[Guide] Disable Data Collection in Windows 10

[Aloha]

Tomasz86,

SearchUI can be blocked with SIB++ but it may be running again if W10 has some new updates. Applying the option to block it again will work but only after a restart, which I don't really like. 

I'll leave it alone. Don't want to do anything risky that can lead into a failure to boot Windows! Thanks so much for your explanation, but doubt that I can understand it thoroughly!

[NoelC]

I continued to see a VERY low rate small packet UDP traffic flow to / from 157.56.106.184 by iphlpsvc as I mentioned up above.  I/O rate is literally about 1 or 2 bytes per second overall, according to Resource Monitor.  Almost off the radar.

 

When I blocked it with the Windows firewall, it began communicating instead with 94.245.121.253.  Once I blocked that I didn't see it go further, but it did continue to try multiple times to re-establish communications with 94.245.121.253.

 

Interestingly, 157.56.106.184 is Microsoft Corp. in Redmond while 94.245.121.253 is Microsoft Limited in London.

 

Edit:  After a long while it switched to using 94.245.121.251.  I'll keep blocking and listing addresses here to see how far this goes.

 

The iphlpsvc list so far:

 

157.56.106.184

94.245.121.253

94.245.121.251

 

 

-Noel

Edited August 15, 2015 by NoelC

[mikedigitize]

Lenovo used Windows anti-theft feature to install persistent crapware;

 

http://arstechnica.com/information-technology/2015/08/lenovo-used-windows-anti-theft-feature-to-install-persistent-crapware/

[tomasz86]

Some useful links:

 

http://www.ghacks.net/2015/08/14/comparison-of-windows-10-privacy-tools/

http://arstechnica.com/information-technology/2015/08/even-when-told-not-to-windows-10-just-cant-stop-talking-to-microsoft/

http://forums.mydigitallife.info/threads/63874-REPO-Windows-10-TELEMETRY-REPOSITORY

http://www.dasm.cz/clanek/jak-z-windows-10-udelat-desktopovy-system (in Czech but the commands are in English)

 

Instead of wasting time on looking for all those specific MS addresses it may be better / easier to just use firewall to block everything except for Windows Update, and then unblock specific things if necessary.

[NoelC]

I think both will be needed, based on my experience (allowing exceptions and blocking rules).

 

There are some components - like System and a number of svchost-based services - that need general access to the network for the system to function properly.  It's necessary to block individual addresses so that those components can still generally function while keeping the system as private as possible.

 

Finding just the right balance / combo is the key.  I'm not there yet.

 

-Noel

[JorgeA]

Some useful links:

 

http://www.ghacks.net/2015/08/14/comparison-of-windows-10-privacy-tools/

http://arstechnica.com/information-technology/2015/08/even-when-told-not-to-windows-10-just-cant-stop-talking-to-microsoft/

http://forums.mydigitallife.info/threads/63874-REPO-Windows-10-TELEMETRY-REPOSITORY

http://www.dasm.cz/clanek/jak-z-windows-10-udelat-desktopovy-system (in Czech but the commands are in English)

 

Instead of wasting time on looking for all those specific MS addresses it may be better / easier to just use firewall to block everything except for Windows Update, and then unblock specific things if necessary.

 

Thanks for the links.

 

For the MDL one, though, you'll have to register to see the information in the original post:

 

You need to login to view this posts content.

[PinkFreud]

You need to login to view this posts content.

Here's the lists.txt list included:

 

Lists.7z

[JorgeA]

Thanks very much!

 

--JorgeA

[NoelC]

I'm becoming a bit more knowledgeable on this subject by trying to develop a firewall strategy for allowing Windows Update while blocking everything by default, and observing how the system reacts.

 

1.  There are a LOT of addresses the system needs to access to successfully complete a Windows Update (and I'm sure I haven't seen nearly all of the potential ones used).

 

2.  It's not hard to imagine that Microsoft would have coded the data gathering logic to piggy back on one of the processes / services that already access the network and are needed for Windows Update, making it particularly difficult to filter out spying activity while allowing Windows Update.

 

3.  Based on firewall logs, communications with servers that appear in a hosts file entry (e.g., a-0001.a-msedge.net) still get attempted, implying the addresses are coded into the software or that they're using a means to resolve names that doesn't involve hosts.  The firewall IS blocking stuff still with all the hosts entries in place.

 

-Noel

Edited August 18, 2015 by NoelC

[Tripredacus]

that they're using a means to resolve names that doesn't involve hosts.

If this is the case, then I would expect it to be the same as how Edge browser works, as it doesn't use Hosts. I suspect it goes directly to DNS, which gives a different type of opportunity when it comes to blocking those connections.

[351837]

Well.... it's started

 

http://www.oo-software.com/en/shutup10

 

but

[jaclaz]

but

 

but:

http://www.oo-software.com/en/made-in-germany-made-in-berlin

 

We at O&O are proud of our German heritage, and proud to represent the quality, security and satisfaction long associated with products “Made in Germany”.

 

 

jaclaz

[JorgeA]

Wow, if it actually works as advertised, that would be a fantastic tool.

 

--JorgeA

 

[NoelC]

 

We at O&O are proud of our German heritage, and proud to represent the quality, security and satisfaction long associated with products “Made in Germany”.

 

 

 

Winky smiley is right - there are plenty o' typos in their screen grabs.  The product might be a wee bit rushed.

 

Still, it looks as though it's a central place from which one can access many/most/all of the privacy settings.  Nice idea.

 

-Noel

[maxXPsoft]

 

 

Still, it looks as though it's a central place from which one can access many/most/all of the privacy settings.  Nice idea.

 

-Noel

 

 

But the MDL one removes the Apps you don't want

and

MajorGeeks has this although latest is 1.50 will severely knock the Apps out