We are still actively working on the spam issue.

Difference between revisions of "Windows 10"

From InstallGentoo Wiki
Jump to: navigation, search
(→‎Preinstall preparation)
 
(3 intermediate revisions by 3 users not shown)
Line 5: Line 5:
 
'''Windows 10''' is the latest iteration of Microsoft's desktop operating systems. The primary "appeal" of Windows 10 over the generally preferred Windows 7 is DirectX 12, which improved the graphics rendering in certain supported games. There are few games that specifically support ONLY DirectX 12. Windows 10 comes with Cortana, a personal assistant similar to Apple's Siri, and Edge, the new browser created in Microsoft's efforts to distance itself from Internet Explorer.  
 
'''Windows 10''' is the latest iteration of Microsoft's desktop operating systems. The primary "appeal" of Windows 10 over the generally preferred Windows 7 is DirectX 12, which improved the graphics rendering in certain supported games. There are few games that specifically support ONLY DirectX 12. Windows 10 comes with Cortana, a personal assistant similar to Apple's Siri, and Edge, the new browser created in Microsoft's efforts to distance itself from Internet Explorer.  
  
−
There are [https://archive.fo/zK93U major] [https://archive.fo/n4UfW concerns] about how much Windows 10 will phone home, even with all the "privacy tweaks" enabled during install.
+
There are [https://archive.fo/zK93U major] [https://archive.fo/n4UfW concerns] about how much Windows 10 will phone home, even with all the "privacy tweaks" enabled during install. Even [http://www.theregister.co.uk/2015/08/24/win_russia_privacy_controversy Russian Lawyers were trying to get it banned] from Russia.
  
 
== Installation ==
 
== Installation ==
Line 70: Line 70:
 
Follow Microsoft's instructions to activate it.
 
Follow Microsoft's instructions to activate it.
  
−
Beginning [https://archive.fo/XC24f in October 2015] and through August 2016, if you had a legitimate product key for Windows 7/8/8.1 activated on the system before you can use the same key to activate Windows 10. Your product key can be found with your Windows 7/8/8.1 installation media or on the Microsoft sticker on your PC. This sticker is usually found on the bottom of laptops and the side of prebuilt desktops.
+
Beginning [https://archive.fo/XC24f in October 2015] and through August 2016, if you had a legitimate product key for Windows 7/8/8.1 activated on the system before you can use the same key to [https://prowebsoftware.net/product/microsoft-windows-10-home/ activate Windows 10]. Your product key can be found with your Windows 7/8/8.1 installation media or on the Microsoft sticker on your PC. This sticker is usually found on the bottom of laptops and the side of prebuilt desktops.
  
 
If you're a pirate, you need KMSPico. KMS is a key management system meant for offices and administrators of multiple Windows computers. KMSPico emulates that system and can activate Windows installs without them being legal.
 
If you're a pirate, you need KMSPico. KMS is a key management system meant for offices and administrators of multiple Windows computers. KMSPico emulates that system and can activate Windows installs without them being legal.
Line 702: Line 702:
 
</nowiki>}}
 
</nowiki>}}
  
−
=== External links ===
+
== Windows 10 AME ==
−
*It was [https://web.archive.org/web/20160320165022/https://www.youtube.com/watch?v=nHA2s04Vtdc revealed] that Microsoft sends encrypted images of the user's desktop back to Redmond. [ftp://joelixny.ddns.net/Win10spying.webm This] video decrypts the encrypted images sent of the user's desktop. Happy browsing!
+
 
 +
{{warning|This section needs more information. Essentially, an installation guide and more about the limitations experienced by other anons can help.}}
 +
 
 +
As already stated, blocking trackers can only remove some low hanging fruit and is not a proper approach to improving privacy. This is the reason the Tor Browser [https://2019.www.torproject.org/projects/torbrowser/design/#philosophy does not include any tracker blockers]. The only way to completely git rid of privacy-invading networking is to remove services and applications that cause those connections in the first place, as well as ensure that those programs and service do not get installed again (by other services such as Windows Update). Tools like [https://www.oo-software.com/en/shutup10 ShutUp10] and [https://wpd.app/ WPD] are NOT sufficient for privacy, since they either rely on disabling group policies or just temporarily disable spyware, which then get reactivated with the next security update.
 +
 
 +
[https://ameliorated.info Windows 10 Ameliorated] is a project that provides [https://wiki.ameliorated.info/doku.php?id=documentation_2004 a detailed long guide, some scripts and tools] to get a modified Windows 10 installation which DOES NOT remove the spyware by disabling group policy, registry entries, hostfiles and other workarounds, but rather kills privacy-invasive services from the system on an executable level. This includes Windows Update, and any related services intended to re-patch the system via what is essentially a universal backdoor. Core applications, such as the included Edge web-browser, Windows Media Player, Cortana, as well as any appx applications, will also be purged. You system will spare about 2 GB of pre-installed garbage.
 +
 
 +
Note, that it is advised to do the manual installation, rather that using the ISO image. You shouldn't trust the source too much, but understand what you are doing and you can verify if you did everything right with tools like [https://www.wireshark.org Wireshark]. Also, it takes a lot of fucking time (about 2-3h, depends on your system and knowledge), so be prepared and patient.
 +
 
 +
=== Limitations ===
 +
 
 +
It may also not really be what you would want, since the absence of Windows Update requires you to download all necessary security updates and drivers yourself. But since Windows Update is also one of [https://www.computerworld.com/article/3587776/it-can-now-force-window-10-feature-upgrades-past-microsoft-blockers.html the most privacy invasive and user-raping applications] out there, this could be considered good riddance (MS is not able to rape you in the ass with forced updates). You can also use a free and open-source software like [https://sdi-tool.org Snappy Driver Installer] to get your drivers.
 +
 
