Stop Microsoft Windows Spying in 1 Minute

[@rager1969]

You don't have to delete the line, just put a "#" at the start of the line to comment it out. This is handy for testing or temporarily enabling access to that site. When done, remove the "#".

[@Britec09]

That is correct

[@CM_Burns]

Windows Defender identified the new host file as a medium threat 🤣🤣

[@charliesretrocomputing]

That's good, some malware changes the HOSTS file to redirect you to other sites or block certain sites. You want it to notify you of changes to the hosts file. If you made the changes, just add the folder that the hosts file is stored in to "exclusions" in Defender.

[@CM_Burns]

@@charliesretrocomputing good to know 👍👍

[@charliesretrocomputing]

@@CM_Burns but yeah that happened to me as well lol You can also just say "allow on device" if you don't want to add to exclusions

[@dingokidneys]

I prefer to use Pi Hole which covers my whole network from one centrally administered location. Once set up, you have a nice web interface to monitor and manage it.

[@user.A9]

How to import the list to pihole?

[@dingokidneys]

@@user.A9 Import the list through the Pi Hole web interface. Select Adlists from the menu on the side and you're there. The default blocklist is very good though and I've not needed another.

[@Ahmed-Hussain]

Pi hole requires Static IP address which everyone can't afford and most of all Internet operators don't Provide Static IP

[@dingokidneys]

@@Ahmed-Hussain The Pi-hole is internal to your home network so doesn't need an IP provided by your ISP. I just set up an IP reservation in my router so that whenever the PI-hole fires up it is allocated the same local IP address in the 192.168.x.x range, Then you just tell your router to give out that IP address to DHCP clients as the DNS resolver. I don't have a static IP address from my ISP, in fact it changes every day, but my Pi-hole works fine.

[@BaelzWhaelz]

Need tutorial!

[@neonblowfish]

this is literally a decades old solution. I'm really surprised MS hasn't dump the hosts file by now.

[@awex7]

MS doesnt update old stuff they dump new stuff ontop. they still have setting menus from before the 2000s

[@RPSchonherr]

It's still used by business IT managers to block NSFW sites

[@herbetone]

Shhhh walls have ears 😂

[@RaineWilder]

Devs use the hosts file for local development

[@donaldlemoine3032]

I was never much on linux. Dabbling with it from time to time. Now, I am learning as much as I can so I can confidently switch away from windows and not have to worry about being spied on. One day at a time. So thank you Britec for all your hard work.

[@CesareVesdani]

Can CoPilot and AI be uninstalled from Windows 11 completely?

[@workhard2170]

Some adresses are hardcoded and skip hosts so it's waste of time. Better make a video about simplewall which is able to block windows components to access internet

[@abc_cba]

can you suggest how that simplewall should be used ?

[@jr3474]

Simple wall is very useful...you will see that recent updates for windows unleash an unknown unnamed file that bypasses simple wall configuration by itself... and one can not do anything about it

[@motoryzen]

Look britech in any other PC tech involving youtuber, I respect what you try to do and this includes Chris Titus Tech also, but in the end there's no way you can stop Microsoft from disrespecting your Fourth Amendment rights including privacy if you boot any computer into windows and it is connected online the internet for any reasonable amount of time even if it's one day a year let alone every day You can do all the registry edits you want you can throw all the third-party software tools you want at it but in the end and inevitable Windows update will undo any good you do at some point in time be it next week or next month or even later that year. Why? That is simple. It is because no one but Microsoft operating system software development employees has access to editing the windows core AKA kernel in which where the Windows update and Telemetry engines live There's only one guaranteed way that I can think of offhand to stop Microsoft from spying on you and that involves a two-part deal. One don't use any of their software. Two switch to Linux. Facts don't care about anyone's feelings on this

[@DragonKingGaav]

I love how the title says 1 minute but the video is actually almost 9 minutes! That's false advertising. I want a refund!

[@Britec09]

It would take one minute without video, even 20 seconds with script

[@rajesh.x]

Refund.. 😂 u clown 🤡

[@Uns_Maps_8]

MS just sent the first employee to post negative comments

[@Zendukai]

🤣🤣🤣😂😂😂😂🤣🤣🤣

[@pmshah1946]

Of course it took 9 minutes to explain. Takes less tan a minute to do. But then there are many viewers here at same intellectual level as .....

