Use some imagination. Cut their net connection / spoof their DNS / remotely disable smartscreen via either a backdoor or some no-install-required exploit...
But yes, for a run-of-the-mill annakournikova.exe, that way of scanning can be effective. This has nothing to do with them gathering
a) too much data
b) data without explicit consent, ie opt-in
Both of which alone make them evil, them together multiplying each other.
Announcement
Collapse
No announcement yet.
Microsoft in Win8 spies every app you install by default
Collapse
X
-
Originally posted by curaga View PostYour argument works against itself. What says that malware couldn't also disable smartscreen?
It's the same idea as virus checking on an email server.
Leave a comment:
-
Originally posted by deanjo View PostMalware has been disabling various malware scanners and removers for years. By checking against an up to date database of a remote server it allows people/sysadmins to still use their favorite AV solution and lets them update it however they want but still provide the end user with up to date realtime protection.
Leave a comment:
-
Originally posted by curaga View PostThen explain why they need any of the data such as app name. For malware checks all they need is a hash of the executable.
And even that should be done locally, against local databases.
Whoops, they do, it's called Windows Defender, with automatically updated databases. Then what excuse could they have for server side checks, assuming they had done it properly and sent only the hash?
Leave a comment:
-
Then explain why they need any of the data such as app name. For malware checks all they need is a hash of the executable.
And even that should be done locally, against local databases. Whoops, they do, it's called Windows Defender, with automatically updated databases. Then what excuse could they have for server side checks, assuming they had done it properly and sent only the hash?
Leave a comment:
-
Originally posted by curaga View PostThat is, the goal of Microsoft here is very likely to gain full info on every app you install. The fact that it also allows for server-side malware checks is just a convenient cherry on top.
Proof to back up your statements or you are completely spreading 100% FUD.
BTW, if they had a sinister plan they could go through one of the many mechanisms that they have had in place for years such as error reporting and system updates. They have no need to devise another way to get that data.Last edited by deanjo; 26 August 2012, 06:14 PM.
Leave a comment:
-
That is, the goal of Microsoft here is very likely to gain full info on every app you install. The fact that it also allows for server-side malware checks is just a convenient cherry on top.
Leave a comment:
-
Nope, it's in no way comparable to the Debian or Fedora surveys, because those are opt-in.
It is comparable to Chrome, whose snooping is opt-out too, that is, both of them spy on you by default.
But this is MS we're talking about. What is to say that all the "disable SmartScreen" toggle does it enable encryption for those transmissions?
Leave a comment:
-
Originally posted by curaga View Post
It's making a mountain out of a molehill.
Leave a comment:
-
Microsoft in Win8 spies every app you install by default
Windows 8 has a new featured called Windows SmartScreen, which is turned on by default. Windows SmartScreen’s purpose is to “screen” every single application you try to install from the Internet in order to inform you whether it’s safe to proceed with installing it or not. Here’s how SmartScreen works:
You download any application from the Internet. Say, the Tor Browser Bundle.
You open the installer. Windows SmartScreen gathers some identifying information about your application, and sends the data to Microsoft.
If Microsoft replies saying that the application is not signed with a proper certificate, the user gets an error that looks something like this.
There are a few serious problems here. The big problem is that Windows 8 is configured to immediately tell Microsoft about every app you download and install.Tags: None
Leave a comment: