NEWS CATEGORIES:



NEWS ARCHIVE >>
SOFTPEDIA REVIEWS >>
MEET THE EDITORS >>
Home / News / Microsoft / Windows

Windows


Forget about the WGA! 20+ Windows Vista Features and Services Harvest User Data for Microsoft

From your machine!

By Marius Oiaga, Technology News Editor

30th of June 2007, 11:14 GMT

Adjust text size:



Enlarge picture
Are you using Windows Vista? Then you might as well know that the licensed operating system installed on your machine is harvesting a healthy volume of information for Microsoft. In this context, a program such as the Windows Genuine Advantage is the last of your concerns. In fact, in excess of 20 Windows Vista features and services are hard at work collecting and transmitting your personal data to the Redmond company.

Microsoft makes no secret about the fact that Windows Vista is gathering information. End users have little to say, and no real choice in the matter. The company does provide both a Windows Vista Privacy Statement and references within the End User License Agreement for the operating system. Combined, the resources paint the big picture over the extent of Microsoft's end user data harvest via Vista.

Reading Between the EULA Lines

Together with Windows Vista, Microsoft also provides a set of Internet-based services, for which it has reserved full control, including alteration and cancellation at any given time. The Internet-based services in Vista "coincidentally" connect to Microsoft and to "service provider
computer systems." Depending on the specific service, users may or may not receive a separate notification of the fact that their data is being collected and shared. The only way to prevent this is to know the specific services and features involved and to either switch them off or not use them.

The alternative? Well, it's written in the Vista license agreement. "By using these features, you consent to the transmission of this information. Microsoft does not use the information to identify or contact you."

The Redmond company emphasized numerous times the fact that all information collected is not used to identify or contact users. But could it? Oh yes! All you have to know is that Microsoft could come knocking on your door as soon as you boot Windows Vista for the first time if you consider the system's computer information harvested. Microsoft will get your "Internet protocol address, the type of operating system, browser and name and version of the software you are using, and the language code of the device where you installed the software." But all they really need is your IP address.

What's Covered in the Vista License?

Windows Update, Web Content, Digital Certificates, Auto Root Update, Windows Media Digital Rights Management, Windows Media Player, Malicious Software Removal/Clean On Upgrade, Network Connectivity Status Icon, Windows Time Service, and the IPv6 Network Address Translation (NAT) Traversal service (Teredo) are the features and services that collect and deliver data to Microsoft from Windows Vista. By using any of these items, you agree to share your information with the Redmond Company. Microsoft says that users have the possibility to disable or not
use the features and services altogether. But at the same time Windows update is crucial to the security of Windows Vista, so turning it off is not really an option, is it?

Windows Vista will contact Microsoft to get the right hardware drivers, to provide web-based "clip art, templates, training, assistance and Appshelp," to access digital software certificates designed "confirm
the identity of Internet users sending X.509 standard encrypted information" and to refresh the catalog with trusted certificate authorities. Of course that the Windows Vista Digital Rights Management could not miss from a list of services that contact Microsoft on a regular basis. If you want access to protected content, you will also have to let the Windows Media Digital Rights Management talk home. Windows Media Player in Vista for example, will look for codecs, new versions and local online music services.

The Malicious Software Removal tool will report straight to Microsoft with both the findings of your computer scan, but also any potential errors. Also, in an effort to enable the transition to IPv6 from IPv4, "by default standard Internet Protocol information will be sent to the Teredo service at
Microsoft at regular intervals."

Had Enough? I Didn't Think So!

Microsoft has an additional collection of 47 Windows Vista features and services that collect user data. However, not all phone home and report to Microsoft. Although the data collection process is generalized across the list, user information is also processed and kept on the local machine, leaving just approximately 50% of the items to both harvest data and contact Microsoft. Still, Microsoft underlined the fact that the list provided under the Windows Vista Privacy Statement is by no means exhaustive, nor does it apply to all the company's websites, services and products.

