmitted is insane. Just using and navigating the system shouldn't make a single call in my opinion.

[@thedanyesful]

That 404 for the tip retrieval is pretty hilarious. Reminds me of how after a few years, Windows Vista's link in the desktop context menu for 'Windows Gadgets' would lead you to a 404 page.

[@LessThanPeachy]

I think the biggest issues are that it's opt-out only and that a good chunk of this data collection cannot be toggled off by a normal user. You either have to dig through registry entries and hope you don't break the whole OS or rely on a 3rd party tool, which, of course, is all by design.

[@rtl8814au]

If you really gotta use windows, disable as much telemetry as possible, and use a dns sinkhole like pihole on the local network with a telemetry block list to block incoming and outgoing telemetry requests.

[@CentreMetre]

Is it possible to run the DNS sink hole on the windows machine? I imagine its easier (and is cheaper) than setting up a separate network attached device

[@rtl8814au]

As far as i know most if not all software runs on linux, but you can just get a cheap raspberry pi for this​, even a pi zero w works, if you dont mind it having no lan port, but using wifi doesnt affect performance at all anyway. Im personally using an old celeron j1800 board i got for 10$ with a 10$ ssd. Dedicated device approach also lets you have a 24/7 on blocker that works network wide.@@CentreMetre

[@everypizza]

I call it "Winbloat"

[@dsobransingh]

based pfp

[@Foga001]

Let me guess, what do you use.... Mac os, right? XD I use Win 7 btw...

[@KingPotato2]

​@@Foga001thats an og os. The good ol days of win7.

[@no_one484]

@@dsobransingh ummmmm i use arch btw 🤑🤓

[@Krrly]

amazing pfp

[@JessicaFEREM]

You should activate differing of updates for the average user, because it differs security updates for a few days and feature updates for 1-2 years. this will make a windows system dramatically more stable over time as it's forcing your PC to not be a beta tester, plus it'll be less annoying since the end user will have to change their workflow less and won't have to reboot as often. I personally want as much performance as possible and having useless telmetry hits all the time is wasting bandwidth and cpu cycles for something I don't want.

[@JessicaFEREM]

the chris titus toolbox does do a lot of debloating that oosu10 doesn't, it does use oosu for part of it's telemetry disabling, but it also sets a ton of services manual so there will be less CPU cyles to run and a smaller attack vector because there's less things running in the BG.

[@dennysgrimaldi9623]

@@JessicaFEREM if you don't want telemetry, and an easy tool to manage this is WinTools, is simple with a good interface and it rember your choice even after an update from MS, so you don't have to disable telemetry all the time. Plus everything is well written so is not hard to use or understand, and it can performe other task other then this.

[@KolaFiend]

at that point it's worth it to just switch to LTSC windows 10 and receive only security updates + years of extended support. no app updates either cause there is no app store included. run the christitus debloat script for good measure

[@PITZ24701]

Or have a registry hack that can defer Windows Updates to decades.

[@CoolJRT2009]

If you don't trust a command prompt window that you CAN see open when you run a cracked game, you shouldn't trust any of the silent shuffling of data that's going on in the background of Windows that you CAN'T see.

[@ringo8410]

I don't want my OS spying on me, even if it's - allegedly - to send bug reports. I also want choice in the matter of what my OS is doing rather than having that choice taken away from me. These are big reasons why I use Linux.

[@macicoinc9363]

If it was for bug reports, then Windows wouldn't be a steaming pile of fucking shit that never works properly.

[@FloppaTheBased]

what exactly linux? Most linux distros collect data just like windows does lmao

[@unicornpoo7441]

@@FloppaTheBased me when i spread misinformation on the internet

[@FtE1]

only Ubuntu does that

[@linuxramblingproductions8554]

@@FloppaTheBasedbro hallucinating harder then chatGPT

[@DictateTempo]

That was an interesting watch, thanks! I found your channel from your single GPU passthrough video which was very useful. Do you still plan to do a video on kernel level anticheats? I think that'd be a good watch!

[@EricParker]

Yes I do! Would love to know if there's anything specific that you would find interesting. Doing this level of analysis is tricky becuase I don't think vanguard uses HTTP to communicate.

[@Leonard_MT]

​@@EricParkerWhat about EFI based cheats? Those sound extremely interesting .

