How to stop apps from spying on Windows

How to stop applications on Windows from spying and updating in the background to show pointless ads using Firewall. Join our Weekend Workshop event on discord: discord.gg/tps... Free Intrusion Detection with Crowdsec : www.crowdsec.net/ (sponsor)
Buy the best antivirus: thepcsecurityc...
Join the discussion on Discord: discord.tpsc.tech/
Get your business endpoints tested by us: tpsc.tech/
Contact us for business: thepcsecurityc...

[@CedroCron]

Setup Simple Wall. Block everything by default unless you choose to allow either: One-time, period of time, or permanently. Works great, light-weight and stops everything.

[@DayzGone]

Thanks for posting this! I was going to suggest Zonelabs Firewall, but it has changed over the years.

[@HamedEmine]

This! ^ This! ^ This! ^ This! ^ This! ^ This! ^ This! ^ This! ^ This! ^ This! ^ This!

[@hlgshm]

I use simple wall too. So handy

[@CedroCron]

@@hlgshm Really happy with it. I send the guy a few bucks a year to help with the development. It's crazy how much garbage Windows 11 wants to connect to the internet for. I also use Chris Titus Tech: Ultimate Windows Utility for stripping out a lot of garbage from windows, blocking telemetry, delaying feature but not security updates to Windows as well. He's here on KZbin if you want to check him out. Oh and you can even strip out Microsft Edge, Bing and One-Drive permanently and set a new default browser like Brave or whatever you want instead of Edge. Even for crap in Windows that would normally open in Edge!

[@ethimself5064]

WOW. Just how does this work? One needs to start from scratch with what they already have etc. I will check out/Thanks

[@cheesecake9501]

Nice, thanks for keeping people informed.

[@megumin_6548]

<a href="#" class="seekto" data-time="420">7:00</a> - Finally someone said it

[@Peter_Enis]

1. install windows 11 fresh without an internet connection using rufus-method. 2. Go trough all privacy settings 1 by 1 in windows (there are more hidden than you think) 3. Install (via usb stick) Tinywall firewall, delete all allowed programs (ie explorer and edge etc). And only allow apps that really need internet (firefox with noscript and adblock plus for example...ofcourse check your privacy settings in firefox). Allow ms updates and smarscreen. Ofcourse install full firefox via that same usb-stick. I've got a map on a usb-stick with all these programs to install on new/reinstalled computers. 4. Dont't connect to a MS account 5. Use pi-hole with a privacy respecting (let's hope so) dns-server in your network. Monitor and block traffic you don't need. At my home it blocks about 85% of all traffic....think about that. 6. Install a hardware-firewall behind your router that blocks all ipv6-traffic so you have full control over your ipv4 traffic. 7. Sit back and be amazed at how much crap is being blocked.

[@RioF4]

you mean, Firefox and uBlock Origin, right?

[@Ehren1337]

Ehh just use memory tech tips script for windows install debloat and privacy tweak.

[@lussor1]

Just run chris titus wintool And Firefox sucks for privacy

[@GameNOWRoom]

Can you explain your point 6? Whats wrong about ipv6 traffic?

[@hiraethneko-chan1022]

If you dont have a pi-hole, you could use dnscrypt-proxy instead as your own dns server instead with blocklists from firebog

[@Pivas1]

What happened to the part 2 of testing kaspersky and other apps on ransomware?

[@Those_Weirdos]

Your mom happened. His turn finally came up and he got distracted.

[@the_2663]

Port Master, it's One of the Best Free software firewall.

[@MapsaiLiv]

Yeah, this one is definitely one of top tier apps

[@Rene-Channel]

Im getting blue screen of death when im using it when downloading via torrent large files.

[@MorganNilsson]

Portmaster is hands down the best!

[@rdmPerson]

​@@Rene-Channel Same. A couple of days ago I got BSOD after updating once. I reinstalled and didn't face any issues since.

[@aviationrambler]

I think this really demonstrates how awful modern computing has gotten. I've been wondering in recent years where my enthusiasm went and well... here's the answer.

