Microsoft patch has privacy concerns

[ITSec]

We have discussed in other threads the issues associated with Windows 10 and privacy, as well as Windows using Internet bandwidth without telling the user.

Microsoft is including a patch in this month's distribution that is not a functional or security patch, but instead includes functions that add 'call home to Microsoft' behavior of Windows 10 to earlier versions.

These patches are labeled as "Compatibility update for keeping Windows up-to-date" - the Windows 7 64-bit version is described under KB2952664. The Windows 8/8.1 version is KB2976978.

If you are concerned by the Windows 10 'feature' of sending information to Microsoft, I recommend you do NOT install these updates. Unclick the checkbox in Windows Update for these patches, and then right-click the patch description and select "Hide Update".

Not installing this patch has no impact on whether your system is secure.

[rodekyll]

Just to add -- it's an 'optional' update so you can choose to not install it.

kb 2952664 is also installed to W7-32-bit.

[rboe]

 :1:   

[jumpmaster]

Just to add -- it's an 'optional' update so you can choose to not install it.

kb 2952664 is also installed to W7-32-bit.

I'm not a Windows 10 guru, but some other products have a global "load updates without asking" option.  If Windows 10 is among these, you'll only get the choice to not install it if you go into Settings & find the way to cancel this automatic loading.  I have a suspicion that this option is hidden as cleverly as many of the other security-related user options in Windows 10 that have been highlighted in earlier discussions.

[ITSec]

Just to add -- it's an 'optional' update so you can choose to not install it.

kb 2952664 is also installed to W7-32-bit.

Actually, it is coming across in the 'Important' set on most systems, not 'Optional' - most people accept these without checking to see what they do.

Jumpmaster - For Windows 10 users this is a non-issue, as these functions are baked into that version from the start. In earlier threads, we discussed ways to minimize or eliminate the privacy concerns for that platform.

[Zoom Zoom]

Actually, it is coming across in the 'Important' set on most systems, not 'Optional' - most people accept these without checking to see what they do.

Jumpmaster - For Windows 10 users this is a non-issue, as these functions are baked into that version from the start. In earlier threads, we discussed ways to minimize or eliminate the privacy concerns for that platform.

Along with the suggestions you have previously mentioned in other threads, I found another thing that is supposed to further lock things down. Spy Bot Anti Beacon. Newest version is 1.5.0.35. Supposedly, it locks down some things that us normal computer humans don't know how to get to, further restricting ties to mommy.

Have you heard of it, and what do you think of it?

Thanks,
John Henry

[jumpmaster]

Actually, it is coming across in the 'Important' set on most systems, not 'Optional' - most people accept these without checking to see what they do.

Jumpmaster - For Windows 10 users this is a non-issue, as these functions are baked into that version from the start. In earlier threads, we discussed ways to minimize or eliminate the privacy concerns for that platform.

Thanks for the update/info, and also thanks for all the info you and others provided on this issue previously.  I went thru my Windows 10 shortly after I first downloaded it and followed most of the suggestions given on maintaining as much privacy as possible.  Personally, I do check the "Important" downloads before accepting them, and have rejected them in the past when they include changes I don't want or when I just don't understand the description - sort of like the thinly disguised riders inserted into legislative proposals that sound great on the surface that we hear about months or years after a bill is passed by Congress.

[StuCorpe]

After reading the above posts I went looking in my PC and found that my version of Win 10 (version 1607) doesn't seem to give me any choice about what updates are installed. The most I can do is "defer" some feature updates" to a later time, maybe as long as a few months. If there is any way to "hide" some updates like there was in Win7 I can't seem to locate it.

[ITSec]

Along with the suggestions you have previously mentioned in other threads, I found another thing that is supposed to further lock things down. Spy Bot Anti Beacon. Newest version is 1.5.0.35. Supposedly, it locks down some things that us normal computer humans don't know how to get to, further restricting ties to mommy.

Have you heard of it, and what do you think of it?