[@WhoooshyYT]

Cheat-related stuff would be cool

[@DictateTempo]

​@@EricParkerYeah, it'd be hard to determine what kernel ACs are actually doing, you pretty much have to trust the privacy policies on that. I think an overview of the main ACs (such as whether they run at boot time etc), the associated risks (Genshin is a good case study) and any mitigation steps (dual booting if you daily Linux?) would make a good video. Either way, keep up the good content, it's really engaging.

[@VirtualAxiom]

While I do need Windows for certain things, the fact that it's collecting anything at all without my permission is enough to keep it confined to a virtual machine with GPU passthrough to do what I need it to do, then go dark until I need it again.

[@maalikserebryakov]

There are debloated versions of windows OS. People analysed and stripped away the stuff that doesn’t need to be there

[@VirtualAxiom]

@@maalikserebryakov I'm aware, but I'd rather just use Linux and only pull up Windows as-needed. I don't trust it.

[@louiel8711]

Interesting video always good to see what goes on behind the scenes, makes it easier to figure out what to disable.

[@flynn3649]

New subscriber. Would you be willing to do a similar test with Ubuntu, (modern versions of Fedora Workstation), and PopOS? I think tons of people expect MS to be bad, but we're slowly experiencing this in mainstream Linux desktop distributions as well. It's not talked about nearly as much tho.

[@CentreMetre]

Exactly. Considering the whole mission of linux, I'm surprised Ubuntu is so widely used considering its data collection and its past with data collection.

[@klenha]

that is unfortunate. i'd love few guides on setting up something as this. i can't express how valuable your youtube channel is to me.

[@KianFloppa]

Does he mention how much of the telemetry can be diusabled and how much the minimum still collects?

[@josephbryanasuncion4904]

Hmmm,did you see the actual pass 50% of the video? Because that is exactly what he do.

[@k.chriscaldwell4141]

The NSA collects it. Windows just sends it.

[@ghost-user559]

@@tiaanbasson9092yeah and its also what Linux users don’t get. Why do you think those exact agents contribute and control the Kernel of Linux and the Linux foundation lol?

[@notyourfox]

@@ghost-user559 show me that extent of telemetry in open source Linux kernel

[@macicoinc9363]

@@ghost-user559 You are correct, but it is definitely to a far lesser extent. You'd have to be suffering from intellectual pride to believe that the Linux Kernel is not compromised in some way, whether Torvalds is aware of it or not.

[@domdomdomme1203]

@@tiaanbasson9092does that also apply if you are outside of the US and are not a citizen?

[@ghost-user559]

@@notyourfox “Disclosure of the nine-year-old vulnerability came the same week that Google researcher Kees Cook published research showing that the average lifetime of a Linux bug is five years.” “ *A ten years old Linux backdoor linked to National Security Agency of United States was detected freshly, and analysis confirmed that the backdoor was existing from the past 10 years. Dubbed as Bvp47 and linked to Equation Group-an NSA funded threat actor was first detected by anti-virus firm Virus Total in 2013. However, for reasons, not much was discussed or revealed about the advanced backdoor linked to Linux at that time.* “

[@AvoidingSpam]

Excuse me, at which point did the spying take place besides the completely normal search engine calls when you type in a search engine (and does anyone know whether that be turned off)?

[@golemwire]

Given that the Windows search bar is *supposed* to search the Internet, it makes sense that it would be sending information about your query to the Internet.

[@ghoulbby]

I'm not sure what I'm watching. Background noise from a fresh install and you typing in a web search, because that's what the Windows search bar is nowadays? And device info going to Windows isn't weird considering they're dishing out drivers so... that's expected. None of this is 'spying'.

[@SuperMewio]

Future reference, you can use ctrl+esc in windows to open the start menu that way you don't accidentally open KDE Plasma's application launcher lol.

[@irishwolf2390]

I just cant believe with all the information coming out as well as being crippled with use and account creation there has not been any kind of class action lawsuit yet or at least the starting of one.

[@CentreMetre]

This sort of shit is why I'm "paranoid" when it come to typing anything in anywhere, you truly dont know if that data is being recorded even if you dont press the enter key.

[@bhumiputra6108]

How did you create this setup? Is their any resource I can refer to?

[@ThePlayerOfGames]

So glad I switched to Pop!_OS 😅, thank you for the video!

[@planet_person622]

very informative video

[@yeetisnomore]

Hi Eric, what a great effort! We would really like to see the same thing for macOS too!

