Windows 10 telemetry vs. firewall

Discussion in 'privacy general' started by DavidXanatos, Jul 3, 2016.

  1. DavidXanatos

    DavidXanatos Developer

    Joined:
    Sep 6, 2006
    Posts:
    2,327
    Location:
    Viena
    How well does a aplication firewall block windows 10 telemetry?
    Since windows has an own firewall many users not longer use a 3rd party software.
    But windows firewall usually blocks only incomming traffic not outgoing one.
    The 3rd party products howeever ask for booth directions.
    So probably thay would also block the telemetry services? That is as long as the user does not pres ok whe he should not.

    o_O
     
  2. boredog

    boredog Registered Member

    Joined:
    Feb 1, 2015
    Posts:
    2,499
  3. TairikuOkami

    TairikuOkami Registered Member

    Joined:
    Oct 10, 2005
    Posts:
    3,434
    Location:
    Slovakia
    You should not rely on Windows Firewall nor HOSTS, it has been reported than windows processes were able to bypass it.
     
  4. DavidXanatos

    DavidXanatos Developer

    Joined:
    Sep 6, 2006
    Posts:
    2,327
    Location:
    Viena
    That is why I'm considering using a 3rd party product.

    I tryed out comodo firewall in a VM but apparently if a process asks for access, the default window alows me only to grant the program full access, that is not cool for example for svchost.exe I would like an option to allow only for port and/or ip so that i can controll in detail what communication a application is allowed to perform.

    So what other free firewall would have such an ability out of the popup prompt directly? (i know in comedo i could set this up by hand in the advanced settings, but it has to be convinient)
     
  5. itman

    itman Registered Member

    Joined:
    Jun 22, 2010
    Posts:
    8,593
    Location:
    U.S.A.
  6. mirimir

    mirimir Registered Member

    Joined:
    Oct 1, 2011
    Posts:
    9,252
    You can't really block Windows from inside Windows.
     
  7. MisterB

    MisterB Registered Member

    Joined:
    May 31, 2013
    Posts:
    1,267
    Location:
    Southern Rocky Mountains USA
    Try disabling the service. It is named "Connected User Experiences and Telemetry" in the 1511 release of Windows 10 and "Diagnostics Tracking Service " in earlier versions. All you have to do is set it to "disabled" in the services control applet. Unlike Windows Update or BITS, it will stay disabled on reboot. At least so far, I wouldn't put it past Microsoft to change this.
     
  8. DavidXanatos

    DavidXanatos Developer

    Joined:
    Sep 6, 2006
    Posts:
    2,327
    Location:
    Viena
    Well, that may be so to some extent,
    but I really cant carry a wireless router any ware with me where I go, also @work I need to be plugged into the gbit Ethernet sometimes, so really I would need to glue an actual router to my laptop.
    That is not the most practicable solution.

    While I don't have much trust in the windows firewall itself, I think that a 3rd party product that hooks the network stack can be considered reasonably secure. I mean M$ to bypass it would have to integrate the tracking features deep into the kernel.
    And for what we see currently most is not all of it is implemented into applications.

    I tried a few firewalls currently, the best one appears to be private firewall, but suposedly its not longer activly developed :(
    Zonealarm does nto seam to have any advanced settings (custom roules) or i missed it.
    Comodo is quite ok, but when i allow an app it allows all traffic, tehr is no option from the poput to allow only some of the traffic, so its really inconvenient.
    I tryed the TinyWall it does not have any popups at all but its minimalistic approche is quite nice.

    Anyhow what firewall application could you recomend me what would allow a fine grain controll over the granted network access rights from within the pupup window?
     
    Last edited: Jul 4, 2016
  9. mirimir

    mirimir Registered Member

    Joined:
    Oct 1, 2011
    Posts:
    9,252
    I'm not current on Windows stuff.
     
  10. kronckew

    kronckew Registered Member

    Joined:
    Aug 27, 2006
    Posts:
    455
    Location:
    CSA Consulate, Glos., UK
    agnitum's outpost firewall allows fine grained settings for apps down to protocol, port, direction, source ip and dest. ip and even greater range of settings for system and lan rules. an inbuilt IP block list can be used to completely block all comms to certain ip's or ranges of ip's.

    sadly, they are no longer trading, so updates and some functionality may not be available after the end of this year, and annual license keys are required past the initial trial period, tho some of us have lifetime licences that will allow us to use it after they turn off the lights.
     
  11. hjlbx

    hjlbx Guest

    It makes no sense to block telemetry without disabling the underlying services and making the required registry hacks; it has been shown online that using a firewall to block W10 telemetry has been bypassed by the OS.
     