Activation, Customer Experience Improvement Program (CEIP), Device Manager, Driver Protection, Dynamic Update, Event Viewer, File Association Web Service, Games Folder, Error Reporting for Handwriting Recognition, Input Method Editor (IME), Installation Improvement Program, Internet Printing, Internet Protocol version 6 Network Address Translation Traversal, Network Awareness (somewhat), Parental Controls, Peer Name Resolution Service, Plug and Play, Plug and Play Extensions, Program Compatibility Assistant, Program Properties-Compatibility Tab, Program Compatibility Wizard, Properties, Registration, Rights Management Services (RMS) Client, Update Root Certificates, Windows Control Panel, Windows Help, Windows Mail (only with Windows Live Mail, Hotmail, or MSN Mail) and Windows Problem Reporting are the main features and services in Windows Vista that collect and transmit user data to Microsoft.

This extensive enumeration is not a complete illustration of all the sources in Windows Vista that Microsoft uses to gather end user data. However, it is more than sufficient to raise serious issues regarding user privacy. The Redmond company has adopted a very transparent position when it comes to the information being collected from its users. But privacy, much in the same manner as virtualization, is not mature enough and not sufficiently enforced through legislation. Microsoft itself is one of the principal contributors to the creation of a universal user privacy model.

The activation process will give the company product key information together with a "hardware hash, which is a non-unique number generated from the computer's hardware configuration" but no personal information. The Customer Experience Improvement Program (CEIP) is optional, and designed to improve software quality. Via the Device Manager, Microsoft has access to all the information related to your system configuration in order to provide the adequate drivers. Similarly, Dynamic Update offers your computer's hardware info to Microsoft for compatible drivers.

Event Viewer data is collected every time the users access the Event Log Online Help link. By using the File Association Web Service, Microsoft will receive a list with the file name extensions. Metadata related to the games that you have installed in Vista also finds its way to Microsoft. The Error Reporting for Handwriting Recognition will only report to Microsoft if the user expressly desires it to. Through IME Word Registration, Microsoft will receive Word registration reports. Users have to choose to participate in the Installation Improvement Program before any data is sent over at Microsof.

Ever used a print server hosted by Microsoft? Then the company collected your data through Internet Printing. Network Awareness is in a league of its own. It does not premeditatedly store of send directly information to Microsoft, but it makes data available to other services involving network connectivity, and that do access the Redmond company. Via Parental Controls, not only you but also Microsoft will monitor all the visited URLs of your offspring.

Hashes of your Peer Name tied to your IP address are published and periodically refreshed on a Microsoft server, courtesy of the Peer Name Resolution Service. Every time you install a Plug and Play device, you tell Microsoft about it in order to get the necessary device drivers. The same is the case for PnP-X enabled device, only that Windows Update is more actively involved in this case.

The Program Compatibility Assistant is designed to work together with the Microsoft Error Reporting Service, to highlight to Microsoft potential incompatibility errors. For every example of compatibility settings via the Compatibility tab, Microsoft receives an error report. The Program Compatibility Wizard deals with similar issues related to application incompatibility. File properties are sent to Microsoft only with the item that they are associated with.

You can also volunteer your name, email address, country and even address to Microsoft through the registration process. A service such as the Rights Management Services (RMS) Client can only function in conjunction with your email address.

All the queries entered into the Search box included in the Windows Vista Control Panel will be sent to Microsoft with your consent. The Help Experience Improvement Program also collects and sends information to Microsoft. As does Windows Mail when the users access Windows Live Mail, Hotmail, or MSN Mail. And the Windows Problem Reporting is a service with a self explanatory name.

But is this all? Not even by a long shot. Windows Genuine Advantage, Windows Defender, Support Services, Windows Media Center and Internet Explorer 7 all collect and transmit user data to Microsoft. Don't want them to? Then simply turn them off, or use alternative programs when possible or stop using some services altogether. Otherwise, when your consent is demanded, you can opt for NO.

What Happens to My Data?

Only God and Microsoft know the answer to that. And I have a feeling that God is going right now "Hey, don't get me involved in this! I have enough trouble as it is trying to find out the release date for Windows Vista Service Pack 1 and Windows Seven!"