[@flamingscar5263]

the absolute hypocrisy people will have to call out Microsoft for this on youtube, a Google service, is hilarious pick a lane, degoogle yourself entirely and ditch windows, or do neither, but to have double standards is beyond stupid

[@codenamepyro2350]

is that hypocrisy? they probably don't like either spying

[@LunaticEdit]

That smug feeling you get when you fullscreen the video and there are no black bars.

[@austinbaccus]

Ultra wide gang

[@clocked2002]

O&O shutup 10: fighting proprietary software with more proprietary software lol.

[@aras_aras_aras_aras]

If you are worried about telemetry, why are you using Chrome that was collecting data even in the Incognito mode?

[@vladislavkaras491]

Great to see practically how Windows collects data and how O&O can be useful! Thanks for the video!

[@bepisdevs]

I’m confused. None of those API calls were really that suspicious? No doubt Microsoft collects everything they can but I didn’t see anything in the video specifically

[@catsandmountains]

It's the unnecessary data that's being sent almost constantly. It can be used for user fingerprinting and who else knows what. Telemetry data was a lead into a malicious Microsoft teams hack. Ideally you want to just have that activity only when necessary.

[@KyuDoesCode]

Hey chief, found your channel recently. Amazing videos! I'm interested in how you setup your network logger and what you setup for your W10 / W11 vms to bypass VM Protection. If you could make some kind of video or point us somewhere for the network logger that would be amazing.

[@itskdog]

Small correction on the Windows Update P2P, the default only does on your LAN, you have to manually change a setting if you want P2P Updates working globally. Very useful in a corporate environment (no more need for WSUS causing headaches for IT if you want to cache updates locally) or anywhere with a slow internet connection.

[@AndiRizkia-hv9wc]

No wonder my laptop run so laggy since every background of telemetry and Spyware are running so predatory on the background, yet they also say that Win 11 is the best OS for gaming (yet the telemetry)

[@Omizuke]

Can you test this on a customized Win. To see if there is any one thats safe. I currently use a Win10 curomized using various tool. I tried with 11 once but disabled so many things I broke some of its functions hahaha. Went back to my own made Slim10. Or maybe there are better tools to modify 11 since I tried.

[@roccociccone597]

And this is why I refuse to use Winblows

[@Chibibowa]

Use NTLite with a good profile. And all what mainstream media says falls out the window. Nothing he mentions happens on my images. And I currently use 24H2 LTSC. See windows XP+7? Well I have the exact same user experience. Even UAC is neutered and standard users can never elevate no matter what they do.

[@mastermati773]

To be frank, it isn’t as bad as possible, based on the requests going during this video.

[@prodkinetik]

would you be able to do something like this with Tiny10/11?

[@Wilhuf1]

I use Arch, btw

[@LukeLane1984]

Same, btw

[@Bunuffin]

Fedora BTW

[@josho225]

*generic mint user comment*

[@0ptimal007]

And???

[@Wilhuf1]

@@josho225 Mint was my gateway through the Arch.

[@Banus-]

linux is hot

[@Joe-gk2xq]

Recently found ur channel love ur malware analysis videos. Do you have a discord?

[@aungthuhein007]

Can you share what kind of linux you were using? Distro, DE, VM software, all that stuff.

[@nxx99]

I know he uses KDE5, and that's all IK

[@venomsolidx]

I really need to switch to linux

[@JapaAppa]

don't you need to know how to code or something to run linux?

[@agiri891]

@@JapaAppa uhhh no?

[@Swedish__]

@@JapaAppanot at all

[@WodkaEclair]

​@@JapaAppanah, I know fuck all about coding, I'm close to the most standard brain-dead PC user around and I switched to Ubuntu just fine. most of my games work fine (or, as fine as they can *on my specific hardware*). there's even other types of Linux that are even easier than Ubuntu. I find that Ubuntu does require some command line stuff every six months or so when it updates or when installing some weird niche thing. other than that, the only complication is the whole "oh god I'm used to stuff being in C:/ or programme files aaaaaaa where is it" but google helps there lol

[@nxx99]

​@@JapaAppaNope!

[@pid1790]

imagine accidentally type a password

[@jackie.dee.01]

All of this is encrypted, this person is using an SSL certificate to de-encrypt the sent queries. It’s the same as typing a password into any web browser. An OS still shouldn’t send anything without your permission.

[@pid1790]

@@jackie.dee.01 what will go wrong when someone doing mitm attack like this just like this person do with a vm?

[@AnttiPW]

@@pid1790 Unless you install someone else's root certificate (like he did in this video to capture the traffic) you don't have to worry.

[@jackie.dee.01]

@@pid1790 Given they don't have the correct certificate, they would only be able to see a stream of nonsense. However, fun fact, e.g. the NSA still collects this information to have it's encryption cracked later using quantum computers.

[@3AgL3DeeJay]

amazing! can you make a short tutorial about setting up the traffic listener for the VM? cheers!

[@domiibunn]

Better question though. What is the proxy you're using as it looks useful Edit: mitproxy

[@paprikar]

You need to use something like Wireshark in this case

[@SpongyFlafy]

I'm good with Linux

[@FlamespeedyAMV]

the best part is, it's only gonna get worse

[@korosoid]

Nice, finally 21:9 videos.

[@sephjfox]

I've never liked Microsoft Windows, and I'm constantly astonished by how bad it is.

[@FriesPG]

BRO THE SILENCES THAT YOU MAKE IN THE VIDEO SCARES ME CUZ I THINK YOU FOUND SOMETHING 😢

[@joegru7280]

i had no idea about that program, thank you!

[@callisoncaffrey]

Why install a system you have to actively fight against. You realize Linux is free and comes and many very easy variations, right? Or if you don't need simpleton shit, there is always OpenBSD.

[@joegru7280]

@@callisoncaffrey Thank you for roasting me. yeah i know about linux. i have used it before. ill look into OpenBSD

[@zeenxdownz]

​@@callisoncaffreyits hard to switch to linuz when i grew up using windows and having my files in C:/

[@ashyy6819]

@@callisoncaffrey"Why install a system you have to actively fight against?" >Proceeds to suggest linux lol

[@callisoncaffrey]

@@ashyy6819 Spoken like someone who has never even tried it. Though in case you really didn't understand what I meant: You are aware that Windows sends out everything you do, forces bloat unto you, decided when to update, takes features away, can hardly be configured, ... I'm sure you've heard about the Recall feature, right? I know people think that would be spying on them, but that's not what it does. The spying is happening already in the background, but Recall moves the evaluation of your data onto your hardware. It saves Microsoft tons of money. Meanwhile on Linux you have full control over everything. You can install an easy distro like Linuxmint, which is way easier than Windows, even for people who come from it. The thing you think is Linux is LFS, where you actually have to download and compile every packet manually. Every other Distro, even Archlinux, is way easier. Most come with a graphical installer even. I run Gentoo too, and the only difficult thing there is configuring the kernel. Anyway, even if it were as difficult as you make it sound, I would still prefer that over being the corporations' female canine. Then again it's not like it was bad for the Chinese to give up all privacy. I hear they have a prospering and free country over there.

[@starlightatdusk4896]

I was wondering if O&O actually worked. Nice.

[@1marcelfilms]

I miss being able to select what updates I want and only get those.

[@user-a0d9w0ec9wiej]

I think Linux does that

[@ibizenco]

Is there no way to block programs to send data to Microsoft? Which executable(s) is responsible for "phoning home"?

[@southof.nowhere6096]

That's what was done in the video. None the less, I'd imagine most of this stuff is built in to existing structural executables. Things that if one were to delete, would simply break the entire operating system.

[@felipefmavelar]

thats actually a cool video, you should test it on other services

[@dnel83]

Did windows silently allow you to forge their SSL certificate? Makes tapping this data trivial if thats the case.

[@Ishy_1]

Windows is basically an advertisement for linux at this point

[@Purely_Andy]

are you using an ai voice changer?

[@konstantinsotov6251]

and then they say, "just use WSL!". Why, so that they could collect even my linux data? sorry, no

[@squirlmy]

WSL Kali in particular seems to me the biggest honeypot for scriptkiddies, ever. I don't trust "Offensive Security" at all anymore. How many users even know the parent company is called "Offensive Security"

[@nemesis851_]

an after the manditory MS updates, you can't opt out of, everything gets re ENABLED

[@AnimeGIFfy]

Never understood why ms made start menu interact with the web search. What are browsers for? What's next? Are they gonna add browsers tabs into your start menus?