 +
The absence of Microsoft Store is objectively good riddance, except if you're retarded enough to depend on applications which are only provided from this cancerous source. Fuck you.
 +
 
 +
Now, the biggest possible limitation of Windows 10 AME is that there is no way to install any version of Microsoft Office newer than Microsoft Office 2007. That's pretty shit, since a lot of people use Windows just to use Office, but since the inclusion of the telemetry agent software in MS Office 2013 [https://madscientistassociation.github.io/posts/2018/10/19/OfficeTelemetry sends a fuckton of metadata] to Microsoft about every single document you have written (possibly even every single keystroke), Office 2007 does not look so bad at all (and it just works™). Or just use [https://www.libreoffice.org/download/download the superior alternative].
 +
 
 +
== External links ==
 +
*It was [https://web.archive.org/web/20160320165022/https://www.youtube.com/watch?v=nHA2s04Vtdc revealed] that Microsoft sends encrypted images of the user's desktop back to Redmond. <s>[ftp://joelixny.ddns.net/Win10spying.webm This] video decrypts the encrypted images sent of the user's desktop. Happy browsing!</s> <u>Dead, and new source being found</u>
  
 
*[https://archive.fo/ko469 Traffic analysis] reveals extent of Windows 10 spying.
 
*[https://archive.fo/ko469 Traffic analysis] reveals extent of Windows 10 spying.

Latest revision as of 10:43, 1 January 2023

Windows 10 is not your friend
Warning: There is a high likelihood that Windows 10 is compromised. It is highly malicious, and has been proven time and time again to not only datamine and steal user information, but it has been designed to do this. Continue at your own risk.

Windows 10 is the latest iteration of Microsoft's desktop operating systems. The primary "appeal" of Windows 10 over the generally preferred Windows 7 is DirectX 12, which improved the graphics rendering in certain supported games. There are few games that specifically support ONLY DirectX 12. Windows 10 comes with Cortana, a personal assistant similar to Apple's Siri, and Edge, the new browser created in Microsoft's efforts to distance itself from Internet Explorer.

There are major concerns about how much Windows 10 will phone home, even with all the "privacy tweaks" enabled during install. Even Russian Lawyers were trying to get it banned from Russia.

Installation

This section will cover performing a clean install of Windows 10. This is preferred over upgrading if you want a fresh system that does not drag along temp files, app data and other junk from your 7/8/8.1 install.

It will not cover upgrading from an existing Windows 7/8/8.1 install. If you have an existing Windows 7/8/8.1 install, you can still use this section, but beware you'll lose all your installed apps and data with a clean install. From October 2015 to August 2016, Windows 10 can be activated using 7/8/8.1 product keys. This works by checking the system hardware profile with Microsoft's servers to ensure it matches the hardware the product key was originally activated on. The edition of Windows 10 must match the edition the product key was for (i.e. Home Premium or Professional).

If you want to do a test run of installing Windows 10, without committing your hard drive to it, setup a VirtualBox and skip ahead to the Installation section.

Preinstall preparation

To install Windows 10 we'll need a few things:

  • The Windows 10 disc image (.iso file).
    • This can be sourced directly from microsoft.com here. You'll need to enable javascript. (This link will likely disappear after August 2016, when Windows 10 is no longer free).
      • If you're planning on pirating Windows 10, you need the Professional version or above.
      • If the above link no longer works (i.e. Microsoft have stopped supplying an official Windows 10 ISO publicly) you can always look for a copy on KAT or TPB. Look for something which includes the official updates up until today (whatever month/year this is) and perhaps avoid isos that install lots of Super Kewl Appz and generally fuck with the source.
  • A utility to copy the Windows 10 image to a DVD or USB stick for installation like the official Windows USB/DVD Download Tool, UNetbootin or Rufus.
  • Backups of your data.
  • An install kit, which will contain:
    • Drivers for your hardware that are compatible with Windows 10. If you can't find a specific Windows 10 driver, grab the Windows 8.1 driver and cross your fingers. If you're super cautious (which is fine) wait until your hardware manufacturer releases Windows 10 drivers.
    • Common programs you use (e.g. your media player, your compression utility, your browser).

Once you have the .iso, use a spare USB flash drive or DVD with one of the aforementioned tools to create a bootable install disk.

Installation preparation

Insert your bootable DVD or USB drive and reboot. Jump into the BIOS/UEFI with F1 or DEL (or whatever you're told to on the first screen your computer displays as it boots. On ThinkPads this is the ThinkVantage button).

Inside the BIOS/UEFI, you need to set the Boot Order to boot from your USB stick or DVD. This is just a matter of putting the USB stick or DVD ahead of your other drives in the Boot Priority. If you are using a computer which has both UEFI and Legacy options choose UEFI first. Most modern installation images are designed to boot using UEFI, but also have legacy fallback for older motherboards.

With your BIOS settings set, save and exit the BIOS. At this point it should reboot automatically into the installer.

Installation

Once BIOS hands over control to your boot device you may get a message to hit any key to boot from CD/DVD or USB. Hit a key if you see this message.

