Windows 10 Enterprise ignores various privacy settings
twitter.com
twitter.com
I'm sure the Enterprise version shares all the code with the non Enterprise versions which have all the spying ... analytics... enabled, so bugs are bound to happen that let this escape into the Enterprise version.
My confidence was already shaken with MS through their entire Win 10 Campaign and it's now completely gone. Their paid support services are hit and miss and if I'm going to end up supporting things that my client is paying MS to support then they're out and my client gets a smaller TCO overall. I'll have to work with some of them so their business remain viable during the transition but I'm willing to do that. Their growth is our growth. Payment plans, trade, whatever we can come up with to make this happen. For every one thing MS has done, loudly, in the attempt to instill trust they've done 5 things, quietly, that harm it. There are too many viable platforms available and if money is the only obstacle then I'll mitigate that for our clients benefit.
I've always been an MS person but am running Ubuntu on all of my devices now. I feel it hurts my productivity as lots of things I did in Windows just don't work in Ubuntu, but it's better than the alternative. I have a Windows 10 VM that I use every once in a while for those things that are completely impossible on Ubuntu.
And I'm not even sure I can trust Canonical.
Canonical did some stuff that upset a lot of people with sending search results through Amazon but that could be opted out of much easier than all this windows 10 stuff. I have also read that they don't contribute to the kernel as much as some think they ought to. And they have a tendency to fiddle with their UIs endlessly (I use xubuntu which is based on XFCE and avoids a lot that bikeshed renovation). Are there other reasons not to trust canonical?
I don't mean to pry with either question just generally curious.
Some of my pain points. Many probably have solutions, but I'm stuck between spending time dealing with it the way it is, and spending time finding a solution. These are not in any particular order:
1. Serial communication(terminal, for interfacing with console ports). I tried a few programs that didn't really work right away, and settled on Putty as that's what I used in windows. Except Putty under Ubuntu has no menu bar -- just an X to close it, and I can't copy or paste anything in or out of it. I also have to run it as root to access /dev/ttyUSB0 (I know I think there is a setting for this, just hasn't been important enough to spend the time looking). The copy/paste is the most annoying part.
2. Office(Outlook in particular) -- I tried a few options, even found a plugin for Thunderbird that would let me connect to an exchange server, but it just never quite worked right. I've adapted and am using OWA now, but I feel like it slows me down. I haven't yet been able to get Office >2007 running under Wine (not saying that I can't, just time vs benefit)
3. Google Earth Pro - I used this almost daily. I finally got it running under wine, but it's an older version, and many features don't work, such as searching by address. And any time it's running it leaves a shadow on the bottom of my screen, on top of all other applications.
4. Right-click shell interaction with 7-zip. Ubuntu's archive manager just doesn't seem to work right sometimes. I really miss right click > extract to ... or Extract all to (asterisk)\
5. PUTTING AN ISO ON A USB DRIVE. This is one of the more shocking ones and is something I can't even use the Windows 10 VM for because I'm not able to get USB passthrough working. Something as simple as firing up Unetbootin or Rufus and plopping an ISO on to a USB drive is nearly impossible on Ubuntu. I have Unetbootin, but have yet to get it to work. Haven't found Rufus yet for Linux/Ubuntu.
6. Network manager. It's always crashing and it never does what I want. Sometimes I just want to set a f*cking IP address on an interface and don't want to jump through 15 hoops. I might need to set addresses in 20 different networks in a single day. If I do it with ifconfig, the network manager "fixes" it for me. I have seriously resulted to using "sudo watch -n .2 ifconfig eno1 192.168.1.5 netmask 255.255.255.0" to set and keep an address on an interface.
Sometimes when it crashes and refuses to scan wifi networks(or 4g networks) I can just sudo service network manager restart, other times it takes a complete reboot.
7. I get random errors that pop up all the time "A system error has been detected, would you like to send a report to Ubuntu? With the default set to yes" -- never bothered to look for the error and it doesn't seem to coincide with any behavior I've seen.
8. RDP -- Remmina is pretty close to good enough, but sometimes I find copy/paste doesn't work, and the VNC function seems to have some compatibility issues.
9. CD/DVD Writing -- a problem solved long ago in Windows still gives me headaches in Ubuntu. System stutter will toast a disc, if I can even get it to burn at all.
10. Lock screen issues(not really productivity related...) Sometimes I will lock the desktop and close the screen(I don't often use standby) -- and open it back up and can use the desktop for 10-20 secs without entering a password. Then, as if it forgot, it will toss the locked screen up there and make me unlock it.