Thanks,
John Henry

SpyBot stuff is generally pretty good, and if it makes life easier for you then it's worthwhile. I've used SpyBot Search and Destroy for many, many years. Just make sure you download it from the source website or an authorized mirror, as the hackers love to use spoofed sources for this stuff to attack the unsuspecting.

[ITSec]

After reading the above posts I went looking in my PC and found that my version of Win 10 (version 1607) doesn't seem to give me any choice about what updates are installed. The most I can do is "defer" some feature updates" to a later time, maybe as long as a few months. If there is any way to "hide" some updates like there was in Win7 I can't seem to locate it.

You will search in vain - it's not there any more!

Microsoft in its infinite 'wisdom' has decided that only large organizations using Windows 10 Enterprise version will be given any significant control over updates/upgrades in future. Everyone else will get updates much the way they do with their cellphones and tablets - when the company want to push them to you. You may be able to keep them from interrupting you while you work (schedule installation and reboot for a later time), but you can't pick and choose in Windows 10.

If you connect using wireless rather than an Ethernet cable, you can set the connection to 'metered' and it will stop using that connection for updates. However, you then won't get the security updates either, at least until you connect to an Ethernet connection (which can't be set to 'metered') or change the setting back on your wireless.

For my Win10 devices, I set all wireless connections to 'metered' except my home wireless, but that's about all that can be done.

I am testing a tool called Portable Update to give more control over the Win10 update function. For anyone with a limited bandwidth connection, this may be particularly useful. I think we had a member or two here who were looking for something to deal with the fact they had very poor Internet access at home?

[leroysch]

You will search in vain - it's not there any more!

Microsoft in its infinite 'wisdom' has decided that only large organizations using Windows 10 Enterprise version will be given any significant control over updates/upgrades in future. Everyone else will get updates much the way they do with their cellphones and tablets - when the company want to push them to you. You may be able to keep them from interrupting you while you work (schedule installation and reboot for a later time), but you can't pick and choose in Windows 10.

If you connect using wireless rather than an Ethernet cable, you can set the connection to 'metered' and it will stop using that connection for updates. However, you then won't get the security updates either, at least until you connect to an Ethernet connection (which can't be set to 'metered') or change the setting back on your wireless.

For my Win10 devices, I set all wireless connections to 'metered' except my home wireless, but that's about all that can be done.

I am testing a tool called Portable Update to give more control over the Win10 update function. For anyone with a limited bandwidth connection, this may be particularly useful. I think we had a member or two here who were looking for something to deal with the fact they had very poor Internet access at home?

Thanks IT for confirming that the non-enterprise Win 10 doesn't let you control what gets pushed to Win10 computers. I also was wondering if the ability to control what updates I receive was really gone or whether I just hadn't clicked around enough. If you do find something that lets that type of control be re-asserted, please share!

[stevet]

Funny.  As I'm messing around on my W10 'puter on this quiet Saturday morning, a little booger pops up on my screen from Microsoft asking, "How likely are you to recommend Windows 10 to a friend or colleague?"

I don't normally answer, but I did this time.  It gave a 1-5 check box (1= would not rec., 5= highly rec.), and I clicked 1, then offered this explanation in the text box:
"Entirely too much invasion of my computer privacy, the program watching and reporting back to Microsoft with nearly everything I do.  If I was savvy enough with computer systems, I'd leave Windows altogether.  Maybe it is time I learn about my alternatives."

I used Ubuntu on a previous laptop that crashed its MS Vista system after a couple years.  It was not a computer I used for anything more than surfing and email, and Ubuntu worked fine, but I don't think I was able to load a version of MS Office Suite onto it.  I ended up loading one of the other open source "Office-like" suites for the rare occasion I needed a word processor or similar.

Steve.

[Triple Jim]

...Ubuntu worked fine, but I don't think I was able to load a version of MS Office Suite onto it.

Right, when you go to Linux, which I can't think of many reasons not to do, you should get out of the mindset of using Microsoft programs.  I've been using LibreOffice and its predecessor OpenOffice for many years, and have had very few compatibility problems, and none that didn't have workarounds.  These days, LibreOffice works well, and lets you open and save documents in many formats, including several versions of Microsoft programs.