Avoiding telemetry Windows 7/ 8.1

Discussion in 'Operating Systems' started by carrierPigeon, Jun 21, 2018.

  1. carrierPigeon

    carrierPigeon Limp Gawd

    Messages:
    141
    Joined:
    Sep 22, 2017
    There is a lot of mention of abilities/efforts to avoid telemetry in windows 7 and 8.1.

    To go through the history, it seems that at first Microsoft rolled out telemetry to these operating systems as an optional update, then they rolled it out as a required update/ disguised as something else. Some users address the issue by monitoring their list of updates vs the list of "problematic" updates (not getting the update or removing the update).

    I also understand that there is Spybot anti-beacon, which seems to be a less popular approach on this forum.

    I think I also came across a github project that is related but I can't seem to put my finger on it right now.

    I'd imagine there are also versions of these operating systems that have limited telemetry-- industry/ government computers that demand more privacy (perhaps enterprise versions, maybe server versions). I suppose those are the best options (compared to other mentions in this post), but not easily available.

    Of course, some of what I have read (in gathering the above information) could be outdated as a lot of it was 1-4 year old.

    Are these options all still available? How shaky or firm is the avoiding/removing various updates path?
     
  2. Tiberian

    Tiberian DILLIGAFuck

    Messages:
    5,742
    Joined:
    Feb 12, 2012
    You can find an updated list (through the June 2018 "Patch Tuesday" last week) here:

    https://pastebin.com/jWX2zHdr

    And I have to ask: where the hell did that Github diatribe above come from, and what the hell does it have to do with some Windows Updates? I mean, really? :bored::whistle::rolleyes:
     
    Last edited: Jun 21, 2018
    Delicieuxz likes this.
  3. AltTabbins

    AltTabbins [H]ard as it Gets

    Messages:
    18,539
    Joined:
    Jul 29, 2005
    OP - Spybots anti beacon seems to work pretty well. I don’t know if it removes updates, but it blocks the communication to Microsoft’s servers at least. It’s regularly updated to keep up with Microsoft’s changes and is from a very trusted company.
     
    PliotronX, FrgMstr and heatlesssun like this.
  4. Crosshairs

    Crosshairs Administrator Staff Member

    Messages:
    23,393
    Joined:
    Feb 3, 2004
    Heatlesssun and Boonie.......What the hell is wrong with you people.....answer the question, or move along.
    enough with the BS dick waving
     
    Algrim and heatlesssun like this.
  5. ChoGGi

    ChoGGi [H]ard|Gawd

    Messages:
    1,417
    Joined:
    May 7, 2005
    Here's the batch file I use
    Code:
    @echo off
    
    echo "Compatibility" update for upgrading Windows 7
    wusa /uninstall /kb:2952664 /quiet /norestart
    echo "Compatibility" update for Windows 7 RTM
    wusa /uninstall /kb:2977759 /quiet /norestart
    echo Update that enables you to upgrade from Windows 7 to a later version of Windows
    wusa /uninstall /kb:2990214 /quiet /norestart
    echo Update that adds telemetry points to consent.exe in Windows 8.1 and Windows 7
    wusa /uninstall /kb:3015249 /quiet /norestart
    echo Update to Windows 7 SP1 for performance improvements
    wusa /uninstall /kb:3021917 /quiet /norestart
    echo Update for customer experience and diagnostic telemetry
    wusa /uninstall /kb:3022345 /quiet /norestart
    echo Update installs Get Windows 10 app in Windows 8.1 and Windows 7 SP1
    wusa /uninstall /kb:3035583 /quiet /norestart
    echo Update that enables you to upgrade from Windows 8.1 to a later version of Windows
    wusa /uninstall /kb:3044374 /quiet /norestart
    echo Update for customer experience and diagnostic telemetry
    wusa /uninstall /kb:3068708 /quiet /norestart
    echo Update that adds telemetry points to consent.exe in Windows 8.1 and Windows 7
    wusa /uninstall /kb:3075249 /quiet /norestart
    echo Update for customer experience and diagnostic telemetry
    wusa /uninstall /kb:3080149 /quiet /norestart
    echo Updated capabilities to upgrade Windows 8.1 and Windows 7
    wusa /uninstall /kb:3123862 /quiet /norestart
    echo Updated Internet Explorer 11 capabilities to upgrade Windows 8.1 and Windows 7
    wusa /uninstall /kb:3146449 /quiet /norestart
    
    pause
     
  6. mouacyk

    mouacyk n00b

    Messages:
    58
    Joined:
    Dec 5, 2015
    Why uninstall performance improvement? :)

    Do you have undocumented info about these updates?
     
  7. ChoGGi

    ChoGGi [H]ard|Gawd

    Messages:
    1,417
    Joined:
    May 7, 2005
    No I have documented info: http://support.microsoft.com/kb/3021917
    In other words, jack all to do with performance, just data collection.

    Edit: :)
     
    Last edited: Jun 21, 2018
  8. carrierPigeon

    carrierPigeon Limp Gawd

    Messages:
    141
    Joined:
    Sep 22, 2017
    What we really need is something that sends fake data to Microsoft :)
     
    PliotronX, Executioner and B00nie like this.
  9. Executioner

    Executioner Limp Gawd

    Messages:
    297
    Joined:
    Apr 22, 2015
    Thanks for sharing this. I ran it and found only 1 that was installed which was then removed after a reboot. After the restart, I went to updates and hid that KB from showing up again.
     
  10. carrierPigeon

    carrierPigeon Limp Gawd

    Messages:
    141
    Joined:
    Sep 22, 2017
    Window 8.1 Embedded Industry Pro doesn't have any of those updates in the "important updates" list.
    Is it more likely that they just name them something else or do they actually just not have them?
     
  11. dreamwriter

    dreamwriter Limp Gawd

    Messages:
    234
    Joined:
    Jun 22, 2018
    Alerts 1

    I've read about the upcoming Anti Beacon 3.0, and found downloads for 2.6, but I can't find a 32 bit installer for Windows 7. Can anyone help?
     
  12. Delicieuxz

    Delicieuxz Gawd

    Messages:
    899
    Joined:
    May 11, 2016
    I have a list of methods people can use to disable and block telemetry in this blog post: https://linustechtips.com/main/blogs/entry/1102-disabling-windows-7-8-10-telemetry-data-collection/


    I didn't have this updated telemetry-update list, though. I'll add it:



    Another method you can use is to install Windows 7 from a June 2015-updated ISO, and then disable Windows Update permanently. Microsoft started back-adding telemetry to Windows 7 after that point.

    If a person is concerned about security, they can get up-to-date protection from running an anti-virus program, MalwareBytes, Spybot, etc.

    I have a June 2015-updated ISO of Windows 7 Ultimate 64 for download, here:

    https://linustechtips.com/main/blog...dates-blockers-oct-16-oct17-security-updates/

    You'll need your own license key for Windows 7 Ultimate 64 in order to install it. One can be bought easily on eBay, reddit, and elsewhere for a few dollars.
     
    carrierPigeon likes this.
  13. carrierPigeon

    carrierPigeon Limp Gawd

    Messages:
    141
    Joined:
    Sep 22, 2017
    How do you determine whether to install the new updates that windows has released June - Oct.
    I see that Microsoft publishes information about each update. However, nothing sounds "bad."
    Here is the windows 8.1 list that I looked through:
    https://support.microsoft.com/en-us/help/4009470
    Also, here is the Windows 7 SP1 list
    https://support.microsoft.com/en-us/help/4009469
     
  14. Tiberian

    Tiberian DILLIGAFuck

    Messages:
    5,742
    Joined:
    Feb 12, 2012
    I use the simplix Update Pack each month that it's released, making a new install.wim file each time as needed for my standard installation ISO.

    https://blog.simplix.info/update7/

    Site is in Russian so you'll need a translation of it if you not able to read the language; if you visit using Chrome it will offer to auto-translate it well enough. Been using that update pack for years now, never had issues, always works just fine for me. Has the stuff people actually want and can make use of, avoids anything that's questionable or related to telemetry.
     