11. Task switcher grouping. I wish there was a way to turn this off without using the static application switcher. I alt-tab A LOT and don't like the delay I have to take in order to switch windows in a single application. To be fair, I hate the newer Windows behavior also that regroups windows in alphabetical order after the top few.
12. There's always some vendor rabbit hole that I get sucked into that would be easier to deal with on Windows. Maybe Dell packaged a bios update in a .exe file that can't be extracted without a Windows box(yes probably with Wine, but how much time am I going to spend getting that .exe to run?). Or some SAN management application, and don't even get me started on Java and Cisco's SDM, or some special VPN program I have to use to access a client's network that doesn't have a functional linux version, etc...
Those are the ones at the top of my head. I realize most can probably be solved with some time spent, but I'm still not yet nimble enough in linux to effectively compile/recompile things without following a step-by-step somewhere, and then when I do that, I'm left to my own devices to keep it updated, something I'd rather not spend cycles doing.
I'm running 16.04 LTS on a Latitude E7250 laptop. Chrome(not Chromium) is my main browser. There are tons of things that Ubuntu handles very well, and I paid nothing for it, so I can't complain much. One of the big complaint's I've heard about linux vs windows on laptops is battery life -- but I'm happy with what I get. Depending on what I'm doing, it will last anywhere from 2 to 12 hours. Standby and resume work well, though sometimes it seems that it shuts down instead of standby(though I haven't ruled out fat-finger in these cases), and all in all I think they've come a long way to making a usable OS for someone like me that's been using Windows since 3.0(though I'm quite comfortable on a command line).
As for the trust, it's mostly because I know TINSTAFL, and as it's free, I wonder where Canonical's interests are. The constant pestering to send error reports to Canonical are reminiscent of Windows trying to upload my crashdumps to MS. Whether or not these are memory dumps, I don't know, but to me Error report is often =Crashdump=memory dump= whatever info was in memory at that time is fired off to who knows where into an environment with unknown security.
Use K3B to burn CDs and turn on Burnfree/whatever it's called.
I didn't see any copy/paste options in the settings -- am I missing something?
dd if=myiso.iso of=/dev/sdx && sync
I think it only works that way with ISOs made in a way to support it?
[1] https://arstechnica.com/civis/viewtopic.php?p=30645773&sid=6...
diskpart
> select disk 2
> clean
> create partition primary
> format fs=fat32 quick
> active
> assign
> exit
mount ISO and drag/drop contents of ISO to drive.
But I think that method stopped working with Win8/10, maybe something to do with UEFI/Secure Boot?
edit: fix formatting
Network manager pissed me off so much that I stopped using it. I recommend just shutting it off. All it seems to do is run the bash commands for you. Might as well just run them yourself.
Same with burning ISO's, it's easier to just use command line tools. The most dead reliable USB ISO burner I've used is the DD command. I've used it to burn all sorts of crazy stuff that windows refused to write.
Haven't tried DD as an ISO to CD burner...will give it a shot.
---
I close my laptop, it goes into sleep mode, I open the screen and my desktop is just there, I can happily use the browser, open apps, run commands, whatever, and then 10-20 seconds later the lock screen kicks in. It's insane that the architecture of the system even allows it to happen.
2. Good point. What did you used? Exquilla, DavMail?
5. Use etcher!
9. k3b is the answer
Finally I think that Fedora/kde or Mint/cinnamon have an overall better user experience than Ubuntu.
Yep. I tried minicom and did not like it :-)
> 2. Good point. What did you used? Exquilla, DavMail?
Exquilla, didn't care for it either. The friction to switch/learn that + Thunderbird was greater than adapting to OWA
I've seen KDE suggested a few times now. I will have to check it out.
Thanks for the tips!
Subjective List - only a few good solutions:
1. screen can be used for serial stuff - also allows logging everything to file and copy&paste - you add yourself to a group that uses that device if you don't want to be root.
2. Yup. It's a pain point. There is stuff like Play on Linux that eases some WINE pain points.
3. There is a Linux version: https://www.google.com/earth/download/gep/agree.html
4. Blame Gnome/Ubuntu. KDE is better in that regard (I know no the answer you want to hear)
5. Depending on the ISO dd is good enough. geteltorito is your friend: https://userpages.uni-koblenz.de/~krienke/ftp/noarch/getelto... - https://wiki.archlinux.org/index.php/Flashing_BIOS_from_Linu...
6. Yes. NetworkManager is a pain point. Plasma NM (KDE) works fine for me. There is nmcli that you can use via command line. It's not totally straight forward but should be good enough for automation.
7. This is apport - you can disable it - another major Ubuntu pain point. http://howtoubuntu.org/how-to-disable-stop-uninstall-apport-...
8. Yes. Remmina crashes for me a lot of times, I'm not using VNC that often but it's kind of pain in the ass. You could try using plain rdesktop and reading up on details - I've switchted NX where it is possible but it's also not perfect.
9. Only ever burned with k3b and never got problems.
10. Lightdm lockscreen sucks :( - sddm (again KDE) works far more reliable for me.
12. kwin/KDE gives you all the options. There might be some hidden GNOME or Ubuntu Tweak tool settings but I stopped bothering.
Battery life: powertop + tlp and it's now better than windows for me (on an Ivy Bridge i5 HP Notebook, should work similiar good on a Dell with Intel)
1) sounds definitely like a permission problem. Is your user member of the dialout group? If not, add it there, re-login and try again. You should not be forced to use the root user.
2) Exchange is a problem. There are several solutions, none of them is all that great: a) use Evolution, b) use Thunderbird with the proprietary plugin, c) use a proxy like davmail (davmail.sf.net).
3) There is Earth Pro for Linux too, it just isn't advertised. After installing the regular Earth, it will install also a repo for updates. Check what else is there in the repo - in the .rpm repo, there is the pro version. It has some bugs though - every time I try to use GPS tracing, it crashes.
5) Most distribution have a utility to make a boot drive. There are also other ways. If you intend to boot via UEFI, there's no need for special utilities to make the USB key. Just copy the iso content to the USB stick, on FAT{16,32}-formatted partition. If the UEFI bootloader can find the EFI directory in the root and it's content, it will boot fine.
This will not work for some windows editions, thought. For example, Windows 2012R2 has install.wim larger than 4 GB, so it won't fit on a FAT filesystem.
6) Do not fight the NetworkManager with ifconfig. If you want to use NetworkManager (and you want, if you use wifi, wwan, etc), change the IPs with nmcli. It's command line interface to the NM, so it will take note of this change and it won't cause difference between what the config files say and what is the reality on the interfaces.
Probably not. Will check -- I haven't changed any group memberships, so if it isn't by default, then it isn't.
> 2) Exchange is a problem...b) use Thunderbird with the proprietary plugin
Thunderbird with Exquilla is what I tried, but it just didn't quite do it for me -- the friction to use was greater than adapting to OWA.
> 3) There is Earth Pro for Linux too, it just isn't advertised.
Really?! I have to figure this out then! 3D buildings and drawing 3D paths to check LOS is my primary usage, so a GPS trace bug won't bother me too much.
> 5) Most distribution have a utility to make a boot drive.
I found the Ubuntu utility to make an Ubuntu bootable disk, but it wouldn't work on anything but an Ubuntu ISO.
> 6) Do not fight the NetworkManager with ifconfig. If you want to use NetworkManager (and you want, if you use wifi, wwan, etc), change the IPs with nmcli.
Thanks for the tip -- I'll learn nmcli and give it a shot, sounds like exactly what I need.
Sure enough: google-earth-pro-stable - Explore, search and discover the planet
sudo apt-get install google-earth-pro-stable and voila.
I can't believe I've suffered for this long.
Thanks a million!
Also, do you remember what was the specific reason for failing the audit? This all sounds interesting since you've gone though that experience.
DNS/FW whitelist is the only way to have even a little confidence that egress is controlled at this point.
The LTSB edition looks promising but I haven't put it under the microscope yet.
I'm not sure if it's comedic or tragic that the version so very many users would want most, is not only the version with the worst name, but also the version Microsoft discourages people from adopting.
Critical patch support, infrequent updates, and excludes crufty bloatware. What's not to like?
Not surprising, because MS wants to push all the features (and ads, telemetry, etc.) to users regardless of whether they actually want them.
Indeed I wish MS would just keep supporting XP as the "Windows LTSB" with nothing but critical security patches, and keep doing it until the OS becomes nearly invulnerable to remote attacks.
I lol'd. You'd probably be pretty safe with Windows 3.11, Trumpet Winsock, and Netscape Navigator.
edit: so long as nobody got your public IP and used Winnuke on you.
Microsoft offers 90-days evaluation ISOs of Windows 10 Enterprise and LTSB [1]. Just be sure to select "Windows 10 Enterprise LTSB" instead of "Windows 10 Enterprise" when downloading [2].