Generally speaking, Microsoft is indeed transparent - up to a point - about how it will handle the data collected from your Vista machine. "The personal information we collect from you will be used by Microsoft and its controlled subsidiaries and affiliates to provide the service(s) or carry out the transaction(s) you have requested or authorized, and may also be used to request additional information on feedback that you provide about the product or service that you are using; to provide important notifications regarding the software; to improve the product or service, for example bug and survey form inquiries; or to provide you with advance notice of events or to tell you about new product releases," reads a fragment of the Windows Vista Privacy Statement.

But could Microsoft turn the data it has collected against you? Of course, what did you think? "Microsoft may disclose personal information about you if required to do so by law or in the good faith belief that such action is necessary to: (a) comply with the law or legal process served on Microsoft; (b) protect and defend the rights of Microsoft (including enforcement of our agreements); or (c) act in urgent circumstances to protect the personal safety of Microsoft employees, users of Microsoft software or services, or members of the public," reveals another excerpt.

And you thought that it was just you... and your Windows Vista. Looks like a love triangle to me... with Microsoft in the mix.

TAGS:

Windows Vista | privacy
Read by 305,787 user(s) | Add comment | Link to this article TWEET THIS


Article rating:
Good (3.6/5) 61 vote(s)    

Subscribe to news | Print article | Send to friend

© Copyright 2001-2009 Softpedia
Contact:

 

 

SEARCH THE NEWS ARCHIVE :




Today's News
| Yesterday's News | News Archive


MORE RELATED ARTICLES:


Windows Vista Multilingual User Interface

Windows Vista Hardware Assessment Tool Available

Introducing... Windows Vista Embedded

Mac OS X 10.5 Leopard = Windows Vista

Mac OS X Leopard and Windows Vista the Last of their Kinds

Yes, You Can Upgrade 32-bit Windows XP to 64-bit Windows Vista

Windows Vista to Windows XP Downgrades - The Evolution

The Worst, Absolute Piss-Poor Windows Vista Home Basic, Home Premium, Business and Ultimate Comparison

User opinions:


Comment #1 by: Lost Angel on 30 Jun 2007, 15:33 GMT reply to this comment

Old news, but every other time creepy to read...

Comment #1.1 by: Frederick on 28 Apr 2008, 13:55 GMT

Nothing that comes out of America is as good as it used to be.
Get Linux is free. Say goodbye to the Military Industrial Complex.


Comment #2 by: Galt on 01 Jul 2007, 22:22 GMT reply to this comment

Nothing to fear....unless you are a kiddie predator, or just plain vanilla variety, or a thief who loves those cracked software programs, and the yummy free music tracks of the latest wacko artist and those hot movies.

Then again perhaps you had a flair for math at an early age, and discovered what you could do with a good algorithm's, a hex editor, C and some re-engineering software and decided that someones privacy and self respect was some liberal or Conservative plot to thwart your F...U mentality. So you wander at night poking your tool into anyones business you can crack for amusement, happy finger destruction, email confetti delivery, or those great "others" accounts or CC numbers. Besides you need a new an bigger HD...or that ultimate game machine.

Of course you could also be a plotting terrorist and you watched too many Pinky and the Brain cartoons, learned all his mistakes, and think you're smarter than a cartoon. Besides there is always someone nifty and current you can hate to justify your plot of taking over the world at any given time.

OK, so maybe your a good guy doll, and not into any of those fun things, but you're not real bright either, so you save your backups, and data on some server run by some company on the net so you don't lose all that precious material besides you have to trust someone else's mind sometime...don't you?? Your own is just not up to the task!!

9/11 and previous attacks elsewhere not on American soil changed the world, and most especially the world of the Internet and it's access. Pinky and the Brain became less of a cartoon, and more a reality, and there was a good reason Microsoft was not dismantled, and Vista was born (how long was it under developement..think back...think towers..) and that article only covers a small percent of what it's capable of. But your a good guy doll, and you play it straight, and have nothing to fear and 1984 was just a good read!! Oh...don't forget your tinfoil hat...I think the pyramid style is back in vogue.

