News for hackers. Stuff that matters.
Re:Announcing the Windows Bounty Program by v4n4d1s on Wednesday July 26, 2017 @03:08PM (#14859178)
Dear Microsoft

>Any critical or important class remote code execution, elevation of privilege, or design flaws that compromises a customer’s privacy and security will receive a bounty

Windows 10 has a major design flaw which compromises your customers privacy and security. You call it Telemetry and it can't be disabled completely(definitely a bug! Nobody would make such a stupid decision, amiright?).

Please send me further instructions on how I can claim my 250k.

Also: Why is there nothing for Server 2016?

Re:Announcing the Windows Bounty Program by mercurysmessage on Wednesday July 26, 2017 @03:14PM (#14859214)
Just like Apple, yet no one complains about them.
Re:Announcing the Windows Bounty Program by nilved on Wednesday July 26, 2017 @03:21PM (#14859292)
Where do you live where you're not hearing complaints about Apple?
Re:Announcing the Windows Bounty Program by mercurysmessage on Wednesday July 26, 2017 @03:24PM (#14859319)
Not Silicon Valley ;p.

I never hear anyone complain or hardly anyone even knowing about it.

Re:Announcing the Windows Bounty Program by mrkrabo on Wednesday July 26, 2017 @03:26PM (#14859347)
Because you can disable it. No?
Re:Announcing the Windows Bounty Program by mercurysmessage on Wednesday July 26, 2017 @03:30PM (#14859380)
Yes, with some effort: https://github.com/drduh/macOS-Security-and-Privacy-Guide

You probably could with the same amount of effort for Windows, but at least Windows makes it more clear that it is happening.

Re:Announcing the Windows Bounty Program by jve on Thursday July 27, 2017 @02:16AM (#14863041)
Yep, windows has documented it fairly well with the possible configuration options: https://docs.microsoft.com/en-us/windows/configuration/confi...
Re:Announcing the Windows Bounty Program by GeekyBear on Wednesday July 26, 2017 @04:23PM (#14859929)
As far as telemetry goes, there is a simple on or off checkbox in the Security and Privacy control panel.
Re:Announcing the Windows Bounty Program by xlocicicig on Thursday July 27, 2017 @05:50AM (#14863837)
Re:Announcing the Windows Bounty Program by GeekyBear on Thursday July 27, 2017 @11:59PM (#14871856)
I should have been clearer that I was referring to how one turns off telemetry on MacOS.
Re:Announcing the Windows Bounty Program by skgoa on Thursday July 27, 2017 @03:14AM (#14863257)
The real issue being that it is set to ON by default and that it tends to reset itself randomly after updates.
Re:Announcing the Windows Bounty Program by GeekyBear on Thursday July 27, 2017 @11:54PM (#14871838)
I'd say the real issue is that Windows 10 not only defaults to having telemetry turned on, but that it also does not allow a system administrator to turn it completely off.

However, I would agree that if preferences are changing without user intervention, that would definitely be a problem.

I haven't heard about users having that problem and can't find examples of it happening on the web. Do you have a citation?

Re:Announcing the Windows Bounty Program by eitland on Wednesday July 26, 2017 @03:25PM (#14859342)
Defending you here:

In this setting this is relevant even if funny.

I'll still downvote you for the same comment elsewhere.

And I mostly defend MS for enabling telemetry by default but I don't defend how absurdly hard they have made it to disable it.

Re:Announcing the Windows Bounty Program by cm2187 on Wednesday July 26, 2017 @06:36PM (#14861023)
I am mostly surprised by the absence of server 2016 as well
Re:Announcing the Windows Bounty Program by tkubacki on Thursday July 27, 2017 @01:52AM (#14862965)
Windows servers are legacy - even SQL Server is on Linux now...ok jokes aside - might be PR move to not make nervous their old-school corporate customers
Re:Announcing the Windows Bounty Program by 43gg43g32g on Wednesday July 26, 2017 @03:52PM (#14859612)
Don't know why you got downvoted for this on a hacker forum.
Re:Announcing the Windows Bounty Program by devrandomguy on Wednesday July 26, 2017 @04:37PM (#14860085)
From the site guidelines (https://news.ycombinator.com/newsguidelines.html):

> Please avoid introducing classic flamewar topics unless you have something genuinely new to say about them.

For the record, I'm not the one who downvoted the parent for an honest question.

Re:Announcing the Windows Bounty Program by Someone1234 on Wednesday July 26, 2017 @04:46PM (#14860173)
It is off-topic.

There are threads where it would be relevant, in this case they're just using this thread as a sounding board because the title contains the word Microsoft. Plus we have all read near identical posts and the corresponding discussion hundreds of times already, because they appear in every thread that brings up Microsoft.

It is kind of like Godwin's law, except instead of Hitler it is telemetry and Microsoft. If there is new information or new things to discuss, absolutely let's talk about it, but repeating the same complaint gets old after the nth time.