[1] https://www.microsoft.com/en-us/evalcenter/evaluate-windows-...
There's apparently some new LTSB on its way but this aside it is not the panacea this thread makes it out to be.
It seems unusual to me if any desktop systems are anywhere close to card data, IMHO usually you'd have in scope only a bunch of servers (so, Linux or Windows Server for normal businesses who don't have a reason to wrestle mainframes) in an isolated network, but most of company computers including all the user desktops shouldn't have a way to touch in-scope data or systems in any way whatsoever, so if they're properly isolated (as they should be anyway) they would be out of scope for most of PCI DSS requirements.
A large BestBuy-like place here in Argentina has their sales terminals boot over PXE into some form of *nix straight to the sales systems with no real internet.
A bank nearby boots the account executive's systems right into KDE, on some pretty locked machines.
Windows 10 in any of those scenarios would be a laugh, I can't even being to think why someone would pick it for anything that requires security audits.
It confounds me that locking yourself into a shrinking platform is what these players choose to do. Walmart doesn't use Windows in PCI related situations, nor do the big boys, all are on SLES running a POS atop that.
If your gonna do a rewrite, why lock yourself into one OS and into one database? Database connectors are a thing, and they aren't hard to use...
Sure, you can technically run C# on a Linux box (eg: Debian), but the last few times I had to (to interface with some point of sale hardware) I literally ended up just rewriting the driver in python. No desire to maintain something so foreign to the rest of the codebase when python can handle serial devices just fine.
Wrt not using a database connector, just why? Your literally locking yourself to the SQL Server licensing model, which blows up when you allow BYOD on every android phone, and they're all connecting back to your SQL server. Postgres and MariaDB meanwhile have no issues. Let alone if you hit the 10GB DB size cap, or need more than 1 cpu core or 1GB of ram to cache your database.
If you make your systems such that you are dependent on SQL Server and cannot switch it to something else, then it's just a shame, but don't blame SQL Server for that. Besides, unless you have massive performance requirements, it should be behind an API anyway. It doesn't take much to code, and it increases modularity a lot.
[1] https://www.microsoft.com/en-au/sql-server/sql-server-2016-e...
For phone authorizations (if they are used - it may be a regional thing as most smaller online retailers here won't do it at all, banks really frown on merchants who do so because of risks and make it really expensive), generally the agent would use a similar interface as an online customer (encrypted channel, yadda yadda), and the card information would not be stored anywhere on that machine. Whether all kinds of PCI DSS security requirements would apply to these workstations is debatable, your mileage may vary, I've seen them considered out of scope - but in that case it wasn't really a call center for taking transactions but a support call center that might also handle a phone authorization in rare cases.
In any case, for a call center the biggest PCI compliance problem IMHO is handling the sensitive data in call recordings.
But they keep coming out with respins of it to otherwise keep feature parity with CB Enterprise. A 2017 LTSB based on 1703 should be out soon.
Scare me? It sounds like those awesome stripped down versions of XP that pirates removed all the cruft from back in the day.
Memories!
Not that this is necessarily the best solution, but these sound like damages to me.
Perhaps a class-action suit may come of this?
From: https://technet.microsoft.com/en-us/itpro/windows/manage/con...
> Security. Information that’s required to help keep Windows, Windows Server, and System Center secure, including data about the Connected User Experience and Telemetry component settings, the Malicious Software Removal Tool, and Windows Defender.
I have all the possible settings configured, from registry to policies and I still see random connections everywhere. But it's ok because it's not telemetry, right?
> What is NOT telemetry?
> Telemetry can sometimes be confused with functional data.
Is anyone taking legal actions against Microsoft about all of this? Does anyone care? Not everybody can switch all their machines to Linux/VMs, this whole situation makes me angry.
The more Microsoft degrades their viability for enterprise computing, the more market pressure will build (I think) for a different platform infrastructure.
If / when the market reaches that tipping point, the schadenfreude will be overwhelming.
Do you have a court case or docket you can point to?
But I'll ask if he'll give me the info. That's all public anyways right? I don't know very much about legal jazz.
I really don't have a lot of sympathy for companies that lock themselves in to a proprietary platform.
Typically business will build there own software on top of MS (or oracle, or <insert cloud platform>) tech as well, locking them in further to several years of "investment".
It's not fair blame. Many companies simply go for what works and throw money at the problem. Windows historically has excellent support from a large number of third parties.