Comment #2.1 by: darkfortunekookie on 22 Apr 2008, 05:38 GMT

"
Nothing to fear....unless you are a kiddie predator, or just plain vanilla variety, or a thief who loves those cracked software programs, and the yummy free music tracks of the latest wacko artist and those hot movies."

Lets take this one small step further.

Lets say that nice Wifi router next to you is broadcasting all that data about your use habits to the laptop in my car, and since it's got user info sitting around, I can do things after I've compromised your rather insecure machine like look at where you do your banking, what your IM app does, get credit card numbers...things that should've been deleted a long time ago.

Or better yet. Say you're engaged in an activity the government or a large business does not like such as funding and operating a local union or even better, organizing congressional testimony and getting bills introduced and passed. Hey, great! Microsoft gets a request for data under the patriot act and national security and nobody knows it was the CIA who stole your identity and ruined your life. Think it's conspiracy theory? It's fact and it's happened more than once.

I like, though, how you tie 9/11 into Microsoft peeking at your data. That's the king of the cake.

Let me put it this way. The average computer user doesn't read the EULA and is dumb. They are not informed. Microsoft knows this; they spend billions to know this. And they are taking advantage of it. Is it right? How many users would opt out of sharing info on their computing habits with microsoft?

From the sound of it you believe the same thing I do since you feel it so necessary to say we've got to give up our freedoms to a corporation, not even a governmental agency FFS, so you think most people would say No.


Comment #3 by: Hold2File on 02 Jul 2007, 21:31 GMT reply to this comment

Galt,
Your comments are not only totally VALID (serious compliment to you), but out of admiration for mentioning "Pinky and the Brain" (who now seem to be operating out of the Oval Office), may I suggest further reading:
Not only are "Brave New World" and "1984" excellent primers on current globalization culture, but read Robert Heinlein's "Friday" (written in 1982) which describes life in a "technical society" where terrorists (and freedom fighters) use technology to do very nasty things while trying to stay invisible. Interesting violence and sex as well. (This IS a Heinlein book.)
Fortunately, the Islamist fanatics are not as bright as they could be otherwise the destruction to everyone would be even worse. (I taught Chemical-Biological-Radiological warfare in the Army Reserves in 1971 and I am thankful I am on OUR side.) Hopefully the "Islamo-Idiots" will stick with standard operating systems so that there is a chance of following the bread crumbs as opposed to Ubuntu or some of the other, more open systems.
It IS going to get interesting.
What I am looking forward to is someone realizing that (shade of 1984) the Saudis and Iranians really out-sourced their war with Iraq to the US, since shutting down the supply of Iraqi oil is good for their economies. What we need to do is to out-source it to a country with sufficient military, economic, engineering, credibility, and cultural resources to take over and end the War in Iraq for us.

And China needs the Iraqi oil and image as a world peacemaker even more than we do.


Comment #4 by: thejynxed on 03 Jul 2007, 02:09 GMT reply to this comment

This crap is easily overcome:

Autopatcher Vista. All of the MS updates, and extra MS software, and none of the spying and crap associated with MS themselves.

Never rely on Microsoft for updates ever again. In fact, you can blackhole every single one of their IP addresses, and still use their so-called "features" in Vista. You can get an entire list of Microsoft address ranges to block from www.bluetack.co.uk. That is the site of Bluetack Internet Security Solutions, creators of Protowall and the Blocklist Manager. They also have an online converter, to convert the blocklist into compatible listings to integrate into IPTables, IPChains, Sygate Pro, Outpost Firewall, etc.

For Autopatcher Vista, visit: http://www.softpedia.com/get/System/OS-Enhancements/AutoPatcher-Vista.shtml

Comment #4.1 by: Bert on 01 Aug 2008, 14:09 GMT

More info may be needed I think...

I use ZoneAlarm to control network access. By this means I can deny access to programmes that I don't know about or don't approve of. I did this with a lot of stuff in Vista and soon found that application programmes were being crippled if I denied access to the network.

Also, if I put a total block on the internet while I was away from the machine for a while I would return to find programmes like SeaMonkey (internet suite) could no longer access the network - nor anything else. In effect if I put a block on the internet Vista then applies it's own block and I have to reboot to get access back.