[@US_Joe]

Great stuff mate - I learned something new. Thank you 👍👍👍👍👍

[@Britec09]

Glad to hear it!

[@ComeonmenID10T]

how does it influence the Windows Updates ?

[@junker15]

I won't trust MS to ship a TCP/IP stack that honors even the MS equivalent of /etc/hosts anymore. (They took BSD's TCP/IP stack and ported to Windows in the WFW days; this is why they have a "hosts" file to begin with) Since it's in "as good as it gets" territory, I make sure all my internal hosts use the DNS I hand out to them (enforced by firewall rules at the border), and my DNS goes through NextDNS, which has its own block list. Doesn't catch very much of the telemetry by default, alas, but it works well enough. I really need to weigh the benefits and the costs of using my time to play a cat-and-mouse game, which is unfortunate.

[@ampeg187]

But sometimes those domains will simply bypass the host file. It is better to block this via 3rd party Firewall or on a hardware level(rutar, or your own DNS).

[@Britec09]

You can also use firewall. Not 100% as I said.

[@agukonrad]

I dont think messing with DNS will help either. I tried Pihole on my LG tv for example and it did not block youtube ads.

[@cplcabs]

@@agukonrad thats because youtube uses the same servers to put its ads on....use ghostery to block them

[@calikokat100]

tahk you for your videos...they are informative...well edited, concise and I have learned alot from them...

[@BrokenKanuck]

Strongly recommend Pi-hole, and a separate DNS provider with built in blocking.

[@shabbadahutt358]

how do you solve windows defender/ anti virus flagging the host file changes as a malware attack host?

[@Britec09]

Add an exclusion to Windows Security

[@shabbadahutt358]

@@Britec09 Cheers for feedback but i read somewhere allowing this exclusion may open systems to attacks

[@quantumharvestllc2082]

I can do it in one sentence: Switch to Linux. Not one of my servers was affected by the Crowdstrike disaster.

[@vasudevmenon2496]

I think it's legacy and causes more issues than actually fix. I added rules as firewall and few months later i couldn't connect to download updated Software files using batch scripts from MDL. What i will suggest is to make use of next dns which updates its filters and block telemetry from Apple, Samsung, Android phone vendors, Microsoft etc

[@SuperLittleTyke]

This is one of the most useful videos you have produced recently. I was going to ask whether this applied to windows 10 as well as 11, but this was answered towards the end of the video. I had no idea just how intrusive Microsoft is until now.

[@rogerbowen5753]

Cheers Brian! Another top video! Cutting through the snake oil and flim-flam and giving us what we really need. Thanks again!

[@Britec09]

Glad you enjoyed it!

[@KelticLad]

Nice one thanks for sharing

[@Britec09]

Thanks for watching

[@Chris558576]

Thanks for this, recently i have started adding domain names to the web filter in my router so the effect is global across my network.

[@Britec09]

That will work

[@qt31415]

a day before this was posted and everybody BSOD'ed hahaha. this is a nice concise tutorial. thanks mate.

[@user-od4gs3iu4t]

that's certainly a good way that works, but this and even more can be done with a help of a good firewall having a filter. Just put a check box and a community-driven list will be auto updated

[@Britec09]

Firewall is another way to add extra privacy

[@pietermeijer5358]

Sir, FYI, thank you for this info video. I modified the hosts file on a windows 10 pc using your instructions, after a reboot I find that Bitdefender Internet security has "cleaned"the hosts file. This problem did not happend on a windows 11 pc. A setting in bitdefender solved this issue.

[@lee99bay]

You can use peerblock with Microsoft ips lista to block it.

[@user-yc1yi8qd4j]

Microsoft would be better if Bill Gates was in charge again. It was never perfect, but Microsoft has gotten so much worse since Bill Gates has no longer been the CEO, whatever you think of him

[@donnievitelloni3806]

Don’t need to drag the host file to desktop, just open notepad as admin and you can edit host file in its current directory

[@DevilbyMoonlight]

I never liked the idea of using a quad zero address to 'blackhole route' a packet as a quad zero address (0.0.0.0) is the gateway of last resort in the networking world... typing route print in windows will give you the idea.. am old and stubborn in my habits, even though 0.0.0.0 is also used as a meta address like a wildcard such as an invalid target, blackhole routing this way makes it easy for them to change something in the future to push all those addresses out through your default gateway.

[@robcarley7506]

Been using this for a while, may have to update the list though. Would be nice if their was a bullet roof way to stop it entirely.

[@Britec09]

Use batch file to update, quicker

[@ralphtaylor5328]

If you paste the whole file that contains to IP list you can document what revision the list used was. Header section is commented out so not a problem to hosts

[@Corteum]

This method to stop micros spying is useless. Especially if it's the only thing you do. Moreover, microsoft address and domains are constantly changing.

[@Britec09]

No perfect like I said, its for people who want to try and block access

[@Corteum]

@@Britec09 If they want to just' try and block access' this way, it means that they dont have an good understanding of the nature of the issue and what an effective solution looks like.

[@cplcabs]

ok, let us see your perfect solution then.

[@Corteum]

@@cplcabs It's not _my_ perfect solution. It's solutions that others have already established and described in detail. Nothign new. You just didnt look properly.

[@cplcabs]

@@Corteum I don't think you understand what this video is about. It is not suggesting this is the be all and end all solution, it is one of many solutions out there. If you wish to make videos about how to do such things, then you are more than free to do so. I don't really need to look properly as I already know how to do such things. I just don't go around and critisize other people whilst offering no alternative solution such as you have done.

[@user-pw8qj2gt1p]

Britec09: "Stop Microsoft Windows Spying in 1 Minute!" Video: "Hello, I'm almost 9 minutes long.😁"

[@cplcabs]

wow, are you really thaat low in intelligence?

[@charleswoodruff9013]

Used to do this to prevent Adobe apps from phoning home before they went to the subscription model.

[@themzmodelexperience1666]

@Britec is this extra step still necessary to prevent Microsoft from collecting your data even if you did not check those check box when initially setting up Windows?

[@drumpf4all]

Brian, if it only takes a minute, why is your video almost 9 mins. 😉😜

[@Britec09]

😂 I can do it instant with powershell script

[@ridethefog]

@@Britec09 can you share the powershell script?

[@cplcabs]

it is amazing how many dense people there are in the word and that you are one of them

[@carlosanvito]

Why doesn't someone make an executable that automatically updates the host file on a regular basis, rather than needing to manually update the file? Seems simple enough and a trivial programming exercise.

[@milinddeval]

After implementing it, I noticed a few MS app icons/ tiles are not showing up in Windows app store's installed app list. Please check at your end and confirm.

[@norman7527]

Hi Brian, I use Portmaster with IP Filter . Your thoughts? I'm done with MS once Windows 10, no longer gets security updates

[@JohnDoe-wl8zk]

Install Windows 10 LTSC Iot and get updates until 2032.

[@Britec09]

Portmaster is OK mate, uses firewall settings to block Microsoft. Try not to worry to much about it all.

[@prodigys9823]

Portmaster is wonderful but requires a lot of adjustments to allowed connections and some to the global settings

[@user-od4gs3iu4t]

Prodigy, what do you mean by "a lot"? comparing to what? my opinion Safing PM doesn't take a lot of your attention. Easy configuration, on-demand response, convenient silent mode, pretty lightweight, has a lot of additional utilities. I use it both on my Windows and Linux platforms, both work great

[@norman7527]

@@user-od4gs3iu4t Totally agree, just set it to my needs and do a backup of my configuration if ever I need to reinstall OS

[@MrRiggyG]

Don't agree with the description used here 'blocked'. hosts files just take precedence over a dns lookup - not the same as ''blocking' - but a sort of similar end result - just a minor point for accuracy.

[@charliesretrocomputing]

correct, they "block" sites by just redirecting them to another IP (usually localhost/127.0.0.1), almost acting as a local DNS server.

[@hellrazor2050]

cant be arsed to keep trying to dodge ms spyware it will be a never ending circle,Update it will all be back again .So i went for the 10 minute solution and installed Linux

[@VaracolacidVesci]

I do have a 100% guarantee method that will stop telemetry on ANY WINDOWS/APPLE system. UNPLUG THE INTERNET.

[@fearsmasher1299]

I thought for sure this was going to be a Linux installation.

[@bradl7439]

Click the Start menu, click the power icon, and then select Shut down.

[@statesman6379]

Wouldn't this affect the Microsoft Rewards program?

[@SeanBotha]

Use own dns it is better. E. G combine pihole and bind 9.

[@dennisvaughn540]

Thanks Again!

[@Britec09]

Thank you too!

[@test3tw44]

Thank you for your willingness to provide a compilation of information and how to use, as walking, we are a step forward, hard work, thank you! Thanks be to God! ( DeepL translation ) 謝謝您願意提供彙整資訊及使用方法，如同走路，我們又向前進一步，辛苦了，感恩！感謝上帝！( DeepL翻譯 )

[@Britec09]

Glad I could help

[@slacker1]

After I did this... I pressed Ctrl/Alt/Delete... In the Menu... "Do dishes" was added... I so love Windows 11 Enterprise 23H2... I am sure that 24H2 will add laundry, also... 25H2 will add utilities... 26H2 will add rent... 27H2 will remove nosey little sister... 28H2 Makes life perfect forever... Bedside alarm goes off.

[@bajeneger]

Isn't it just and copy your entire list from github directly into the hosts folder at once without copying the hosts folder as you showed

[@Maverick1948]

I tested host files with cmd and said General Failure. Packet 4, Receive 0, Lost 4. Using VPN. Am I safe?

[@yogibarista2818]

Seriously... a picture of Bill Gates?

[@SuperKanuuna]

Can I do this for WIN10?

[@infinity2z3r07]

my w10 did not like this. win defender blocked my network connection until I quarantined or cleaned two items in the area we modified, so i got cold feet and undid the entire operation

[@aseroxd]

Not really worried if they collect my pitiful data. What can they do with it anyway?

[@JohnDoe-wl8zk]

Make the most profit possible with it.

[@Britec09]

You can't avoid it really, someone will get your data

[@Specialist1Aim]

I think it's good if they spy a little so they know if a third party is interfering with their networks/systems

[@user-od4gs3iu4t]

"what can the do with it anyway" indeed what could go wrong? you never know. May be you learn it one day muhaha

[@nikng355]

Great.. ❤

[@Britec09]

You're welcome

[@dwightsmith5174]

Yes but is there a way to stop telemetry processes that hog resources?

[@DoctorDetroit100]

I had to disable Webroot service because it was using the host file. Then I could edit the host file and then turn on webroot service (WRSVC) again. When Webroot starts up it take a long time (about 8 Minutes) to start. Computer is slow booting up because of webroot loading. After that computer runs fine. Annoying. Any thoughts.

[@laurentitolledo1838]

this one I like.... added the list to my DNS block list.... just in case....

[@joelav7222]

Must be Brit time 😊

[@floreamihaicristi2713]

How to block all truckers and data harvesters ? SIMPLE : Use other operation sistems : Linux , Ubuntu , etc and web browsers like Brave and Tor , add blockers , and dont allow updates just do it manual from safe official sources .

[@ravenv5]

Having something like pihole or adguard home would do better.

[@stevecato]

Wouldn't it be better to block these at your router? Microsoft won't be able to work around that. You also need to block any numeric IPs.

[@propacollector3499]

can you do a bit on new malwayebtes has vpn and and brower gard and the rest

[@franklidgad]

If you listen closely Brian sounds almost like a younger version of the Oscar winning actor Michael Caine. If you don't know who he is check out the movie "Secondhand Lions".

[@daviddunmore8415]

Just don't have anything to do with Microsoft - Apple is Unix at heart, or just install Linux. Mint is a great place to start.

[@kaseyboles30]

Has this been checked? nothing to keep MS from hardcoding ip4/ip6 addresses as fallbacks and even to ignore host file entries that reference their special domains. It's fairly obvious on both fronts IMHO. So and external, non ms, monitoring of outgoing traffic is needed to verify those special domains are not being accessed. Using windows own tools to check is just begging to be fooled. Using ping within the command prompt is likely a waste of time.

[@K1LLERP]

Couldn't a firewall block all telemetry??

[@MortalisPT]

Doesn't microsoft skip the hosts file?

[@DollyPocket]

Can’t these be blocked at the firewall. Is it not possible just to block everything unless it is approved by default? . The default position seems to be its leaky unless you block it and you can’t keep updating based on someone’s best guess on what’s on a list.

[@artistunknown9079]

Thank You

[@onknight]

Can't you just use pi hole instead

[@Britec09]

Many ways to do things

[@ShadowzGSD]

bummer, i only found 1 linux comment to troll 🤣

[@Britec09]

They still have one foot in windows

[@SeminarChauffeur]

I did this a few days ago, windows defender nuked it either today or yesterday. :( But I still have O&O Shut Up 10++ so I guess I'm still fine.

[@mahatmacoat7215]

Little Snitch for Windows........still unfortunately not yet.

[@ucrohenry]

You can just install an AI locally and use it to monitor the Microsoft telemetry, and block it. Much the way an anti virus program works. Your local AI should easily be able to keep your system clean, and you have regained control of your computer. There are plenty of videos describing the process of getting an AI up and running locally, and it will be your AI, not Microsoft´s AI

[@K1LLERP]

Will this affect gaming on xbox live??

[@timstevens3361]

thx Britec

[@larsvaahlmar1784]

I've had windows just ignore the host file. It's true it was a few years back.

[@a.j.haverkamp4023]

It’s kind of hilarious that simple home users really seem to thinking there is a Microsoft employee dedicated to them, watching every key click they make. Don’t worry, nobody cares about what you do.

[@videodude8137]

What chew guys today. Huh. What does that mean?

[@AlekseyPokotilov]

Thx man!

[@varietyrange4166]

Hey Britec09, any solution on CrowdStrike? This is why I don't upgrade to Windows 11.

[@ghost762]

Could I add these domains and IPS to Pi hole?

[@Six4691]

Any difference between the UK & US host lists

[@debeeriz]

l only use the host file to block ads, and to stop my cracked software from calling home, never though to block microsoft

[@Taffy84]

Hosts file has readonly attribute, you didn't tell people to turn that off and back on after editing it.

[@cplcabs]

why not follow the instructions in the video rather than try to edit the file in its location?

[@Taffy84]

@@cplcabs You still have to set it to read only after editing it.

[@trilobitemmmxxx8019]

First thing to do is disable Crowdstrike.

[@davesradiorepairs6344]

I know... Stop using Windows...! There are a lot of Linux alternatives out there, and they're free...

[@louey2x]

how to do this for updates

[@JohnnyKongest]

doesnt work w me, all mircosoft come as before

[@alf8718]

This is not the way to "Stop Microsoft Windows Spying" unfortunately. The only way to stop them from spying You is to stop using MS Windows altogether! Or live with the thought that they know everything about You. Another thing about privacy: Whatever online services are used by somebody (email, "Cloud" FTP etc) Companies like Google, MS etc. know about it and store all this data and if You suddenly become a POI (person of interest), governments and unfortunately some other powerful organizations too have access to all this stored data about a POI.

[@antoineralic01]

hey um whats the Github link you've used

[@ChrisGR93_TxS]

my custom iso doesn't have any telemetry 😂 tried all the domain names and it doesn't find any hosts

[@YaseinAbdi]

but this solution expires in 7 days . that means it only works for one week

[@Britec09]

Use script to update, takes less than a minute

[@YaseinAbdi]

@@Britec09 but you have to keep track of it an remember it I'm not taking about the steps here. but other than this inconvenience its a good method

[@zamadahmad]

Thanks

[@mtnbkr2k59]

Is it possible to send middle finger emoji's?

[@Douglas_Blake_579]

Messing with the host file does not prevent Windows from spying ... it simply stops it from contacting Microsoft. The CPU time and energy is the same. All you're dong is blocking the transmissions. There are half a dozen Services that, if shut down, will totally silence the system and free up a lot of resources inside the computer. Just set their status to "Disabled"...

[@johngoard8272]

Nice one Brian but a tad compicated for this old bloke and frankly knowing what Microsoft is like thye will soon slipm in more to et what they want so sorry I am not going to bother.

[@ennay76]

Very nice but the Github address is unreadable, so....... so much for that.