The Windows 10 install process will begin:

  • The first screen, which has a lovely purple background, will have a window asking for your language (English (United States)), your Time and Currency Format (English (United States)) and your Keyboard or input method (US). Set the Time and Currency Format to your region (and anything else if you want a non english install) and hit the Next button in the bottom right.
  • Hit the Install Now button.
  • After a short pause, you'll be presented with the product key window. This wants your product key, but we can worry about that later, so hit Skip.
  • If your .iso has multiple versions of Windows 10 available, the next screen will allow you to choose which version of Windows 10 you install (Home, Pro, etc) and what architecture version you want (x64, unless you're on a toaster).
    • If you're some kind of pirate scumbag, select Pro or above.
  • The license terms screen is next. Kiss your first born goodbye and pray to Buddha, click I accept the license terms, and hit Next.
  • Next is the "type of installation you want" screen. You always want Custom. So click it.
  • Next is the partition screen. This is the most serious screen of the install, so be careful here:
    • You need two partitions:
      • A boot ("System Reserved") partition of about 350mb (the installer will force you to make this).
      • A partition of 15gb+ to install Windows 10 to (this will become C: drive).
    • If the drive is empty, just make a new partition and follow the prompts.
    • If you're installing over the top of win7/8.1, format your old C: drive.
    • If you plan to dual boot install Windows first and Linux second. This will ensure you get GRUB as your bootloader with an entry for Linux and Windows. Remember to leave free space for Linux when partitioning C:. Around 15GB should be good depending on usage. Installing to a separate drive is preferred over dual booting because Windows 10 tends to aggressively overwrite other bootloaders on its drive.
    • If you already have Linux partitions, don't touch them unless you want Windows to format them and destroy all your data. (Windows will still destroy your grub-bios install, but that's easily reinstalled with a quick boot into your Linux install USB, chrooting to your installation, and # grub-install --target=i386-pc --recheck /dev/sdX ; grub-mkconfig -o /boot-grub/grub.cfg).
    • With your new C: drive selected, hit Next.
  • Windows will copy the install files. This will take 5-10mins from a USB.
  • The Windows 10 install will then reboot. After the reboot you no longer need your USB stick or DVD inserted for the install to continue. You might get a message about booting from your USB or DVD (defaulting to no), and no is the correct answer.
  • Windows will spend some time "Getting ready" and then reboot again.
  • At long last you'll be presented with a blue screen and white text, asking you to enter the product key. In the bottom left, in quite small text, will be "Do this later". Click this.
  • At the "Get Going Fast" (like sonic) screen, look in the bottom left for Customize Settings. Click it.
  • In the first Customize Settings screen, turn all four privacy invasion options Off, then hit Next.
  • In the second Customize Settings screen, turn off the four privacy invasion options, then scroll down to turn off the fifth privacy invasion option, then hit Next.
  • In the Create an Account screen, enter a username and perhaps a password, then hit Next.
  • Windows will show you a few friendly screens like "Hi" and "This won't take long".
  • You'll then be dropped into a freshly installed Windows 10 install.

Post installation

Activation

Follow Microsoft's instructions to activate it.

Beginning in October 2015 and through August 2016, if you had a legitimate product key for Windows 7/8/8.1 activated on the system before you can use the same key to activate Windows 10. Your product key can be found with your Windows 7/8/8.1 installation media or on the Microsoft sticker on your PC. This sticker is usually found on the bottom of laptops and the side of prebuilt desktops.

If you're a pirate, you need KMSPico. KMS is a key management system meant for offices and administrators of multiple Windows computers. KMSPico emulates that system and can activate Windows installs without them being legal.

Further reading

.NET Framework 3.5 offline installation

Windows 10 (and 8/8.1) comes with .NET 4+ installed. Some apps need .NET 3.5 (or 2.0 or 1.0). You need internet access to be able to install .NET 3.5. If you don't give Windows internet access, you might think that you can download a dotNetFx35setup.exe from microsoft.com. Nope. You will actually get an error saying that .NET 3.5 is not installed when you run the installer for .NET 3.5.

So to install .NET 3.5 without giving Windows internet access:

  • Mount the Windows 10 install .iso or plug in your USB/DVD.
  • Take note of the drive letter assigned to it.
  • Open a Command Prompt as an Administrator:
    • Start > All Apps > Windows System > right click Command Prompt > Run as Administrator.
  • Check the following command and change the drive letter as required. Here it is listed as D: drive (straight after /Source):

Dism /online /enable-feature /featurename:NetFx3 /All /Source:D:\sources\sxs /LimitAccess

  • With the drive letter correct, copy the above command.
  • Paste it into the Administration Command Prompt and hit enter.
  • The "feature" will be "enabled". This will take a minute or so and when it's done will say "The operation completed successfully".
  • Close the Administration Command Prompt.

Network spyware

Windows and Windows 10: Considered Harmful
Note: This doesn't do much, as most, if not all, DNS lookups concerning Microsoft hostnames are hardcoded in dnsapi.dll. Add them to your router's blocklist as well for additional security.
Note: If you complain that this breaks things you use, then you are using the wrong things and should kill yourself

Open your hosts file, located in C:\Windows\System32\drivers\etc with notepad. Copy and paste these lines (some lines are irrelevant, but are included for extra security): 


#List from this URL: https://bitbucket.org/matthewlinton/ancile/src/2701ae9f728df20b0e569c97b91d4580663f1638/data/modify_Hosts/modify_hosts.lst?at=master

# Lines starting with a "#" are comments and will be ignored.

0.0.0.0 0.r.msn.com
0.0.0.0 a.ads1.msn.com
0.0.0.0 a.ads1.msn.com
0.0.0.0 a.ads2.msads.net
0.0.0.0 a.ads2.msn.com
0.0.0.0 a.rad.msn.com
0.0.0.0 ac3.msn.com
0.0.0.0 act-3-blu.mesh.com
0.0.0.0 activesync.glbdns2.microsoft.com
0.0.0.0 ad.doubleclick.net
0.0.0.0 adnexus.net
0.0.0.0 adnxs.com
0.0.0.0 ads.eu.msn.com
0.0.0.0 ads.msn.com
0.0.0.0 ads.msn.com.nsatc.net
0.0.0.0 ads1.msads.net
0.0.0.0 ads1.msn.com
0.0.0.0 ads2.msn.com
0.0.0.0 ads2.msn.com.c.footprint.net
0.0.0.0 adsmockarc.azurewebsites.net
0.0.0.0 adsyndication.msn.com
0.0.0.0 aidps.atdmt.com
0.0.0.0 aidps.msn.com.nsatc.net
0.0.0.0 aka-cdn-ns.adtech.de
0.0.0.0 analytics.live.com
0.0.0.0 analytics.microsoft.com
0.0.0.0 analytics.msn.com
0.0.0.0 analytics.msnbc.msn.com
0.0.0.0 analytics.r.msn.com
0.0.0.0 appexmapsappupdate.blob.core.windows.net
0.0.0.0 arc2.msn.com
0.0.0.0 arc3.msn.com
0.0.0.0 arc9.msn.com
0.0.0.0 atlas.c10r.facebook.com
0.0.0.0 az361816.vo.msecnd.net
0.0.0.0 az512334.vo.msecnd.net
0.0.0.0 b.ads1.msn.com
0.0.0.0 b.ads2.msads.net
0.0.0.0 b.rad.msn.com
0.0.0.0 bat.bing.com
0.0.0.0 bingads.microsoft.com
0.0.0.0 bl3302.storage.skyprod.akadns.net
0.0.0.0 blu.mobileads.msn.com
0.0.0.0 bn1-2cd.wns.windows.com
0.0.0.0 bn1cd.wns.windows.com
0.0.0.0 bn1wns2011508.wns.windows.com
0.0.0.0 bn2wns1.wns.windows.com
0.0.0.0 bn2wns1b.wns.windows.com
0.0.0.0 bs.eyeblaster.akadns.net
0.0.0.0 bs.serving-sys.com
0.0.0.0 c.atdmt.com
0.0.0.0 c.atdmt.com.nsatc.net
0.0.0.0 c.bing.com
0.0.0.0 c.microsoft.com
0.0.0.0 c.msn.com
0.0.0.0 c.msn.com.nsatc.net
0.0.0.0 c.ninemsn.com.au
0.0.0.0 c.no.msn.com
0.0.0.0 c1.microsoft.com
0.0.0.0 ca.telemetry.microsoft.com
0.0.0.0 cache.datamart.windows.com
0.0.0.0 cdn.atdmt.com
0.0.0.0 cdn.content.prod.cms.msn.com
0.0.0.0 cds26.ams9.msecn.net
0.0.0.0 choice.microsoft.com
0.0.0.0 choice.microsoft.com.nsatc.net
0.0.0.0 cmsresources.windowsphone.com
0.0.0.0 col.mobileads.msn.com
0.0.0.0 compatexchange.cloudapp.net
0.0.0.0 content.windows.microsoft.com
0.0.0.0 corp.sts.microsoft.com
0.0.0.0 corpext.msitadfs.glbdns2.microsoft.com
0.0.0.0 crl.microsoft.com
0.0.0.0 cs1.wpc.v0cdn.net
0.0.0.0 cy2.settings.data.microsoft.com.akadns.net
0.0.0.0 dart.l.doubleclick.net
0.0.0.0 db3aqu.atdmt.com
0.0.0.0 db3wns2011111.wns.windows.com
0.0.0.0 db5.settings.data.microsoft.com.akadns.net
0.0.0.0 db5sch101101511.wns.windows.com
0.0.0.0 db5sch101101939.wns.windows.com
0.0.0.0 db5sch101110626.wns.windows.com
0.0.0.0 db5sch101110634.wns.windows.com
0.0.0.0 db5sch103082111.wns.windows.com
0.0.0.0 db5sch103082406.wns.windows.com
0.0.0.0 db5sch103092209.wns.windows.com
0.0.0.0 dc.services.visualstudio.com
0.0.0.0 dev.virtualearth.net
0.0.0.0 df.telemetry.microsoft.com
0.0.0.0 diagnostics.support.microsoft.akadns.net
0.0.0.0 diagnostics.support.microsoft.com
0.0.0.0 digg.analytics.live.com
0.0.0.0 directory.services.live.com.akadns.net
0.0.0.0 displaycatalog.md.mp.microsoft.com
0.0.0.0 displaycatalog.mp.microsoft.com
0.0.0.0 dl.delivery.mp.microsoft.com
0.0.0.0 dmd.metaservices.microsoft.com
0.0.0.0 download-ssl.msgamestudios.com
0.0.0.0 ec.atdmt.com
0.0.0.0 ecn.dev.virtualearth.net
0.0.0.0 en-us.appex-rf.msn.com
0.0.0.0 fe2.update.microsoft.com.akadns.net
0.0.0.0 fe3.delivery.dsp.mp.microsoft.com.nsatc.net
0.0.0.0 fe3.delivery.mp.microsoft.com
0.0.0.0 feedback.microsoft-hohm.com
0.0.0.0 feedback.search.microsoft.com
0.0.0.0 feedback.windows.com
0.0.0.0 fesweb1.ch1d.binginternal.com
0.0.0.0 f4a487e56259f4bd5831e9e30470e83.azr.msnetworkanalytics.testanalytics.net
0.0.0.0 flex.msn.com
0.0.0.0 flex.msn.com.nsatc.net
0.0.0.0 g.msn.com
0.0.0.0 g.msn.com.nsatc.net
0.0.0.0 geo.settings.data.microsoft.com.akadns.net
0.0.0.0 geo-prod.do.dsp.mp.microsoft.com
0.0.0.0 geover-prod.do.dsp.mp.microsoft.com
0.0.0.0 global.msads.net.c.footprint.net
0.0.0.0 h1.msn.com
0.0.0.0 h2.msn.com
0.0.0.0 help.bingads.microsoft.com
0.0.0.0 i1.services.social.microsoft.com
0.0.0.0 i1.services.social.microsoft.com.nsatc.net
0.0.0.0 inference.location.live.net
0.0.0.0 js.microsoft.com
0.0.0.0 lb1.www.ms.akadns.net
0.0.0.0 licensing.md.mp.microsoft.com
0.0.0.0 live.rads.msn.com
0.0.0.0 livetileedge.dsx.mp.microsoft.com
0.0.0.0 logging.windows.microsoft.com
0.0.0.0 ls2web.redmond.corp.microsoft.com