The other problem is third-party software. I work for an insurance company. The system that they use for managing everything---policies, accounting, brokers, etc---is tied to Windows. This is a specialized program---there are only a few of them that exist, and none as sophisticated as the one this company uses. This system has been responsible for not only tying the office to Windows, but holding us back from upgrading---for the longest time we couldn't even get off of IE6 because it didn't support anything higher.
I'm able to do 99% of my work within a GNU/Linux VM. But on rare occasion, I need to use that system, and it requires Windows. Everyone else in the office---the majority of the company---requires Windows. This is a system that the company has invested many millions of dollars into.
So while we can do our best to inform others, perhaps before they make these critical business decisions, it ultimately comes down to practicality for most businesses. Yes, they may pay for it. Yes, they're taken advantage of, have issues with vendor lockin, etc, but unless you travel upstream and liberate those systems or provide suitable replacements _that the business is confident will have support for years to come_, there's not much to do.
I'm not defending the situation; it's terrible. But sympathy _should_ be had, because there's much to lament, and much room to help.
So they went with the easiest option and now they are locked in due to lack of forward planning. Their own short term planning is to blame.
With the third party software you mentioned, how long have the relied on it and have they don't absolutely anything to mitigate this reliance? My guess is that they've done nothing or worse, written a bunch of integration points on top of the software that makes it even harder to replace.
One day the company providing that software will jack up the price and you'll be forced to pay it. Again I'll have no sympathy because the company has done nothing to unlock themselves.
Every PCI zone I've seen is just servers (Windows Server and Linux). Does the client store card data on desktop machines?
Generally, you'll have a locked-down portion of your infrastructure be PCI-compliant, and that's the only place card data is stored or entered. That reduces your scope and costs.
Proprietary operating systems work against your interests. Stop using them.
Steam works great, and LibreOffice has been good enough to get the job done. I run Google Earth Pro and Sketchup in Wine, even World of Warcraft runs quite well in Wine.
I had a ton of issues with Wine until I found PlayOnLinux. Things still don't quite 'just work' -- but I've been able to use way more than I could before I found it.
KSP and WoW are my two big games, and they both work fine.
KSP and Rimworld are my two big games, at least KSP will be again when I get a replacement video card.
I haven't played Rimworld yet. Might have to go check it out.
I've found TerraTech recently but I've had about as much fun as I can have with it until they fix some more things.
True. Support has gotten significantly better. It's not perfect, and the failure cases are much worse than Windows (and somewhat worse than OS X), but it's gotten better.
> you should not buy hardware that is incompatible with the operating system you plan to use
This is where you start going off the rails.
People did buy hardware that was compatible with the operating system they do use. It is super presumptuous and weird to try this sleight-of-hand in your argument.
> LibreOffice supports the formats and works great
You are now off the rails and airborne.
Nontrivial Excel spreadsheets break in LibreOffice Calc on the regular and it's significantly slower (!) than Excel besides; anything using VBA, which is still a pretty big chunk of serious Office users especially in enterprises, is a nonstarter for obvious reasons. The UI is also, IMO, a huge step backwards from Office and now that the Ribbon "but but it's different" is far enough in the past that pretty much everybody has switched, another UI switch is probably not worth it.
> with Steam and Wine combined your potential gaming library is HUGE
Sailing through the air with the mountain approaching.
Your potential gaming library is huge--and either indie (which is fine, but limited) or largely broken. Suggesting WINE to somebody who doesn't already know what they're in for is dirty; even gold-flagged games in WINE that aren't a decade old are often broken in ways your average mortal can't fix. If you enjoy being elbow-deep in a computer, this may be fine for you. Most people aren't. Your preaching ignores this. It shouldn't.
> Proprietary operating systems work against your interests. Stop using them.
You've hit the cliffside. There are no survivors.
People will stop using them when open-source ones are good at the things they want. Right now, they're still not, and exhorting people to use an inferior good (for the things they care about) is kinda just doing people dirty.
Don't get me wrong: I would like Linux and other open-source operating systems to be better desktop OSes for normal people (and some of my own projects are intended to help facilitate that) but still, in 2017, it is a raw effing deal for the majority of people to switch to it. This should change. I know you work on stuff to make that happen, and that's awesome. But it's still not something I think can be recommended in good conscience to most folks, even around here.
It barely works for me, and I've been using it on the desktop for fifteen years and have grown accustomed to the need to cultivate tragically low expectations around the whole stack.
Make new purchases more intelligently.
