Friday, August 14, 2015

A Further Note on Privacy and Windows 10

There have been a number of comments and emails sent to me, regarding my post: Why I Don't Care About the Privacy Issues With Windows 10. I want to take this time to reply to some of them.

One commenter writes:
To be clear, you do understand that Windows 10, by default, shares your private files (i.e., all your files)? This is what makes it very different from previous Windows versions, and my expectation is that it will take 6 months to a year, and possibly longer, for the experts to track down all of the switches that need to be thrown to prevent Windows from uploading private data to their servers.

My response:
I don't trust any version of Windows or any other operating system. Just because some expert says a version is clear, if I pull x, y and z switch, should I believe him? I operate under the princple that sensitive material should never be put on a computer linked to the internet, As I responded to this commenter: 
Yes, of course. I should have made clear that for private data, I simply don't use a computer that is connected to the internet. With pretty decent laptops now available for $200, just keep a computer off line.
Another commenter:
Robert, with respect, you are not fully comprehending the implications of this. Windows 10 logs your keystrokes and sends them to Microsoft among other things. That means under certain situations, which are not clearly spelled out in their privacy agreement, it could log username and password keystrokes. Are you fine with Microsoft potentially logging your username and password for every website you goto? Maybe you don't care about some sites but I bet there are sites you do care about. What about any finance related websites?
Not to be rude but your attitude here Robert is naive in my opinion. I have Windows 10 installed on my home tablet and I have disabled all the privacy infringing elements as everyone should who uses it. Fortunately for me it is a toy. My real computer is a Macintosh. Apple respects your privacy.
My response:
I mentioned some time ago that I use a separate laptop for my financial accounts. But even here I limit my computer activity to certain accounts, and not any that have significant funds in them.
I think all you guys are missing my point. I don't trust ANY computer for secure transactions. That's why I don't care what Microsoft has installed on Windows 10, I ALWAYS operate with the idea that my computers are not secure.
Another comment:
 Not caring about "privacy" is a choice. I understand if you sign a TOS or contract with an entity you may agree to certain disclosures. Buyer beware. Not caring about unconstituional/unlawful gov't surveillance implies consent. Very dangerous in an era of uncertain/Orwellian definition of terms and public trial balloons about precrime, thoughtcrime, and internment camps. I don't consent to unconstitutional/unlawful surveillance by the gov't.

My response:
I am not sure what this means. Ideally, I don't want any surveillance of my computer activities, but that is likely an impossibility. So I simply operate under the premise that the NSA has a secret invisible cable attached to all my computers and my cell phone and a have team of 20 monitoring every keystroke. 
I am not consenting to unlawful surveillance, I am just recognizing it may be occurring and act accordingly. To think you can escape surveillance by somehow working around Windows 10 is extremely dangerous.

Another comment:
 You trumpet the benefit while ignoring the cost of such a single-mindedly conservative approach.

Freedom-loving people are a tiny minority, geographically dispersed, and rarely in the same physical room. Constraining all government-eyebrow-raising comments to face-to-face interactions effectively squelches most all politically incorrect thoughts and observations. Yet these are the ones that tend to offer the most potential value. A person so eschewing such topics effectively stunts the quality of his own intellectual development because his conversations and associated consideration of ideas are killed by his own hand before they can occur. He does the government’s censorship work for it.

Of course, whether a person considers such sacrifices justifiable in the name of his personal safety, only he can decide. But if safety commends such a high premium for that person, self-censoring not only his speech but also his thoughts by embracing statist thinking would be the safest choice.

Of course, the opposite approach of throwing caution to the wind, focusing on benefits while ignoring costs, is just as folly. The sensible answer is there are a range of risk/reward profiles to be compared across multiple potential communication methods and messages. Tradeoffs abound. Both risks and rewards alike should be weighed carefully and compared. One should be ever evaluating new options and carving an optimal path through them.

These other commenters have thankfully raised awareness Windows 10 presents a much higher incremental risk at much lower incremental reward compared to using older Windows or alternative OS's. That's a vitally important revelation for those endeavoring to strike an optimal balance in their use of technology and the Internet for their communications.

My response:

Who the hell says I am restraining my anti-government commentary? I run two web sites that are hardly restrained in their criticisms of government. Let me put it this way: The government sucks. I see no use for government "services' AT ALLl. And I just typed this on a Windows 10!

But, things may change in the future and I am not going to be stupid about it at that time. If the government becomes more aggressive in their free speech crackdowns.I will adjust. I am not going to go to the slammer to protect my right to free speech. That's idiotic. What kind of speeches am I going to be giving from the slammer?  That said, there are always workarounds. Read James P. Cannon's book, The History of American Trotskyism, 1928-38: Report of a Participant for insight into how the Trotskyite cells communicated and recruited, when there was a crackdown on their free speech.