0.0.0.0 m.adnxs.com
0.0.0.0 m.anycast.adnxs.com
0.0.0.0 m.hotmail.com
0.0.0.0 mediadiscovery.microsoft.com
0.0.0.0 microsoft-hohm.com
0.0.0.0 mobile.pipe.aria.microsoft.com
0.0.0.0 msedge.net
0.0.0.0 msnportal.112.2o7.net
0.0.0.0 msntest.serving-sys.com
0.0.0.0 nexus.officeapps.live.com
0.0.0.0 nexusrules.officeapps.live.com
0.0.0.0 oca.telemetry.microsoft.com
0.0.0.0 oca.telemetry.microsoft.com.nsatc.net
0.0.0.0 officeclient.microsoft.com
0.0.0.0 onesettings-bn2.metron.live.com.nsatc.net
0.0.0.0 onesettings-cy2.metron.live.com.nsatc.net
0.0.0.0 onesettings-db5.metron.live.com.nsatc.net
0.0.0.0 onesettings-hk2.metron.live.com.nsatc.net
0.0.0.0 otf.msn.com
0.0.0.0 popup.msn.com
0.0.0.0 pre.footprintpredict.com
0.0.0.0 preview.msn.com
0.0.0.0 rad.live.com
0.0.0.0 rad.msn.com
0.0.0.0 rad.msn.com.nsatc.net
0.0.0.0 redir.metaservices.microsoft.com
0.0.0.0 reports.wes.df.telemetry.microsoft.com
0.0.0.0 rmads.eu.msn.com
0.0.0.0 rmads.msn.com
0.0.0.0 rpt.rad.msn.com
0.0.0.0 sb.scorecardresearch.com
0.0.0.0 schemas.microsoft.akadns.net
0.0.0.0 search.msn.com
0.0.0.0 secure.adnxs.com
0.0.0.0 secure.anycast.adnxs.com
0.0.0.0 secure.flashtalking.com
0.0.0.0 services.wes.df.telemetry.microsoft.com
0.0.0.0 settings.data.glbdns2.microsoft.com
0.0.0.0 settings.data.microsoft.com
0.0.0.0 settings-sandbox.data.glbdns2.microsoft.com
0.0.0.0 settings-sandbox.data.microsoft.com
0.0.0.0 settings-ssl.xboxlive.com
0.0.0.0 settings-win.data.microsoft.com
0.0.0.0 sgmetrics.cloudapp.net
0.0.0.0 shell.windows.com
0.0.0.0 siweb.microsoft.akadns.net
0.0.0.0 skyapi.skyprod.akadns.net
0.0.0.0 sls.update.microsoft.com
0.0.0.0 sls.update.microsoft.com.akadns.net
0.0.0.0 sls.update.microsoft.com.nsatc.net
0.0.0.0 sO.2mdn.net
0.0.0.0 spynet.microsoft.com
0.0.0.0 spynet2.microsoft.com
0.0.0.0 spynetalt.microsoft.com
0.0.0.0 spynettest.microsoft.com
0.0.0.0 sqm.df.telemetry.microsoft.com
0.0.0.0 sqm.microsoft.com
0.0.0.0 sqm.telemetry.microsoft.com
0.0.0.0 sqm.telemetry.microsoft.com.nsatc.net
0.0.0.0 ssw.live.com
0.0.0.0 ssw.live.com.nsatc.net
0.0.0.0 static.2mdn.net
0.0.0.0 static-2mdn-net.l.google.com
0.0.0.0 statsfe1.ws.microsoft.com
0.0.0.0 statsfe1.ws.microsoft.com.nsatc.net
0.0.0.0 statsfe2.update.microsoft.com
0.0.0.0 statsfe2.update.microsoft.com.akadns.net
0.0.0.0 statsfe2.ws.microsoft.com
0.0.0.0 statsfe2.ws.microsoft.com.nsatc.net
0.0.0.0 storeedgefd.dsx.mp.microsoft.com
0.0.0.0 support.msn.microsoft.akadns.net
0.0.0.0 survey.watson.microsoft.com
0.0.0.0 t.urs.microsoft.com.nsatc.net
0.0.0.0 t0.ssl.ak.dynamic.tiles.virtualearth.net
0.0.0.0 t0.ssl.ak.tiles.virtualearth.net
0.0.0.0 tele.trafficmanager.net
0.0.0.0 telecommand.telemetry.microsoft.com
0.0.0.0 telecommand.telemetry.microsoft.com.nsatc.net
0.0.0.0 telemetry.appex.bing.net
0.0.0.0 telemetry.appex.search.prod.ms.akadns.net
0.0.0.0 telemetry.microsoft.com
0.0.0.0 telemetry.urs.microsoft.com
0.0.0.0 teredo.ipv6.microsoft.com
0.0.0.0 tile-service.weather.microsoft.com
0.0.0.0 tlu.dl.delivery.mp.microsoft.com
0.0.0.0 tsfe.trafficshaping.dsp.mp.microsoft.com
0.0.0.0 udc.msn.com
0.0.0.0 urs.microsoft.com
0.0.0.0 v10.vortex-win.data.metron.live.com.nsatc.net
0.0.0.0 v10.vortex-win.data.microsoft.com
0.0.0.0 version.hybrid.api.here.com
0.0.0.0 view.atdmt.com
0.0.0.0 vortex.data.glbdns2.microsoft.com
0.0.0.0 vortex.data.metron.live.com.nsatc.net
0.0.0.0 vortex.data.microsoft.com
0.0.0.0 vortex-bn2.metron.live.com.nsatc.net
0.0.0.0 vortex-cy2.metron.live.com.nsatc.net
0.0.0.0 vortex-db5.metron.live.com.nsatc.net
0.0.0.0 vortex-hk2.metron.live.com.nsatc.net
0.0.0.0 vortex-sandbox.data.glbdns2.microsoft.com
0.0.0.0 vortex-sandbox.data.microsoft.com
0.0.0.0 vortex-win.data.metron.live.com.nsatc.net
0.0.0.0 vortex-win.data.microsoft.com
0.0.0.0 w3.b.cap-mii.net
0.0.0.0 watson.live.com
0.0.0.0 watson.live.comwatson.microsoft.com
0.0.0.0 watson.microsoft.com
0.0.0.0 watson.microsoft.com.nsatc.net
0.0.0.0 watson.ppe.telemetry.microsoft.com
0.0.0.0 watson.telemetry.microsoft.com
0.0.0.0 watson.telemetry.microsoft.com.nsatc.net
0.0.0.0 web.vortex.data.microsoft.com
0.0.0.0 wes.df.telemetry.microsoft.com
0.0.0.0 win10.ipv6.microsoft.com
0.0.0.0 win10.ipv6.microsoft.com.nsatc.net
0.0.0.0 win8.ipv6.microsoft.com
0.0.0.0 www.modern.iechoice.microsoft.com
0.0.0.0 www.msedge.net