[@cougar02000]

In the early 2000s we use to complain about spyware and ad ware, but it seems virtually every program we install is now spyware or adware, including Windows, I think it'll soon be time to switch to Linux, and hopefully do away with all this crap of spying on users.

[@klwthe3rd]

Linux is really the best answer. I am a Security Professional and i try to get all my clients to use Linux if they are open to the idea. My prefered distro is Zorin OS since it is much more polished than Linux Mint in my opinion. The piece of mind you get from using Linux is huge to me and my clients. It's not perfect but it's a huge step away from constant spyware in Windows products.

[@cougar02000]

@@klwthe3rd I first use Linux about 20 years ago, so I'm not unfamiliar with the OS, but the only reason I still use windows is because of the apps I use, but the way software is going with spying on us especially Microsoft it won't be long before I'm on Linux.

[@klwthe3rd]

@@cougar02000 I too have to retain a Windows 11 machine for alot of the jobs i do. But for all things personal or non work related i use Linux. You should try Zorin OS when you're ready to make the full move. You will love it.

[@eddielegs344]

Windows suks hard, sorry

[@vladik_yt3186]

I would recommend you to choose Linux Mint Xfce edition, it's lightweight (uses idle 600MB RAM, 900 with task manager) has much problems fixed out-of-the-box and all essential programs installed (package manager, Firefox, libreoffice, password manager and even torrent and mail client) combined with similar to windows interface giving pretty much windows-but-better experience. Im using it for half a year now and I didn't regretted it still, the only problem can be some apps not written for Linux but we have wine and proton

[@shurmurray]

there is a catch, though. sometimes its not obvious which .exe is running - the program or service just copied all over the place in several folders. Some of them are cache and backups, some - newly downloaded versions e.t.c, making it extremely hard to choose what to block or requiring you to set blocking rules for all of them. It whould be much better to use some whitelist and enable programms to access network one by one. Everything else must be blocked by default. Is it possible to use windows firewall in a whitelist mode?

[@THEMR2RACER]

I use Malwarebytes Windows Firewall Control. It uses windows firewall but has better interface/control of it including connection log. I block all by default and choose to continue blocking or allow if something want to connect for the first time (whitelist).

[@aMMa1726]

I'm glad you're talking about this with your audience. Thanks.

[@vlerke80s]

So we went from always update because security. To do not update because they remove functionality, add advertising and change your software to subscriptions... This is just a sad state. Maybe open source software is truly the way to go.

[@Petch85]

I feel like we have already lost the battle. even I think it is too much work to be left alone an most people don't even care. Companies can do whatever they want, cause there are no protection for the users. And the user needs to be an expert in everything now. Food, chemicals, child labor, animal welfare, it security, dynamic prizing, dark pattons and it just keeps going on and on.

[@Server0750]

nice, I still hope the EU will fors app`s to stop the spyware in apps.

[@ТоварищКамрадовСоциалистКоммун]

the great European firewall? just like a chinese one, but filled with democracy?

[@You_Could_Be_Next]

I use tinywall. I can't stand Windows firewall UI.

[@ultimatums1]

Its horrendous and convoluted.

[@RectalPower]

Is there better free alternatives to Tinywall? ​@@ultimatums1

[@robyee3325]

there are so many processes and apps its hard to know what to close and what will break your computer

[@redonk1740]

As mentioned, updates don't necessarily come with security updates or bug fixes. If security is a big concern, you should wait a while after an update to do it yourself. Let everyone else be the test subjects. Once you're satisfied that nothing nefarious made it through to the latest version of software, go ahead and update.

[@Wourghk]

Background auto-updates have never been trustworthy or useful, not even 15 years ago. You'd think modern computer users would know better by now.

[@ultimatums1]

I got torched on reddit when I pointed out that brave have telemetry enabled by default. Until calling brave several times they now show it in the first software run. And even with that there is still one flag they refuse to disable by default. Proton has analytics as well by default without notifying you that you have to disable manually. I'm so sick of people down playing this.

[@scabinicgaming905]

nice I use this since I use windows there is a batch script to block everything

[@spuddyl9938]

I would totally block Armoury Crate. What an absolute piece of garbage software.

[@ahornsirup7979]

The funniest part was where you mentioned Discord and spying applications in the same sentence. But not I the way I expected <a href="#" class="seekto" data-time="580">9:40</a>

[@iulyxpert]

What do you think about simplewall?

[@108kitsune]

You have friends? Way to expose that you're not an IT professional.

[@asksearchknock]

<a href="#" class="seekto" data-time="155">2:35</a> Armoury Crate is an absolutely terrible application / virus installed automatically by the firmware of your motherboard.

[@dave7474]

Fortunately you can change this in the bios on first boot, i learned this last time i used an asus board. It had a different issue though.. a capacitor exploded.

[@joepjoep9531]

@@asksearchknock it’s not indeed as Dave says

[@CyberPulseIT]

Dose comodo firewall take care of this or is it still something and add rules too windows firewall. Can you do a deeper dive into comodo firewall please !!!!

[@ТоварищКамрадовСоциалистКоммун]

this channel actually has videos about comodo ) use a search field at the channel if you have difficulties to find it using other search tools. The last video seems to be 2 year ago, "free security tools everyone should use" there will be probably no more videos about it cause comodo is now Xcitium

[@SireSquish]

Comodo does this well, and you set it to ask when new things try to connect. But I haven't seen an update in quite some time.

[@CyberPulseIT]

@@SireSquish sounds good thanks!

[@mondskiez309]

Choose the most sane route for privacy. Install Linux. Learn Linux. Use Linux. Love Linux. The initial learning curve for the absolute noob will payoff in the long run..

[@gregm1855]

If I can ever play my online games with Linux I will happily switch. Linux is getting a lot better with gaming and single player games work just fine. However every multiplayer game has anticheat and it’s a no go on Linux sadly.

[@TSgotstolengoddamm]

Thank you for explaining how to setup firewall

[@X-Ray_89]

I really like your videos on cybersecurity and I learn something new every time. By the way, if possible, could you make a video about programs (information theft) that work in the background or services that were created by them in the background for loading during work. For a week now after updating Windows 10, I have been trying to understand what can load at an interval of 7-8 seconds (a loading icon appears near the mouse even in a game if the cursor has not changed). I use antivirus Malwarebytes but it doesn't detect any threats

[@КГБКолДжорджКостанца]

Step 1: switch to linux 😂 Don't worry i like your channel and your advice has helped

[@DOOMAnimate-sh1ou]

why would you comment this if this is for Windows?

[@КГБКолДжорджКостанца]

@@DOOMAnimate-sh1ou because I am a fool

[@ImSimpIicity]

What??? Threre's apps that spy on you, even if you are on Linux, wtf is this take ???

[@Kimarnic]

switch to Loonix yeah, id rather have a worse than average experience! Thank you!

[@mineatomtr]

@@ImSimpIicity kernel drivers that are baked into linux and most open source ones will not be after your data unlike in windows.

[@xCDF-pt8kj]

Windows firewall is trash. This doesn't work if the program is using a separate .exe for updating. For example discord has a separate "update.exe", so blocking discord.exe from using internet doesn't stop it from accessing internet using update.exe. You're better off using simple wall or something that will autoblock internet access from such things.

[@RudysRetroIntel]

How about blocking connections via the host file?

[@ТоварищКамрадовСоциалистКоммун]

it's not a program specific. It will block on not block just an ip address or web site. and won't allow you to get a neat control of how when which apps may get access to the web

[@RudysRetroIntel]

@ТоварищКамрадовСоциалистКоммун Agreed. I use my host file to permanently block connections that I know I won't be turning back on.

[@swagmuffin9000]

even your mic sends the data?!?!

[@hotmixer2010]

Kaspersky Bitdefender and most security suites have firewalls

[@RFGSwiss]

instead of using those 3rdparty tools with kernel access, you should use built in windows stuff.

[@hopelessdecoy]

I did this by simply using Linux Mint and not choosing to use an OS that disrespects my privacy to begin with. Give it a shot and test your software and some alternatives to your Windows software. If you don't like it just reinstall Windows with your key. You could though have an overall better experience on Linux!

[@MK-jn9uu]

What Logitech options? I feel like they bundle the mouse functionality with all the other processes like, “app agent” or “app broker.”

[@AgentM124]

I wish updates would be split in security updates and feature updates. I know it's not easy, as a software developer myself.. but it's definitely best for the user. Easier way to rollback to previous version and ability to still get security fixes is really useful

[@astreaea.escanes]

Yes, not all apps require Internet to fully function what actual user wanted. If it works, and if that app does nothing 'good' if it accesses Internet, cut it off. Especially, paid software updater that no longer support additional updates until you pay next major version of it.

[@nikro7239]

Can a program bypass it somehow by launching some kind of script or another app that isn't blocked by firewall?

[@Coansp]

Can you make a video on the whole kaspersky & ultraAV situation that happened recently?

[@howlyfukk]

I wonder if simply disabling auto-updates removes most programs from this network access list

[@leoxo4685]

Could we get a video on UltraAV? The antivirus that is replacing the Kaspersky

[@italienn]

Linux gang rise up

[@brokenchimp0]

I don't use windows firewall cause it's shit. I use kasperskys firewall though.

[@grigoryk6401]

Just do not install this shit on you PC, and use WPD fjr Windows.

[@MrBoboka12]

Good luck on blocking kernel based drivers. Just don't use Windows.

[@mahaali-g1d]

I used to use this feature but any app which is made by Windows will remove this rule on a new Update. at least in my experience.

[@xoxofx5785]

We need new ui for firewall, so everyone can easily setup things. This one is very old and not user friendly imho, glasswire is a good example.

[@howlyfukk]

Why windows firewall only asks network permission for some but not all programs?

[@LaserFur]

a lot of MS apps use svchost to communicate. and you have to set the main page to default to blocking if you want to disable updates getting access due to the exe file name changing.

[@vpn6958]

Now I'm going to block everything except I use 😂

[@stephie3206]

Thanks 😊😊😊

[@Boomken76]

simple fixes to take back control of are devices is always a good thing.👍✌

[@yanipro3978]

You can just use Henry's simplewall firewall

[@zendrop-n7p]

Best KZbinr Best Channel Best Subscribe Best Like .........

[@ultimatums1]

I wish windows had a version of little snitch. But its macosx only.

[@mittenwald3679]

theres a rightclick tool for win , where you can block traffic

[@jhna314]

I switched back to Win7, offline mode.

[@gilbertplays]

I've used this a lot in work. I've become unfirable.

[@takemasterx]

But that doesnt allow the app to connect to the internet. We want the app to stop sending info not stop working right?

[@RudysRetroIntel]

Hey,what about Postmaster?? Is it still a good firewall??

[@lllIIIlIllIIll]

But how do I stop Windows from spying on Windows?

[@MrBoboka12]

Doing that is more complex than to switch to linux

[@pepparody]

Will you be doing an UltraAV test?

[@kaffuchino8244]

Quick q, how is this any different from using Portmaster and selecting Block Connections? Is doing it via Firewall more reliable or just the same? Thanks!

[@RectalPower]

They do the same thing in the end.

[@patrick_ita00]

what about blocking vanguard?

[@klipe1337]

I know it's quite simple to block connections by the windows firewall. But isn't there some software that can do this easily by turning a switch? I know that a antivirus program that I've used in the past could block programs by its own firewall. But my current AV (Eset) doesn't seem to have that. So is there any software out there that can do that easily?