I want to use my computer as I want to use it: not as MS want to use it. If MS want to decide how I use my computer they can damned well pay for it.

Bert.


Comment #5 by: DepThought on 03 Jul 2007, 12:23 GMT reply to this comment

Talking of Pyramid Schemes and Nothing to fear...

How about National Security letters and reading the emails of non-US residents???

How about National Security letters and intercepting phishing website requests to track users movements???

How about sniffing of traffic of non-US businesses and governments?

How about sniffing Instant Messagers of non-US citizens?

I'm sure a lot of insight is gained into an untold amount of business deals that affect American interests thus fall under the catagory of National Security. I wonder what groups get access to this information???

Not to mention making use of information for political gain, smear campaigns and undermining opposition groups.

I'm sure Nixon is impressed.


Comment #6 by: davidtb on 03 Jul 2007, 13:24 GMT reply to this comment

Instead of a scary article on Big Brother. How about a way to overcome it, easily.

Comment #6.1 by: roadatlas on 10 Jul 2007, 00:52 GMT

There's nothing devious about this.

Basically it's used to see what features or behaviours customers use the most and then allows Microsoft to redesign and/or ask questions on how to make it better.

It also allows Microsoft to see what features are never or almost never used, and then cut them out of the various products.

To "overcome" it, go through the various programs in Windows and uncheck the boxes for the various Customer Experience Improvements Program.

On Windows Media Player, click Cntl-T -> Options, click the Privacy tab and uncheck the box that says "I want to help make Microsoft software and services even better by sending Player usage data to Microsoft."

Office uses them, Messenger uses them, IE uses them, etc. You need to figure out how to turn it off in each of them.

Comment #6.2 by: mr_ak on 13 Aug 2007, 06:26 GMT

Turning off all of the various customer experience improvement features is not "overcoming it easily", as those are not alone responsible for sharing information. And after all, the majority of users does not know about those features and how to turn them off. If they are for "Customer Experience Improvement" then a good way of improving my personal experience would be to have such features off by default in all components of Windows and on only by my sole consent while not impairing full experience of the product. But by the looks of it, they might as well have called it "Windows Patriot Act Edition".


Comment #7 by: Jose_ on 30 Aug 2007, 03:15 GMT reply to this comment

Galt, you are hilarious.

I am going to strip naked and hold up a video camara over my head 24/7 so that you can verify that I never do anything illegal. I am a good citizen. What do I have to worry about out? I don't even have gonorrhea.

You are hilarious.

I plan to one day write a serious book on Microsoft's abuse of .... Yeah, and I want Microsoft to get an early glimpse.

You are hilarious.

As evidence by Vista itself and posters like yourself, Microsoft is paranoid. Very afraid that there is an alternative to their trash that is 100% the opposite of this trash.

As evidenced by
http://www.groklaw.net/article.php?story=20070827111019189
http://www.groklaw.net/article.php?story=20070829070630660

and many many many many more things, Microsoft belongs with Microsoft Vista over here
http://youtube.com/watch?v=FVbf9tOGwno

In the can!

Get a clue: linuxtoday.com

You are a funny man. Don't ever let anyone tell you are aren't.


Comment #8 by: Nick on 21 Apr 2008, 16:00 GMT reply to this comment

Galt and hold2file make valid points...jose not so much.

I think it would be helpful to look at the European privacy model and realize that there are those that recognize and appreciate the importance of finding a BALANCE (did you hear me say BALANCE?) of personal privacy and public responsibility. These people not only recognize and appreciate that balance, but are willing to codify it into sensible and enforceable laws that actually have some teeth.

Wish I could say the same about the good ol' US of A, but that's not going to happen with the current scofflaws who run the Whitehouse and their flaccid and ineffectual counterparts in Congress (I'm referring to both parties I might add).

Until sensible men and women stand up in positions of leadership and work for change, we can only expect more infringement of personal information, the loss of millions of personal data records thru corporate neglect, and continued and unrestrained identity theft. It's sad that we have fallen so far from greatness...