  12. DavidXanatos

    DavidXanatos Developer

    Joined:
    Sep 6, 2006
    Posts:
    2,327
    Location:
    Viena
    it has been? where?
    Also I'm not looking for a either or solution i want to do both, all the hacks + firewall
     
  13. hjlbx

    hjlbx Guest

    Use
    • Win10Privacy.
    • WindowsPrivacyTweaker.
    • O&O ShutUp10.
    • Easy Service Optimizer.
    I used all three to tweak my W10 Home. Some have settings adjustments that the others don't. These utilities will do the hacks for you instead of having to do them all manually. If you attempt the hacks manually - it is a huge undertaking.

    If you want to uninstall Windows Apps completely, then you can either use W10Privacy followed by one of the online tutorials to remove all the remnants - followed by CCleaner registry cleanup.

    Sorry, I mis-spoke on the firewall bypass. It was a hosts file bypass.
     
  14. Grumlo

    Grumlo Registered Member

    Joined:
    Nov 14, 2015
    Posts:
    176
    Hjlbx, is no to much this programs?
    Are You able to write what can I check to no crash my pc in this programs?
     
  15. hjlbx

    hjlbx Guest

    None of them will crash your system.

    Win10Privacy, ShutUp10 and WindowsPrivacyTweaker are all very close - with only a few settings differences.

    Most of what they do is privacy related. I don't care so much about privacy - but instead just removing from my system what I do not need.

    They do so much that I could not write everything...
     
  16. Grumlo

    Grumlo Registered Member

    Joined:
    Nov 14, 2015
    Posts:
    176
    I thought that do so much.
    I don't want to do like blind and the same thing by other programs :)
    I will try use all.
     
  17. hjlbx

    hjlbx Guest

    Study them first...

    I understand, mess around and will expect something to break.

    I can assure you that if something does break you can undo it - if you remember what you did. Best thing is to write down what you did until you always remember.
     
  18. bjm_

    bjm_ Registered Member

    Joined:
    May 22, 2009
    Posts:
    4,457
    Location:
    .
    don't know about W10, on W8.1 ---> blacklist < C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_nananananana_none_nanananana\TiWorker.exe > seems to cripple WU applet.
     
  19. Grumlo

    Grumlo Registered Member

    Joined:
    Nov 14, 2015
    Posts:
    176

    ok I will try :)
     
  20. Logethica

    Logethica Registered Member

    Joined:
    Jun 23, 2016
    Posts:
    53
    Location:
    UK
    I used a combination of CCleaner and the SUPERDelete tool of SuperAntiSpyware to first remove unneeded MS components...
    Then O&O Shut Up 10 to block much of the remaining telemetry...
    Then in ZoneAlarm Free Firewall:
    a) Blocked specific MS IPs in the "View Zones" section.
    b) Killed various MS services through "Application Control" such as:
    Data Sharing service Maintenance Driver
    Disk Defragmenter Module (As I use Auslogics Defrag as Default)
    Microsoft Feedback SIUF Deployment Manager Client
    Microsoft Sync Center
    Search and Cortana Application
    Windows Remote Assistance COM Server
    ............I have experienced No Negative effects from doing the above (over 2 Months ago)

    I also temporarily deny OS Updates for 72 Hours while I check forums for "Borks".This involves the temporary blocking of:
    Windows System Assessment Tool
    Windows Installer
    Windows Update
    Windows Modules Installer
    Windows Modules Installer Worker
    ......Again,No problems since doing so 2 months ago.
     
  21. Spartan

    Spartan Registered Member

    Joined:
    Jun 21, 2016
    Posts:
    1,424
    Location:
    Dubai
    Last edited: Jul 11, 2016
  22. Spartan

    Spartan Registered Member

    Joined:
    Jun 21, 2016
    Posts:
    1,424
    Location:
    Dubai
    After adding these rules to my Firewall, I literally feel every page I browse to loads instantly, as if I upgraded my internet!
     
  23. Spartan

    Spartan Registered Member

    Joined:
    Jun 21, 2016
    Posts:
    1,424
    Location:
    Dubai
    A reboot is recommended after adding these rules to your Firewall.
     
  24. alexandrud

    alexandrud Developer

    Joined:
    Apr 14, 2011
    Posts:
    2,441
    Location:
    Romania
    Since all these rules are created for all programs, all of them can be condensed to just one rule with multiple IP addresses and IP ranges. There is no need to have tens of rules for this purpose.
    A reboot is not required after adding new firewall rules. The rules are applied instantly after they are added.
     
  25. hjlbx

    hjlbx Guest

    People don't know how to do that...
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.