  15. carrierPigeon

    carrierPigeon Limp Gawd

    Messages:
    141
    Joined:
    Sep 22, 2017
    Thank you. I copied and pasted a couple of paragraphs/ titles one by one into the Google translate page but it's a bit tough to decipher.
    I think the site is telling you which updates get the thumbs up and which get the thumbs down?
     
  16. Tiberian

    Tiberian DILLIGAFuck

    Messages:
    5,742
    Joined:
    Feb 12, 2012
    It provides a lot of info, yes, but realistically all you need to focus on is creating the updated install.wim file and that literally can be done with just a single line of code (as explained on the page). Yes the translation is a bit iffy but the info is there. If you use the update pack to create a fully updated (by fully I mean making it current with the latest update pack, obviously as stated the telemetry and other BS never makes it into these packs) and you start with an original untouched Windows 7 SP1 install.wim file the process could take an hour or longer because it's adding in 280+ updates so it takes time. Both x86 and x64 updates are included in the one big update pack so you can use it to handle both architectures if needed.

    Because I keep my install.wim updated with each new update pack, the actual creation time is a few minutes now since it only has to integrate a handful or less with each new monthly update. Doing it with that pure SP1 install.wim takes much much longer as stated. Once you get it updated, doing this monthly with new releases of the update pack is much faster.
     
    carrierPigeon likes this.
  17. carrierPigeon

    carrierPigeon Limp Gawd

    Messages:
    141
    Joined:
    Sep 22, 2017
    FNtastic and Rattle like this.
  18. PliotronX

    PliotronX [H]ard|Gawd

    Messages:
    2,037
    Joined:
    Aug 8, 2000
    Its humorous that telemetry even made it into 7.. Almost like they try to understand why people still use it and totally ignore the data. Just sucking up resources to phone home..
     
  19. SvenBent

    SvenBent 2[H]4U

    Messages:
    2,755
    Joined:
    Sep 13, 2008
    you have to make sure to also avoid intel and nvidai telemetry.

    check your task scheduler
     
  20. Mazzspeed

    Mazzspeed [H]ard|Gawd

    Messages:
    1,424
    Joined:
    Dec 27, 2017
    Just set up a PiHole.
     
    FNtastic likes this.
  21. FNtastic

    FNtastic [H]ard|Gawd

    Messages:
    1,302
    Joined:
    Jul 6, 2013
    This. Or, the option to run it on pfsense exists. The package is called pfblockerng.

    With pihole or pfsense, you also gain the benefit of protecting all devices on your network from additional sources. For example, sites known as malicious, obtrusive ads (or ads altogether), gambling sites, social media sites, etc. All of this handled at the DNS level, including blocking telemetry. The lists are updated automatically, so once you set it up and configure it, you just keep it running and it'll do all the blocking you need.
     
    Mazzspeed likes this.
  22. Mazzspeed

    Mazzspeed [H]ard|Gawd

    Messages:
    1,424
    Joined:
    Dec 27, 2017
    What's more, it'll block telemetry on every Windows machine on the network - Simple.

    I couldn't believe the number of phone home attempts under a fresh install of Windows 10 using Wireshark. Very concerning, especially considering I couldn't see what the encrypted packets contained.
     
    FNtastic likes this.
  23. carrierPigeon

    carrierPigeon Limp Gawd

    Messages:
    141
    Joined:
    Sep 22, 2017
    I have read that a lot of the big tech companies have many domains, perhaps over 100. So, you might need to update your strategy down the road.
    For a home user, I wonder about disconnecting from the internet before boot, but that's a big hassle, of course.
     
  24. FNtastic

    FNtastic [H]ard|Gawd

    Messages:
    1,302
    Joined:
    Jul 6, 2013
    You're right about the amount of domains. These are typically touted as the best lists. Check out some of the domains in them.
    https://firebog.net