3
  1. Are there any evidences that Windows is spying the users ? Let's focus on Windows 10. I am almost sure it does. The things like telemetry and Cortana... However I never saw a proof like university proof or catch Microsoft red-handed and recorded on video which then could be posted on some website.

  2. The second question is related to the applications that claims to block Windows from spying the user. One of the such an application is Windows Anti Beacon. I made a research about such an applications about a year ago. Is there evidence that such an application was spying on its own ? Are they successful in what they claim to do ? Any reliable testing was done and publish online ?

2

There is plentifull evidence that windows sends large amounts of telemetry to Microsoft. As for how they use the data, no. There is not and likely never will be any evidence of how they use the data they collect.

For anti-spy software, it is next to impossible to make sure it works. Even if there was a paper proving it works on one version of windows, that research would be invalidated with the next update.

To verify an anti-spy program is not spying, check your firewall. A blocker program has no business sending anything more tahn few bytes over the network. Most that it should do is chceck for updates and maybe validate license, which should be small transfer at most once in a few hours.

  • An easy way to monitor the DNS requests on your network is to use a Pihole. This can be any Linux machine, not necessarily a Raspberry Pi. Install and see what requests to connect to where. Blacklist away... pi-hole.net – Andy Anderson Sep 19 '18 at 17:35
  • 2
    @AndyAnderson careful with that. From what I can tell, Windows is rather shady about how it resolves its domain names. It for example completely ignore the hostsfile. I would not be surprised, if windows used some nonstandard domain name resolution to bypass exactly what you are proposing. Letting you block some non-shady windows traffic but still letting the telemetry through. I would strongly recommend blocking based on IPs, not domain names. – Peter Harmann Sep 19 '18 at 18:49

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.