Comment #9 by: Jeff Smith on 21 Apr 2008, 16:39 GMT reply to this comment

Oh noes not my IP address. You make it sound like this is a doomsday scenario when it is not. Conanical has my IP address and software usage because I have downloaded packages from them.


Comment #10 by: Mohammad Almoslim on 21 Apr 2008, 17:02 GMT reply to this comment

Unix/Linux has always been the solution, and it will always be.
It's available everywhere, localized to any language. and becomming super easy to use day after day. Besides .. you don't like what you have , pitch in, and create your own version .. ain't that just awsome.
Human achievements should be shared, and all should benefit from. which is what is happening under the hood of linux.
Me , my family members, and almost all of my friends are using different distributions of linux and are very happy with it.

Thank you very much for the amazing article, it is more than valid to be kept as a reference.


Comment #11 by: UBGOD on 21 Apr 2008, 21:57 GMT reply to this comment

One word. Linux. Any flavor one price: Free.
Secure, fast, and YOU control what data goes where.


Comment #12 by: Live-N-Learn on 24 Apr 2008, 16:36 GMT reply to this comment

During World War 2, the French telephone system kept non-expiring records, just like Microsoft and many business & governments do today. Then the Nazis invaded, seized the command & control of France, and looked up all those records. They discovered who was connected to who, rounded up all the "intellectuals", educators, and their contacts ... and shot them. Today, France no longer keeps non-expiring telephone records. Lesson, anyone?


Comment #13 by: THISnewsISpureFUD on 30 Apr 2008, 18:44 GMT reply to this comment

this news is pure FUD


Comment #14 by: Noname on 15 Dec 2008, 20:21 GMT reply to this comment

I suggest that everyone here think about the comment by Live-N-Learn above. It is extremely naive to believe that the collection of personal information poses no threat to you. But it looks like most people have been brainwashed to act like sheep, and it is important to keep them this way.


Comment #15 by: cheapoldfarmerguy on 27 May 2009, 04:35 GMT reply to this comment

Anyone remember the Great Micro$0f+ Monopoly Trial?

John Dvorak wrote that "some people" thought that the whole trial was an attempt to get Micro$0f+ to 'share' their 'backdoor' keys w/ the feds.
When Micro#0f+ wouldn't, it was 'on w/ the trial!'
Showtrial, maybe. Did anything actually change?
Not so's you'd notice.
This ain't 'new' w/ Vista;
95, or 98, was reported to change some 20-30 odd files in the OS, just because a Word doc was edited.
Yeah, & 9x could 'call home' too! (Just not so many ways.)

The real 'threat' is that at some point in the future
(like when the balloon goes up, or the economy really tanks,
the 'flu' kills millions, or whatever starts it) THEN all that 'data' is gonna' come home to roost.

Then, when Micro$0f+ AND the guverment come looking for for all you "anti" types;
well, that's when the excrement will contact the atmospheric oscillator.
ciao, baby.


Comment #16 by: Simon on 08 Oct 2009, 08:24 GMT reply to this comment

Yeah, best get a good firewall, set it too paranoid!
To fix the problem all together, get a MAC !
Or run Linux its free and its much better than Windows.
(I have used Windows for over 20 years)

I installed OSX on my PC 2 months ago, without changing anything else,

My machine ran twice as quick! I will never ever use a Windows machine again. If you don't agree it's simply because you are a Windows user and do not have the money to buy a Mac. If you want to install OSX on a PC, then you best be a Genius, otherwise your wasting your time.
Simon

Share your opinion:

Your Name:
Your Email Address:
(will not be used for commercial purposes)
Solve this to prove you're not a bot: =
Your review/opinion:

 




Windows tabGames tabDrivers tabMac tabLinux tabScripts tabMobile tabHandheld tabGadgets tabNews tab

SUBMIT PROGRAM   |   ADVERTISE   |   GET HELP   |   SEND US FEEDBACK   |   RSS FEEDS   |   ENTER NEWS SITE   |   ENGLISH BOARD   |   ROMANIAN FORUM