Windows 10 covertly sends your disk-encryption keys to Microsoft

boing
21

I opened a command prompt as system, killed the files, and made the directory DENY ALL EVERYONE, with read access to my interactive account.

Files are still gone.

4 Likes
22

Don’t worry. You will gonna like Linux just fine. The latest Linux Mint is getting very good reviews for being user friendly. And you should note that those updates for 7 that you’re getting? Well, MS is making very sure that telemetry is working there also now, just like in 10. It’s a shame as 10 is actually pretty good at its core. It is just that Microsoft is fucking it up horribly.

2 Likes
23

Still claiming Win10 has a keylogger, when that was long ago debunked? That really doesn’t help your credibility, which is pretty slim at this point.

You can read the truth here and here and here and dozens of other places.

Why is Cory still lying about this?

24

Seriously?

My new system has been acting funny…

Please help me.

25

Defense in depth says that you local disk should be encrypted (generally), not just specific files on that disk. That way, when someone steals your computer or rips your hard drive out, they don’t have, say, all of your tax records and every photo you’ve ever taken.

26

Why not ask @Doctorow by name if you want an answer?

1 Like
27

Yeah I know but I so rarely take the 17" beast out of the house… I should look into something of an encryption solution for it.

28

Forwarding of encryption keys is not “a keylogger”. Keyloggers are when a buffer of whatever users type is saved to a file somewhere. That’s not what this article is about.

2 Likes
29

There’s so much FUD and scaremongering here and I don’t even know where to start except to say this: Apple does the same thing with FileVault. Where’s the outrage?

1 Like
30

You might try reading the original post I was commenting on, and you’ll see the false claims about a secret keylogger in Windows 10:

Windows 10 has many unprecedented anti-user features: a remote killswitch that lets it disable your hardware; keylogging and browser-history logging that, by default, sends it all to Microsoft, and a deceptive “privacy mode” that continues to exfiltrate your data, even when you turn it on.

And in an attempt to back this up, he links back to the same Boing Boing article that got it wrong in the first place.

31

Yeah that was the other thing about the earlier posts from him about win10, this was the same info that Apple, Google, etc collect if you used their cloud/online/services/whatevers but where was all the outrage for them?
Keylogging of some sort I just can’t see how you can get around for things like -start button-start typing name of application- are so damn nice and it isn’t going to work unless the machine is recording your input. Same with google autocomplete which can be fun at times…

So yeah for cortana to actually do it’s job it needs to log keystrokes. It was kinda skeezy it was sent back to the mothership for future usability by default but was easily turned off and still no worse than what apple/android does.

1 Like
32

I don’t run Siri.

1 Like
33

though you can (and should) ask Microsoft to forget the keys later.

Yeah, AFTER they forwarded the keys to the No Such Agency first.

2 Likes
34

Forwarding of encryption keys is not “a keylogger”. Keyloggers are when a buffer of whatever users type is saved to a file somewhere. That’s not what this article is about.

This, plus that there’s no way in hell that I’m going to trust any claim that there aren’t any keyloggers in Windows. Just as much as you can’t prove that Bertrand didn’t leave any teapot in an orbit around the sun between the Earth and Mars.

1 Like
35

So, now that I’ve looked this over, it seems like this is an enterprise-support friendly policy more than anything else and it just makes Windows’ Encryption useless for people who want to keep their data secure from external sources.

Honestly, my thinking is that if you’re going to be security-conscious then you’re going to want to use a third party tool anyway, right?

So with Truecrypt defunct wouldn’t not using windows and using Veracrypt or another similar tool be the way to go anyway?

I’m not seeing this as OMGZWINDOWZISAWFUL (windows 10 is actually a nice step up IMHO), just as ‘we shouldn’t have been relying on Windows Encryption anyway’

36

No, I know you don’t.

Right away, Al!

37

Yeah I have cortana turned off as well just cause I am old and get off my lawn kinda thing.

3 Likes
38

I have it off because despite my efforts to use it, I really don’t know how to use the damn thing and I just don’t find any value in it. I keep hearing of all of this cool stuff you can do with it but I can’t seem to figure out how to, well, do any of it. It’s all so obtuse – like it supposedly gets all this data about you to personalize itself to you, but other than the “Notebook” stuff I have no idea how it actually does this. I find it really aggravating.

Screw it. I’d rather just open a browser.

3 Likes
39

You do realize that Bertrand was demonstrating the utter foolishness of just the sort of argument you’re proposing - the stupidity of believing in something just because it can’t be disproved - right? Or do you spend your days believing in all of the world’s religions, as none of them can be disproved? Hey, here’s one - when you die, you’re reborn on another planet, but as a rutabaga. Since it can’t be disproved, you need to start believing it right away.

4 Likes
40

He was making a point about currently unprovable propositions, certainly, but I am not sure about your gloss.