Furthermore, you can add these in your routing table. 


# This list was derived from this URL: https://bitbucket.org/matthewlinton/ancile/src/2701ae9f728df20b0e569c97b91d4580663f1638/data/modify_Routing/modify_routes.lst?at=master

# Lines starting with a "#" are comments and will be ignored.

104.107.13.214 255.255.255.255
104.210.4.77 255.255.255.255
104.210.40.87 255.255.255.255
104.214.35.244 255.255.255.255
104.41.207.73 255.255.255.255
104.43.140.223 255.255.255.255
104.45.11.195 255.255.255.255
104.45.136.42 255.255.255.255
104.45.214.112 255.255.255.255
104.46.1.211 255.255.255.255
104.46.50.125 255.255.255.255
104.69.113.196 255.255.255.255
104.69.140.179 255.255.255.255
104.69.140.181 255.255.255.255
104.70.210.203 255.255.255.255
104.73.211.105 255.255.255.255
104.73.211.159 255.255.255.255
104.73.215.154 255.255.255.255
104.73.217.91 255.255.255.255
104.73.220.170 255.255.255.255
107.20.234.199 255.255.255.255
107.21.246.114 255.255.255.255
111.221.29.177 255.255.255.255
111.221.29.254 255.255.255.255
13.107.3.128 255.255.255.255
13.107.4.50 255.255.255.255
13.107.5.88 255.255.255.255
13.76.219.191 255.255.255.255
13.76.219.210 255.255.255.255
131.107.113.238 255.255.255.255
131.253.14.121 255.255.255.255
131.253.14.153 255.255.255.255
131.253.14.194 255.255.255.255
131.253.14.76 255.255.255.255
131.253.34.230 255.255.255.255
131.253.40.109 255.255.255.255
131.253.40.37 255.255.255.255
131.253.40.47 255.255.255.255
131.253.40.53 255.255.255.255
131.253.40.64 255.255.255.255
134.170.106.152 255.255.255.255
134.170.106.176 255.255.255.255
134.170.106.200 255.255.255.255
134.170.107.176 255.255.255.255
134.170.109.200 255.255.255.255
134.170.119.140 255.255.255.255
134.170.178.97 255.255.255.255
134.170.179.87 255.255.255.255
134.170.184.133 255.255.255.255
134.170.185.125 255.255.255.255
134.170.185.70 255.255.255.255
134.170.188.139 255.255.255.255
134.170.235.16 255.255.255.255
134.170.30.203 255.255.255.255
134.170.30.204 255.255.255.255
134.170.51.246 255.255.255.255
134.170.51.247 255.255.255.255
134.170.53.30 255.255.255.255
134.170.58.121 255.255.255.255
134.170.58.123 255.255.255.255
134.170.58.125 255.255.255.255
134.170.58.189 255.255.255.255
137.116.139.114 255.255.255.255
137.116.81.24 255.255.255.255
137.117.100.176 255.255.255.255
157.56.100.83 255.255.255.255
157.56.106.184 255.255.255.255
157.56.106.185 255.255.255.255
157.56.113.217 255.255.255.255
157.56.121.89 255.255.255.255
157.56.124.87 255.255.255.255
157.56.149.250 255.255.255.255
157.56.194.72 255.255.255.255
157.56.194.73 255.255.255.255
157.56.194.74 255.255.255.255
157.56.23.91 255.255.255.255
157.56.57.5 255.255.255.255
157.56.74.250 255.255.255.255
157.56.77.139 255.255.255.255
157.56.91.77 255.255.255.255
157.56.96.208 255.255.255.255
157.56.96.54 255.255.255.255
157.56.96.80 255.255.255.255
165.254.114.10 255.255.255.255
165.254.114.34 255.255.255.255
168.61.146.25 255.255.255.255
168.61.149.17 255.255.255.255
168.61.172.71 255.255.255.255
168.62.11.145 255.255.255.255
168.62.187.13 255.255.255.255
168.62.21.207 255.255.255.255
168.63.100.61 255.255.255.255
168.63.108.233 255.255.255.255
174.129.244.227 255.255.255.255
184.28.167.143 255.255.255.255
184.29.134.49 255.255.255.255
184.29.137.155 255.255.255.255
184.30.37.150 255.255.255.255
184.31.242.141 255.255.255.255
191.232.139.182 255.255.255.255
191.232.139.210 255.255.255.255
191.232.140.76 255.255.255.255
191.236.155.80 255.255.255.255
191.236.16.12 255.255.255.255
191.238.241.80 255.255.255.255
191.239.50.18 255.255.255.255
191.239.50.77 255.255.255.255
191.239.52.100 255.255.255.255
192.229.163.249 255.255.255.255
192.243.250.72 255.255.255.255
192.243.250.88 255.255.255.255
198.78.206.253 255.255.255.255
2.21.16.151 255.255.255.255
2.21.236.193 255.255.255.255
2.22.245.247 255.255.255.255
2.22.70.61 255.255.255.255
2.22.71.158 255.255.255.255
2.22.75.120 255.255.255.255
2.22.77.127 255.255.255.255
2.22.87.71 255.255.255.255
207.46.101.29 255.255.255.255
207.46.153.155 255.255.255.255
207.46.202.114 255.255.255.255
207.46.223.94 255.255.255.255
216.38.170.128 255.255.255.255
23.102.155.140 255.255.255.255
23.102.21.4 255.255.255.255
23.102.4.253 255.255.255.255
23.103.182.126 255.255.255.255
23.2.16.10 255.255.255.255
23.2.16.8 255.255.255.255
23.202.16.64 255.255.255.255
23.202.21.236 255.255.255.255
23.202.58.89 255.255.255.255
23.202.61.139 255.255.255.255
23.3.59.213 255.255.255.255
23.3.59.68 255.255.255.255
23.33.106.110 255.255.255.255
23.33.25.34 255.255.255.255
23.33.31.59 255.255.255.255
23.46.18.40 255.255.255.255
23.46.19.158 255.255.255.255
23.73.138.65 255.255.255.255
23.96.212.225 255.255.255.255
23.97.178.173 255.255.255.255
23.97.209.97 255.255.255.255
23.99.10.11 255.255.255.255
23.99.109.44 255.255.255.255
23.99.109.64 255.255.255.255
23.99.116.116 255.255.255.255
23.99.49.121 255.255.255.255
31.13.65.2 255.255.255.255
31.13.69.193 255.255.255.255
4.27.253.126 255.255.255.255
4.27.253.253 255.255.255.255
4.27.254.254 255.255.255.255
40.113.14.159 255.255.255.255
40.113.22.47 255.255.255.255