[@ittadakimaho]

Sorry yeah .. the vid has the right idea .. but is sadly very .. waste of my time :(

[@mz6301]

..microsoft is gone and done, good thing a lot of saints provide tools to debloat, block telemetry, remove sh*t like "the microsoft shop, maps" etc....and btw I think those data are sold to third parties, cause if they were used to tweak the os to the customer's needs, we would have stuff like "the porn organizer", a fking popup blocker that works, and something that would solve the videogame compatibility issue. ...and still to these days, got issues like "the ldkfdjflkjlldfk.dll is missing"

[@icantcomeupwithnames469]

"Microsoft is gone and done, good thing there's tools to keep me dependent on Microsoft" I use Arch btw

[@J0nes111]

Just in case you read this: Peer-to-peer distribution of updates makes a lot of sense if you got multiple computers / laptops at home. Most people and even lots of small businesses can't or can't afford to setup an update server. So every Windows machine will download the updates on its own. However with peer-to-peer distribution enabled, only one machine needs to download it and can then share the updates to Windows, Office, drivers etc. to all others. That can save a ton of bandwith even with only a couple of devices. Also, this can speed up the time you need to take when you install a new lapop or computer.

[@eth0eduardo]

I’m a long time linux user… I just feel that I can’t go back to windows again. Having to use a third party app to disable an aggressive data collection is just a bad joke. The OS should be private by default, no telemetry at all.

[@atsizbalik]

at this point, to truly escape data collection you need to stop using electronics completely also is this with or without the permissions you change in OOBE?

[@jollygoodfellow3957]

Technically not correct because what about flashlights and dvd players?

[@computernerd8157]

Use Linux and disconnect from the web so your wrong.

[@zeenxdownz]

my flashlight sends data to gianthard​@@jollygoodfellow3957

[@__kms1212]

All that you touch And all that you see All that you taste All you feel And all that you love And all that you hate All you distrust All you save And all that you give And all that you deal And all that you buy Beg, borrow or steal And all you create And all you destroy And all that you do And all that you say And all that you eat And everyone you meet (everyone you meet) And all that you slight And everyone you fight And all that is now And all that is gone And all that's to come And everything under your PC is tracked And your data is stolen by MS

[@MMadous]

Did the Microsoft robots take over your body at the very end there? What in the world happened with how you said "collect" at 13:11 ? Haha

[@jesuslovesyoujohn314-21]

Very informative, thank you.

[@Slugbunny]

"Everything" is a safe bet.

[@ACatNamedHarold]

AGI has determined that an internet search engine is required to find locally installed programs.

[@RomanianProductions]

What you forgot to consider is requests and data sent through other protocols such as TCP, UDP, SMB, etc. and not just HTTP or HTTPS

[@Wahinies]

It is unanimously HTTPS because it sails right past firewalls unless the performance killing HTTPS inspection is in use AND this traffic is explicitly blocked. You wont see that scenario in a home setting for example.

[@paprikar]

Why the fuck this comment had 0 likes?

[@dave24-73]

Who needs malware when you have Windows installed (Windows being more invasive than most Malware).

[@potplantjoe6037]

What are some tools to remove the amount of telemetry information is being sent?

[@icantcomeupwithnames469]

Linux

[@utherlightbringer3868]

shutup10

[@zeenxdownz]

winaero tweaker

[@RoozerXC]

Technically, you can block the telemetry system-wide with a HOSTS file. I have a custom HOSTS file which is around 700 KB and it blocks malware, phishing, shock sites, trackers, M$ telemetry among other things. Only problem is when Windows uses a HOSTS file over 300 KB it lags itself, since microsoft makes really poor code. You can fix the dnscache issue with a powershell script though (since dnscache is required for vpns like AirVPN and mullvad)

[@biigsmokee]

You need a local DNS server instead of raping your hosts file

[@UltraZelda64]

I'd rather just use Linux. Then, my HOSTS file can be nice and clean and more focused, blocking only web sites that I don't want to allow instead of having to use it for protecting me from my own OS.

[@zeenxdownz]

slide me it 😈

[@gheffz]

Great, thank you! Subscribed! All!

[@pedretejb2492]

Updates have made my W10 pc have trouble with internet connection. It stopped recognizing the Ethernet adapter and so I had to reestablish it and restart right after every single time I turned it on. The only problem I find in Linux is the lack of compatibility with most Reshade shaders, while its compatibility problems with Riot's Vanguard is actually an advantage for my mental health