From an emailer:

Hi Bob,
I'm pretty much with you on your views regarding Windows. I'm a Linux user myself, but then I'm a full time developer and tweak my desktop.

Still, I found this article, which shows that many concerns can be addressed by those willing to do the research and work:

http://arstechnica.com/information-technology/2015/08/windows-10-doesnt-offer-much-privacy-by-default-heres-how-to-fix-it/

Shimshon

My response:
Yes, I am sure there are workarounds. But A. I really don't have the time to become familiar with what they are and B, What if I learn about 9 privacy issues and there are really 10 I should be concerned about. 
What I see is a lot of very smart guys using the computers in various ways in conjunction with the internet and getting nailed by the government. I am not going to pretend I am even close in their knowledge, so I am simply going to operate with the premise that I am not capable of beating government internet snoops and will adjust in other ways when I want privacy. 
Thanks all for the input. It sounds as tough you are all justifiably concerned about government surveillance. I simply hold the view that it is extremely dangerous to think that the surveillance can be beaten. Thus, I operate with the premise that my privacy is being invaded and I adjust accordingly.That is why I don't care about Windows 10 keystroke logging or any other potential mass surveillance programs they have installed.


  -RW 

5 comments:

  1. Frankly, "we" knew back in around 1994-1995 that "Windows" had several NSA back doors. What surprised the wonks with Microsoft at the time was that all 3 keys were found. "They" thought only two could be exposed .....

    It's so difficult to obfuscate our meanderings.

    ReplyDelete
    Replies
    1. Every time I have seen such claims, I request to know the source of the claims. Usually, no source is provided, but if one is provided, it demonstrably false. Most commonly is related to _NSAKEY, which was relatively easily discovered, readily changeable by users, and probably more related to export issues of the day, which have since been modified or simply not enforced.

      Believe it or not, there are a substantial number of private organizations as well as nation-states that do not desire to have Microsoft, nor any other entity, gain access to their information. Note that there are numerous ways to evaluate software, even when it is closed source.

      If Microsoft were trying to be so sneaky, then they wouldn't declare that they can access all of your information in their contracts with customers, which they are now doing with Windows 10.

      Delete
  2. I think the problem here is your choice of the words, "Why I Don't Care About the Privacy Issues With Windows 10." Particularly the "Why I Don't Care" followed by "About Privacy" portion.

    Thankfully, you corrected yourself with this whole article, and in particular the second to last response, in which you do indicate you are indeed, as we all were shocked to think you weren't, concerned about privacy on the web.

    I now understand the point of the article was about particulars but you, being a liberty lover, still have concerns about speech on the internet. You obviously care about privacy issues with Windows 10 and beyond, and that is why you have taken such steps to protect your information by not putting it on Windows 10 or any other computer. Which in this day and time must take not a little forethought and planning.

    I think it is good advice and smart. Some I should learn to take. After all, the biggest criminals in the world are doing the same (Trump, Napalatano, et. al.) Criminals like Hillary tried to beat the system as well as Patraeus and they didn't make it.

    As a younger person, it is hard to imagine all my personal conversations taking place without electronics. For instance, talking to my wife about personal matters on my cell phone or text message or yes, E-Mail. It would be kind of hard to keep all that relegated just to face-to-face. Surely you don't hold all your personal conversations face to face? If you don't, maybe you are missing something here. Patraeus got busted for personal messages, not financial ones. The government leaking of those ruined his career. I don't see how the government couldn't selectively do that to anyone's personal correspondence, even those who are not engaged in illicit affairs. So if you talk to your people you are relationships with about any problems you two may be having at any point via electronics, you could be subjected to similar treatment at a future date, even though it doesn't matter right now.

    The Question: Are you ignoring this threat in your private life with your phone calls and texts or do you always say, "let's meet up next week and discuss this honey" when you are out of town away from significant others and family members. Future government blackmail from text and voice calls exists as much as E-Mail.

    disclaimer- i have no evidence trump is a criminal perhaps i jumped the gun lumping him in with a known criminal, but perhaps it's only a matter of time?

    ReplyDelete
  3. Hey Bob, can you please write a quick post on what exactly you use your 'financial' laptop for? Mainly, what do you mean when you say you keep your private files offline, yet operate a few financial accounts on it?

    ReplyDelete
  4. "Who the hell says I am restraining my anti-government commentary?"

    You do. When you say, "I don't do anything over the internet that might cause the government to raise an eyebrow." That's a pretty low bar. As the Reason magazine crowd discovered.

    I'm guessing, just guessing, from time to time across your brain flow ideas that shall we say are less compliant with the state than it might like. AKA would cause it to raise an eyebrow. Your statement that you necessarily self-censor your electronic communications along such lines lets us know you don't type any of that in here for us to consider. That is our loss. I'll bet some of it is pretty good.

    ReplyDelete