40.113.8.255 255.255.255.255
40.114.149.220 255.255.255.255
40.114.241.141 255.255.255.255
40.114.54.223 255.255.255.255
40.117.151.29 255.255.255.255
40.117.88.112 255.255.255.255
40.118.103.7 255.255.255.255
40.121.144.182 255.255.255.255
40.69.40.157 255.255.255.255
40.76.12.162 255.255.255.255
40.76.12.4 255.255.255.255
40.77.226.250 255.255.255.255
40.83.189.49 255.255.255.255
46.33.76.33 255.255.255.255
46.33.76.57 255.255.255.255
52.164.241.205 255.255.255.255
54.243.135.126 255.255.255.255
63.148.207.151 255.255.255.255
63.148.207.70 255.255.255.255
63.148.207.80 255.255.255.255
63.148.207.88 255.255.255.255
63.148.207.95 255.255.255.255
63.148.207.97 255.255.255.255
63.241.108.111 255.255.255.255
63.241.108.124 255.255.255.255
63.243.243.34 255.255.255.255
63.243.243.35 255.255.255.255
63.243.243.48 255.255.255.255
63.243.243.49 255.255.255.255
63.243.243.58 255.255.255.255
63.243.243.67 255.255.255.255
64.233.185.148 255.255.255.255
64.233.185.149 255.255.255.255
64.4.27.50 255.255.255.255
64.4.54.153 255.255.255.255
64.4.54.165 255.255.255.255
64.4.54.18 255.255.255.255
64.4.54.22 255.255.255.255
64.4.54.254 255.255.255.255
64.4.54.98 255.255.255.255
65.39.117.230 255.255.255.255
65.52.100.93 255.255.255.255
65.52.108.11 255.255.255.255
65.52.108.153 255.255.255.255
65.52.108.154 255.255.255.255
65.52.108.163 255.255.255.255
65.52.108.2 255.255.255.255
65.52.108.251 255.255.255.255
65.52.108.254 255.255.255.255
65.52.108.27 255.255.255.255
65.52.108.33 255.255.255.255
65.52.108.52 255.255.255.255
65.52.108.56 255.255.255.255
65.52.108.59 255.255.255.255
65.52.108.90 255.255.255.255
65.52.108.92 255.255.255.255
65.54.192.248 255.255.255.255
65.54.225.167 255.255.255.255
65.54.226.187 255.255.255.255
65.55.128.80 255.255.255.255
65.55.128.81 255.255.255.255
65.55.130.50 255.255.255.255
65.55.138.110 255.255.255.255
65.55.138.111 255.255.255.255
65.55.149.120 255.255.255.255
65.55.176.90 255.255.255.255
65.55.2.2 255.255.255.255
65.55.227.188 255.255.255.255
65.55.252.92 255.255.255.255
65.55.44.51 255.255.255.255
65.55.44.82 255.255.255.255
65.55.44.85 255.255.255.255
65.55.52.23 255.255.255.255
65.55.83.120 255.255.255.255
66.119.152.205 255.255.255.255
66.235.138.193 255.255.255.255
66.235.138.194 255.255.255.255
66.235.138.195 255.255.255.255
66.235.139.17 255.255.255.255
66.235.139.18 255.255.255.255
66.235.139.19 255.255.255.255
66.235.139.205 255.255.255.255
66.235.139.206 255.255.255.255
66.235.139.207 255.255.255.255
68.67.152.103 255.255.255.255
68.67.152.109 255.255.255.255
68.67.152.110 255.255.255.255
68.67.152.111 255.255.255.255
68.67.152.112 255.255.255.255
68.67.152.113 255.255.255.255
68.67.152.120 255.255.255.255
68.67.152.129 255.255.255.255
68.67.152.131 255.255.255.255
68.67.152.132 255.255.255.255
68.67.152.172 255.255.255.255
68.67.152.173 255.255.255.255
68.67.152.174 255.255.255.255
68.67.152.215 255.255.255.255
68.67.152.218 255.255.255.255
68.67.152.235 255.255.255.255
68.67.152.236 255.255.255.255
68.67.152.254 255.255.255.255
68.67.152.56 255.255.255.255
68.67.152.58 255.255.255.255
68.67.152.61 255.255.255.255
68.67.152.92 255.255.255.255
68.67.152.94 255.255.255.255
68.67.152.97 255.255.255.255
68.67.153.148 255.255.255.255
68.67.153.173 255.255.255.255
68.67.153.180 255.255.255.255
68.67.153.183 255.255.255.255
68.67.153.188 255.255.255.255
68.67.153.208 255.255.255.255
68.67.153.209 255.255.255.255
68.67.153.244 255.255.255.255
68.67.153.248 255.255.255.255
68.67.153.251 255.255.255.255
68.67.153.253 255.255.255.255
68.67.153.37 255.255.255.255
68.67.153.39 255.255.255.255
68.67.153.40 255.255.255.255
68.67.153.41 255.255.255.255
68.67.153.44 255.255.255.255
68.67.153.56 255.255.255.255
68.67.153.87 255.255.255.255
68.67.153.89 255.255.255.255
68.67.176.126 255.255.255.255
68.67.176.129 255.255.255.255
68.67.176.132 255.255.255.255
68.67.176.145 255.255.255.255
68.67.176.152 255.255.255.255
68.67.176.16 255.255.255.255
68.67.176.47 255.255.255.255
68.67.176.50 255.255.255.255
68.67.176.51 255.255.255.255
68.67.176.63 255.255.255.255
68.67.176.68 255.255.255.255
72.246.43.10 255.255.255.255
72.246.43.128 255.255.255.255
72.246.43.16 255.255.255.255
72.246.43.25 255.255.255.255
72.246.43.26 255.255.255.255
72.246.43.33 255.255.255.255
72.246.43.34 255.255.255.255
72.246.43.40 255.255.255.255
72.246.43.48 255.255.255.255
72.246.43.56 255.255.255.255
72.246.43.9 255.255.255.255
74.125.21.148 255.255.255.255
74.125.21.149 255.255.255.255
77.67.29.176 255.255.255.255
8.12.223.125 255.255.255.255
8.12.223.254 255.255.255.255
8.254.233.126 255.255.255.255
8.254.240.126 255.255.255.255
8.254.248.254 255.255.255.255
8.254.56.254 255.255.255.255
8.26.206.252 255.255.255.255
8.26.207.126 255.255.255.255
8.26.209.126 255.255.255.255
8.26.210.126 255.255.255.255
93.184.215.200 255.255.255.255
94.245.121.176 255.255.255.255
94.245.121.177 255.255.255.255
94.245.121.178 255.255.255.255
94.245.121.179 255.255.255.255
95.101.128.137 255.255.255.255
95.101.128.195 255.255.255.255
96.17.204.167 255.255.255.255
96.17.204.25 255.255.255.255

