> Might as well suspect every single Linux device you have sending an ARP request then, who knows where it's going? Maybe they're exfiltrating it to Canonical.

That's a good question. So I looked into Ubuntu, since you mentioned Canonical. As it turns out, Ubuntu the OS (22.04 LTS) does NOT send ANY data to 3rd parties of its own volition, at all. And it doesn't even send data to Canonical, of its own volition. [1][2]

[1] https://ostechnix.com/install-ubuntu-desktop/ [2] https://ubuntu.com/legal/data-privacy

Maybe I should switch to Ubuntu. You should think about it too.

> Why is it that every Microsoft thread on HN with a hint of the word "Windows" generates the most overblown theories and accusations? I'm honestly expecting someone to soon say "what if Windows 11 takes a picture with your webcam and sends it back to Redmond?".

Given what happened with Roomba, and Amazon & Google smart devices, this would not surprise me in the least.

Ah, so you looked at their privacy statement. But you can do that for Microsoft too, so why suspect that they're gathering your local devices if they say they don't? If you don't believe that, you better check all processes sending ARPs on Linux as well.