News for hackers. Stuff that matters.
Re:ChakraCore GitHub repository is now open by magicalist on Wednesday January 13, 2016 @01:59PM (#10896594)
> Most of the privacy settings that people are most worried about is tied into Cortana or more specifically what you allow Cortana to do on your behalf

In all of these discussions on HN, the only ones bringing up "worries" about Cortana features have been people defending Windows 10 (and now Windows 8 and 7) data collection. It's easy to disable and, if you choose not to use it, it won't collect data anyways. The same can't be said of telemetry.

> Which tells them when you launch a Windows 10 "app" and some basic computer information

Actually it's not clear what else is being collected, because Microsoft won't disclose what's being collected. Is there evidence that only data about usage of Windows store apps is being collected?

> But even without that setting/ability the apps themselves could conduct the same reporting

Which would be needed to take into account when deciding on if that app should be used. Just to be clear, that means the application I choose to run might be collecting analytics, but my OS is also collecting analytics on the applications I'm choosing to run because it thinks it should.

> Nobody can actually point to exactly what specific information Microsoft is even taking

Yes, because Microsoft won't tell anyone what it's collecting!

> and have even less data yet still to back up any claims

As a baseline, you yourself talked about how we know they're collecting information about application usage. That right there is undesirable behavior for many that we have plenty of evidence for.

Re:ChakraCore GitHub repository is now open by Someone1234 on Wednesday January 13, 2016 @02:43PM (#10896917)
> Actually it's not clear what else is being collected, because Microsoft won't disclose what's being collected. Is there evidence that only data about usage of Windows store apps is being collected?

Microsoft has disclose what is being collected[0]. People just choose to ignore it and making conspiracy theories instead. So where is the evidence that Microsoft is lying?

[0] https://technet.microsoft.com/en-us/library/mt577208(v=vs.85...

> Which would be needed to take into account when deciding on if that app should be used.

How? Neither iOS, Android, or Windows restrict HTTP. Any app can conduct analytics and unless you're running them one by one and analysing the packet dumb you wouldn't be the wiser. At least Windows tells you.

But that's what all this is about. Most other major operating systems conduct similar activities but there is no public outcry about that... Why the double standard?

> Yes, because Microsoft won't tell anyone what it's collecting!

Yes they do[0].

> That right there is undesirable behavior for many that we have plenty of evidence for.

But not something you can readily avoid. I'd go as far as to say that the vast majority of apps or applications send basic telemetry back to the manufacturer, it is the norm now, and has been the norm since before 2007.

Re:ChakraCore GitHub repository is now open by magicalist on Wednesday January 13, 2016 @04:20PM (#10897592)
> Microsoft has disclose what is being collected[0].

let's quote them:

> Security. Information that’s required to help keep Windows secure, including info about telemetry client settings, the Malicious Software Removal Tool, and Windows Defender.

> Basic device info, including: quality-related info, app compat, and info from the Security level

Notably vague, no "conspiracy theories" needed.

And you're still missing the point that even the specifics that have been explicitly disclosed are still enough to be objectionable to some.

edit: I missed the much more extensive list of what is being collected via "basic" telemetry:

https://technet.microsoft.com/en-us/library/mt577208(v=vs.85...

It's great they disclose more information than I thought they did, though this list is actually far worse than I had guessed.

> Most other major operating systems conduct similar activities but there is no public outcry about that... Why the double standard?

what other major operating system doesn't let you opt out of telemetry-like reporting?

Incredibly, incredibly easy fix: just let people opt out of telemetry reporting.

Re:ChakraCore GitHub repository is now open by chc on Wednesday January 13, 2016 @06:00PM (#10898340)
> It's great they disclose more information than I thought they did, though this list is actually far worse than I had guessed.

If this list is far worse than you'd guessed, why were you worried at all? Nothing on this list looks like personal information. It's basically just a hardware profile and useful but not invasive system information like when your computer crashes. It doesn't appear to record any of my information.

Re:ChakraCore GitHub repository is now open by hackuser on Wednesday January 13, 2016 @04:52PM (#10897842)
Thanks; that's very helpful and a good point. However, to 99% of Windows users, Technet articles are not accessible or realistic solutions.
Re:ChakraCore GitHub repository is now open by sqeaky on Wednesday January 13, 2016 @02:25PM (#10896778)
Even if microsoft told, that doesn't mean we should automatically trust it. The could be wrong or lying.

I would prefer source code, but someone will eventually do packet captures to figure at least some of it out.

Re:ChakraCore GitHub repository is now open by janpieterz on Thursday January 14, 2016 @12:59AM (#10899888)
You have no way of trusting any other company that releases closed systems either. Like iOS, or manufacturers Androids. You have to trust some institution at some point.
Re:ChakraCore GitHub repository is now open by sqeaky on Tuesday January 19, 2016 @01:10PM (#10932551)
This is true, but microsoft has a particular history of malice few other companies can match.
Re:ChakraCore GitHub repository is now open by Someone1234 on Wednesday January 13, 2016 @02:45PM (#10896928)
Go ahead and provide evidence that they're wrong or lying.

People have been drum beating this privacy stuff for over six months now. But they seem to lack specific evidence, so now I invite you to present it.

Re:ChakraCore GitHub repository is now open by k33n on Wednesday January 13, 2016 @04:47PM (#10897809)
You're the only one who has used the term "conspiracy" here. Again (for the 5th time you've been told) Microsoft has used exceptionally broad terminology to describe what data they are collecting. Since you're the one drumming on about "evidence" for a "conspiracy theory", why don't you provide a definitive list of the exact data they are collecting?
Re:ChakraCore GitHub repository is now open by DoubleMalt on Wednesday January 13, 2016 @03:35PM (#10897279)
It would be easy to dispel the accusations by open sourcing windows [/troll]