[@Gateastrologykc]

simplewall

[@ТоварищКамрадовСоциалистКоммун]

what you talk about is the so called interactive mode. It's present in any advance firewall, including simplewall, Safing Portmaster and other. It might be included in an AV package if you got a good one (usually paid version, but might be exclusions)

[@Gateastrologykc]

@@ТоварищКамрадовСоциалистКоммун i don't like avast but it's in their free version as well

[@ТоварищКамрадовСоциалистКоммун]

@@Gateastrologykc yeah ) still not worth to go with them to my opinion ) many good firewalls available for free, but if you got a premium security package you most likely got a decent firewall included there

[@evilleader1991]

Kaspersky AV does that for me

[@MikaelKKarlsson]

Kaspersky's firewall interface isn't the snappiest to navigate, but one thing I like is that software is automatically grouped by vendors. Making it easy to deny everything from for instance Adobe. 😋

[@evilleader1991]

I also like that by default it will block apps access to the internet and a window will show up asking whether you want to allow the app access to the internet. Same with microphone usage, it will explicitly let you know when an app is using your microphone

[@garrettmandujano2996]

How do you feel about Snort as an IDS?

[@metallurgico]

step 1: install Linux step 2:

[@Enolaeno111]

Any one have book about disk geometry

[@alipetuniashow]

As a person who used, Ubuntu and arch Linux. Stick to windows if you want to and avoid Linux cultists if you can.

[@Rene-Channel]

does VPN stop apps from spying on me? or at least make it not connected to me?

[@Bryghtpath]

Feels like privacy is getting harder to protect every day.

[@haykelg340]

How to stop windows spying using this method?

[@juankfayad5788]

what do you think of Fort Firewall?

[@ConstantineProg]

You need to do a video with the best monitoring tool

[@alexhichamk6630]

i would like to disable the apps that are running (connecting to internet)in the background while i dont use them but when i fire them i would like them to work but one closed by me: they will not connect to the internet. your usecase is just blocking apps while working in the background for all the time.

[@ТоварищКамрадовСоциалистКоммун]

if you are happy that every time you start your app it first tries to get an update and propose you to wait for a while, then don't install any background service/updater of the apps. In most programs it's an available option, you just need to dig the menus to find it, or find the updater running and change its options

[@tpdrsl37]

Even easier, install Linux.

[@craxo8796]

Join the Church of Emacs

[@ultimatums1]

Why do you have msedge running?

[@jupiterjones3789]

Probably testing reasons. As an IT-Supporter I have it on my working computer running, too.

[@ТоварищКамрадовСоциалистКоммун]

why not? tune its access rights in firewall the way you like )

[@jupiterjones3789]

@@ТоварищКамрадовСоциалистКоммун I have to test stuff in all usual browsers; privately I don't use it at all

[@NunoFerreiraX]

Stop using Windows.

[@junior-ky1mz]

Firewall App Blocker

[@florindo.]

Very informative, Sir.

[@fimdy6530]

i just pissed on my wall

[@user-df8cc1ec5e]

Is there something similar we can do with Android? There are plenty of apps on my phone that I can't delete but definitely don't want it connecting to the internet.

[@lussor1]

NextDNS and some firewall app but you need root

[@boines]

pihole for every device on network blocks 99% telemetry ads etc etc. also turn in defender /firewall if you don't have a wall etc for everything trying to connect non ms wise.

[@lussor1]

I use NextDNS way more easy

[@evilleader1991]

Pihole is a godsend

[@GameNOWRoom]

What is the best way to back up software before a software update in case it turn out to be worse than before like you mentioned it could be turning into a subscription software or ad adds that weren't there before? Because I think it's not enough to copy the .exe and the folder that .exe is in because of different locations it might save data like the appdata folder or registry etc.?

[@evilleader1991]

You can prolly find the old setup files online

[@GameNOWRoom]

​@@evilleader1991 Although you put yourself at higher risk of downloading malicious software, I hope that there is an option to back up the current software. Thought about a complete PC backup, this would work but isn't practical because you want to use your PC.

[@jibberjabber6919]

reddit: having no firewall is enough

[@ТоварищКамрадовСоциалистКоммун]

enough for what?

[@smndr2268]

What obout processes that migrate its self to genuine app or process or even hide itself. Curious saw in the metasploit exploits development

[@ТоварищКамрадовСоциалистКоммун]

processes don't just migrate by themselves. it's either you or your sysadmin let them do it, or your OS allows them to do it uncontrolled. Might be both reasons as well )

[@smndr2268]

@@ТоварищКамрадовСоциалистКоммун thanks for the info

[@charliesretrocomputing]

#StayInformed! Great video!

[@ravenblaylock13]

So great tyvm

[@hydradragonantivirus]

Comodo best firewall

[@inquisitiveminds8603]

Thank you...

[@Well_Edumacated]

that's why we don't use Windows for anything personal. Linux over everything!!!!

[@CheSt3-R]

Sadly Linux is not for everybody, is more complex to use and some people will get angry trying to understand how works.

[@hydradragonantivirus]

​@@CheSt3-Rthat's myth

[@ТоварищКамрадовСоциалистКоммун]

linux is for free. unlike windows. but you are right that linux is not for everyone. It's only for chosen. Hence it's up to you to decide if you are the chosen one

[@macattack1481]

Little Snitch works great on a Mac. Is there something similar for windows?

[@lussor1]

Tiny, simple wall, portmaster

[@evilleader1991]

Windows Firewall Control, Glasswire

[@lussor1]

@@evilleader1991 glasswire sends data to USA servers

[@ethimself5064]

I never get unexpected Pop Ups of any kind. Perhaps I'm doing things OK Note: These utilities sound quite complicated, time consuming and potentially dangerous unless one is quite experienced in using them or others like them

[@ТоварищКамрадовСоциалистКоммун]

any advance utility has a multiple choice of pop ups control. You can make it (temporarily) silent, you can see them only upon opening the firewall app, etc etc

[@ethimself5064]

@@ТоварищКамрадовСоциалистКоммун I use 3 ad blockers and Bitdefender's Anti-Tracker

[@ethimself5064]

@@ТоварищКамрадовСоциалистКоммун I use blockers and Bitdefender's Anti-Tracking

[@ТоварищКамрадовСоциалистКоммун]

@@ethimself5064 this might be helpful but if it's not called a firewall, it's most likely STILL NOT a firewall )

[@Plazmal]

Been using Windows Firewall for a very long time to block stuff, thought I was crazy for this 😅

[@JohnDoe-ln8jp]

the short answer is : you can't. used to be advanced HIPS like Comodo, but those mostly went away, only decent remaining one is Eset's but only for security (and not as powerful as it used to be), not privacy.

[@ТоварищКамрадовСоциалистКоммун]

Comodo is now called Xcitium, HIPS packages are also available in many different security packs

[@JohnDoe-ln8jp]

@@ТоварищКамрадовСоциалистКоммун I am completely uninterested in "cLoUd EdR" or other spyware. even if I was interested in it, most solutions are not available to users, only to companies, they wont even reply to your emails if you ask. and while HIPS is still available even in some non-enterprise solutions, almost all of them have a small subset of monitored actions that they used to.

[@ТоварищКамрадовСоциалистКоммун]

why don't you use an older version of the app you like? internet remembers everything, just in case if you don't have your own downloaded collection )

[@JohnDoe-ln8jp]

@@ТоварищКамрадовСоциалистКоммун using a very outdated AV is not very wise, and probably impossible due to kernel and system API changes

[@ТоварищКамрадовСоциалистКоммун]

you don't have to use an outdated AV ) get an AV that you like, a firewall that suits your needs, and a HIPS utility of your choice )

[@shaycray7662]

Tip number 1: Use Linux.

[@ThatGuyThatCommentedOn_A_Video]

If only Linux didn't require a PhD to understand. I wish there was a nice middle ground between Linux and windows that wasn't mac, because windows sucks, and Linux is too complex and unsupported

[@Khual]

​@@ThatGuyThatCommentedOn_A_Video I mean ubuntu is pretty straight forward

[@ТоварищКамрадовСоциалистКоммун]

linux is not equivalent to a firewall. It is highly recommended to install a firewall in linux

[@MrBoboka12]

Its not complex and its supported.

[@evilleader1991]

​@@ThatGuyThatCommentedOn_A_Videodepends on the distro, lot of easy to use Linux distros out there

[@muhdiversity7409]

1. install windows 11 fresh without an internet connection using rufus-method. 2. Install Linux over the Windows install. 3. Sit back and be amazed at how much crap is being blocked. You're welcome.