Pretty much, yes. As I mentioned elsewhere, they enable spying on kids by default if they're logged in through a Microsoft account. If they're going to spy on kids, adults get the same mechanisms installed.

kstrauser refers to: https://news.ycombinator.com/item?id=10111271

I remember some months ago where they only claimed fixing something minor (like, something that's not even an executable but some text-based or at least data file) in the patch and the list included also a huge amount of files including cryptwhatever.dll (not the actual name). "Backdoor time" thought I. As little as I checked however, it didn't look like a real smoking gun then.

It seems a common practice somehow that since some time their updates aren't "hand picked" but generated by the computer without too much human control or that the programmers don't have time, or simply nobody cares there anymore.

I'd be glad if somebody would sensibly explain all that. Including these recent "everything you type will be transferred" and "the list of all your files will be made" claims.

It would be interesting to see what someone knowledgable would report back on by taking something like zynamics bindiff onto pre- and post this KB.

I've never seen the proof of the claims from the article discussed here three days ago:

https://news.ycombinator.com/item?id=10099180

"Information transmitted: All text typed on the keyboard is stored in temporary files, and sent (once per 30 mins) to: oca.telemetry.microsoft.com.nsatc.net pre.footprintpredict.com reports.wes.df.telemetry.microsoft.com"

On another side, MSFT never issued the statement what they actually collect, probably because their lawyers will need a month or two to clear that up.

If the quote is true, it's a real full-blown keylogger. It's hard to believe. But there should be the pressure to find out the truth.

The worst thing is that it seems the users also don't care.

Do read kstrauser's top post in this discussion regarding automatic snooping of kids and emailing the parents, implemented by MSFT in Windows 10.

https://news.ycombinator.com/item?id=10111271

He posted the snapshot later. Unbelievable. But it seems they really do this. Built in spying, then sending reports by e-mail.

I've noticed recently that I'll get a weekly e-mail from Microsoft showing my "week in review", with inline copies of photos I took with my phone and uploaded to OneDrive (I have 1TB of space with OneDrive thanks to an O365 account). This just started a few weeks ago.

So, Microsoft is not only rifling through the contents of my OneDrive camera roll, they are then transmitting the photos to my email unencrypted, without ever asking me to opt in to this service. I used to praise Microsoft for being opt-in as opposed to Google's opt-out; I guess that's all out the window now (no pun intended).

I guess it's finally time to flip the switch on the OwnCloud account I've been testing and drop OneDrive.

This seems loosely equivalent to Google's account activity mail, but with invade-by-default. I can see it being useful, though, despite the flaws which you describe.

Also – potentially – incredibly dangerous, as other posters mention. I don't think that we can have the possibility of one without the possibility of the other here.

Reminds me of this: http://www.siao2.com/2011/03/22/10144474.aspx (see comment thread)

Yes, it was something like that "we changed the currency letter in Nowhereislands, list of 30 changed files includes cryptography.dll, well, why not."

The currency letters are since forever nicely separated from the code in the data NLS files, I thought I knew.

Whatever, there are enough problematic actions we're sure of, seen in the other posts here.