Windows 10 AME

Warning: This section needs more information. Essentially, an installation guide and more about the limitations experienced by other anons can help.

As already stated, blocking trackers can only remove some low hanging fruit and is not a proper approach to improving privacy. This is the reason the Tor Browser does not include any tracker blockers. The only way to completely git rid of privacy-invading networking is to remove services and applications that cause those connections in the first place, as well as ensure that those programs and service do not get installed again (by other services such as Windows Update). Tools like ShutUp10 and WPD are NOT sufficient for privacy, since they either rely on disabling group policies or just temporarily disable spyware, which then get reactivated with the next security update.

Windows 10 Ameliorated is a project that provides a detailed long guide, some scripts and tools to get a modified Windows 10 installation which DOES NOT remove the spyware by disabling group policy, registry entries, hostfiles and other workarounds, but rather kills privacy-invasive services from the system on an executable level. This includes Windows Update, and any related services intended to re-patch the system via what is essentially a universal backdoor. Core applications, such as the included Edge web-browser, Windows Media Player, Cortana, as well as any appx applications, will also be purged. You system will spare about 2 GB of pre-installed garbage.

Note, that it is advised to do the manual installation, rather that using the ISO image. You shouldn't trust the source too much, but understand what you are doing and you can verify if you did everything right with tools like Wireshark. Also, it takes a lot of fucking time (about 2-3h, depends on your system and knowledge), so be prepared and patient.

Limitations

It may also not really be what you would want, since the absence of Windows Update requires you to download all necessary security updates and drivers yourself. But since Windows Update is also one of the most privacy invasive and user-raping applications out there, this could be considered good riddance (MS is not able to rape you in the ass with forced updates). You can also use a free and open-source software like Snappy Driver Installer to get your drivers.

The absence of Microsoft Store is objectively good riddance, except if you're retarded enough to depend on applications which are only provided from this cancerous source. Fuck you.

Now, the biggest possible limitation of Windows 10 AME is that there is no way to install any version of Microsoft Office newer than Microsoft Office 2007. That's pretty shit, since a lot of people use Windows just to use Office, but since the inclusion of the telemetry agent software in MS Office 2013 sends a fuckton of metadata to Microsoft about every single document you have written (possibly even every single keystroke), Office 2007 does not look so bad at all (and it just works™). Or just use the superior alternative.

External links

  • It was revealed that Microsoft sends encrypted images of the user's desktop back to Redmond. This video decrypts the encrypted images sent of the user's desktop. Happy browsing! Dead, and new source being found

Check the talk page for a very extensive compilation of shady things Windows 10 does.

Retrieved from "https://wiki.installgentoo.com/index.php?title=Windows_10&oldid=52807"