I really wish people would stop making perfection the enemy of good when Windows comes up in any capacity on here. We all know Windows sucks for privacy but for certain users and industries it’s still quite mandatory so answer the damn question and provide resources to make it as least intrusive as possible.
Just wanna take a moment to let people know about a very, very good and reputable tool for privacy and windows. Honestly, it should be on the privacy guides website imho.
Linux is better, but if you have to use Windows, there is the Chris Titus Tech tool available. You can set power-user privacy options easily, massively debloat your windows installation, install programs, and easily set your update settings to security only, if that is what you want.
It’s also freaky easy to use, and comes from one of the foremost minds in the tech world today.
If I remember correctly, Pro should give you access to group policies (making configuration a tad less painful compared to fiddling in the registry), stuff such as Windows Sandbox/MDAG (basically, throwaway VMs you can run executables/Edge in), as well as Bitlocker encryption.
You cannot turn off required diagnostics on Windows 11 Home or Pro. You can see it yourself by firing up a Windows Pro or Home VM, editing the relevant setting in the registry or group policy, then taking a look at wireshark traffic - you should still see traffic to telemetry endpoints that Microsoft has listed in their documentation. This confirms what their documentation already says about this setting:
This is only available on Windows Server, Windows Enterprise, and Windows Education editions.
This also applies to many third party tools which claim to stop windows telemetry. Since I’m reasonably sure they work by editing the registry, they would be no more effective than simply turning off optional diagnostics in the GUI. So you end up giving yet another random app admin access for no real gain.
That being said, imo the required OS diagnostics Windows collects tends to be pretty basic in comparison to all the FUD that’s spread about it being a literal backdoor. You can see for yourself by opening the diagnostic data viewer app and seeing what info is there.
The other main problems (at least from my fiddling around in a VM with mitmproxy and wireshark as well as reading various articles) are:
Windows Spotlight sending back similar data compared to required diagnostics - but if you’re on Home/Pro where you can’t turn it off anyways, this is irrelevant.
Forced Microsoft Login with a lot of cloud syncing stuff opted in by default - bypassable, but is somewhat troublesome. You can also just select the domain join option when installing Windows Pro to get around this.
Bing start menu search (needs a group policy or regedit to disable).
Edge’s optional features and Windows Security’s Smartscreen constantly leaking stuff such as browsing history (these can be disabled easily enough, fwiw).
Edit: I just realized you were talking about 10 and not 11, still, a lot of what I wrote about diagnostic data is applicable to both of them.
I know domain looks kind fishy but you can Inspect generated script yourself before running. Also you can Customize it to only include things you want.
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !privacyguides@lemmy.one
In the digital age, protecting your personal information might seem like an impossible task. We’re here to help.
This is a community for sharing news about privacy, posting information about cool privacy tools and services, and getting advice about your privacy journey.
You can subscribe to this community from any Kbin or Lemmy instance:
Check out our website at privacyguides.org before asking your questions here. We’ve tried answering the common questions and recommendations there!
Want to get involved? The website is open-source on GitHub, and your help would be appreciated!
This community is the “official” Privacy Guides community on Lemmy, which can be verified here. Other “Privacy Guides” communities on other Lemmy servers are not moderated by this team or associated with the website.
Moderation Rules:
We prefer posting about open-source software whenever possible.
No soliciting engagement: Don’t ask for upvotes, follows, etc.
Surveys, Fundraising, and Petitions must be pre-approved by the mod team.
Be civil, no violence, hate speech. Assume people here are posting in good faith.
Don’t repost topics which have already been covered here.
News posts must be related to privacy and security, and your post title must match the article headline exactly. Do not editorialize titles, you can post your opinions in the post body or a comment.
Memes/images/video posts that could be summarized as text explanations should not be posted. Infographics and conference talks from reputable sources are acceptable.
No help vampires: This is not a tech support subreddit, don’t abuse our community’s willingness to help. Questions related to privacy, security or privacy/security related software and their configurations are acceptable.
No misinformation: Extraordinary claims must be matched with evidence.
Do not post about VPNs or cryptocurrencies which are not listed on privacyguides.org. See Rule 2 for info on adding new recommendations to the website.
General guides or software lists are not permitted. Original sources and research about specific topics are allowed as long as they are high quality and factual. We are not providing a platform for poorly-vetted, out-of-date or conflicting recommendations.
I really wish people would stop making perfection the enemy of good when Windows comes up in any capacity on here. We all know Windows sucks for privacy but for certain users and industries it’s still quite mandatory so answer the damn question and provide resources to make it as least intrusive as possible.
Just wanna take a moment to let people know about a very, very good and reputable tool for privacy and windows. Honestly, it should be on the privacy guides website imho.
Linux is better, but if you have to use Windows, there is the Chris Titus Tech tool available. You can set power-user privacy options easily, massively debloat your windows installation, install programs, and easily set your update settings to security only, if that is what you want.
It’s also freaky easy to use, and comes from one of the foremost minds in the tech world today.
https://christitus.com/windows-tool/
If I remember correctly, Pro should give you access to group policies (making configuration a tad less painful compared to fiddling in the registry), stuff such as Windows Sandbox/MDAG (basically, throwaway VMs you can run executables/Edge in), as well as Bitlocker encryption.
You cannot turn off required diagnostics on Windows 11 Home or Pro. You can see it yourself by firing up a Windows Pro or Home VM, editing the relevant setting in the registry or group policy, then taking a look at wireshark traffic - you should still see traffic to telemetry endpoints that Microsoft has listed in their documentation. This confirms what their documentation already says about this setting:
This also applies to many third party tools which claim to stop windows telemetry. Since I’m reasonably sure they work by editing the registry, they would be no more effective than simply turning off optional diagnostics in the GUI. So you end up giving yet another random app admin access for no real gain.
That being said, imo the required OS diagnostics Windows collects tends to be pretty basic in comparison to all the FUD that’s spread about it being a literal backdoor. You can see for yourself by opening the diagnostic data viewer app and seeing what info is there.
The other main problems (at least from my fiddling around in a VM with
mitmproxyand wireshark as well as reading various articles) are:Windows Spotlight sending back similar data compared to required diagnostics - but if you’re on Home/Pro where you can’t turn it off anyways, this is irrelevant.
Forced Microsoft Login with a lot of cloud syncing stuff opted in by default - bypassable, but is somewhat troublesome. You can also just select the domain join option when installing Windows Pro to get around this.
Bing start menu search (needs a group policy or regedit to disable).
Edge’s optional features and Windows Security’s Smartscreen constantly leaking stuff such as browsing history (these can be disabled easily enough, fwiw).
Edit: I just realized you were talking about 10 and not 11, still, a lot of what I wrote about diagnostic data is applicable to both of them.
Talking from experience when it comes to privacy on Windows I recommend looking into:
https://privacy.sexy
I know domain looks kind fishy but you can Inspect generated script yourself before running. Also you can Customize it to only include things you want.