>You are now off the rails and airborne. Excel is still largely unsupported and breaks nontrivial spreadsheets. The UI is also, IMO, a huge step backwards from Office and now that the Ribbon "but but it's different" is far enough in the past that pretty much everybody has switched, another UI switch is probably not worth it.
Which is why I mentioned MS Office in Wine.
>Still sailing through the air with the mountain approaching. Your potential gaming library is huge--and either indie or largely broken. Suggesting WINE to somebody who doesn't already know what they're in for is dirty; even gold-flagged games in WINE don't work particularly well a whole lot.
I suggested it to the HN crowd, who I expect to have a higher bar of troubleshooting capability.
>People will stop using them when open-source ones are good at the things they want. Right now, they're still not, and exhorting people to use an inferior good (for the things they care about) is kinda just doing people dirty.
You and people like you are the reason that it's not as good as it could be. I use Linux as my daily driver and it works extremely well. But if you continue to let it languish with a small market share because you can't be bothered to troubleshoot it for 10 minutes or maybe live without that piece of software you need so much, then it won't even go anywhere. Yours is a self defeating attitude.
If you don't have a positive argument for using your thing instead of framing its competition negatively, few people will ever use it. The Linux desktop as a whole doesn't have that positive argument. Because, for most people and including most developers, it is a strictly inferior good. Not to Windows--but to the Mac. You're stomping your feet about people not being bothered to troubleshoot--it ain't their fault that that's still a tire fire! I use a Linux desktop because I know what I'm getting into and I know enough, from the aforementioned fifteen years of dealing with its crap, to make it mostly tolerable for work (not at all for fun, which is why I still use Windows, too!). I sure wouldn't start today, not on either the handwavy "but but telemetry!" grounds nor the usefulness of it.
And I'll raise this point again:
>You and people like you are the reason that it's not as good as it could be. I use Linux as my daily driver and it works extremely well. But if you continue to let it languish with a small market share because you can't be bothered to troubleshoot it for 10 minutes or maybe live without that piece of software you need so much, then it won't even go anywhere. Yours is a self defeating attitude.
Using proprietary operating systems because Linux isn't there yet is a great way to keep Linux from getting there. It's a chicken and egg problem. What would you prefer: getting your privacy thourougly invaded by a proprietary operating system, or being there to help Linux gain market share and tip the scales? Even if it's not perfect, it's more than enough, and supporting it is the best choice.
I tried really hard to make it work. If it only took 10 minutes of troubleshooting, then it would have been fine, but it was instead hours of crawling through forums.
Ultimately, this is a theory of mind issue, since proficient users and developers can't quite seem to grasp how regular joes use the software. Or if they do grasp it, they react with contempt instead of trying to fix the issue. Without making it REALLY convenient there is simply no way it will gain more than a small market share. Whether the contempt is justified is irrelevant if the goal is to have the Year of the Linux Desktop.
The vast majority of people out there see computers (and other devices) as things that get stuff done, right now. They couldn't care less about proprietary vs open source, and the philosophy and the politics of the latter.
So there will never be a critical mass that will tip the scales, ever. You'll get the geeks going there because they care, trying to live with the inconveniences for a while, and then mostly going back to OS X (or even Windows), because they find other things to care about, and stop feeling like struggling with xorg.conf or NetworkManager or whatever is meaningfully "fighting against the system".
First and foremost, I need my systems to just WORK. When I sit down to code, the last thing I want to do is debug why it is not properly displaying on all of my monitors.
In other words, I know no current OS which doesn't suck :((( Win7 held some promise, as did OS X, and current Linuxes hold some still; but alas, we're still not in plug-and-play land after many decades of effort.
But even if you have issues with Windows, I have zero doubt you would spend more time batteling with Linux. It just doesn't have polish or UX as a primary target. It is wonderful for servers, but as a desktop it is a broken experience unless you value tinkering with it.
Where did that "monitors" issue come in, no idea - typing this on Kubuntu with 3 different displays, also no issues (except for my prankster colleagues unscrewing the video cable).
As someone above noted, I don't care about the OS. I care about the work I do on it - and I have the same Jetbrains tools, the same Firefox, the same Chrome, etc etc etc. Whether the title bar is polished, transparent and the exactly right shade of unmagenta, I don't care.
To me, and without exception, every single person I talk with about this, have less issues with Windows or OSX, than Linux. This is primarily CS majors that are required to run it to get their degree.
Yeah, I have heard that one before.
At work, I am a sysadmin/helpdesk monkey taking care of a network of ~80 users and a dozen servers, all on Windows, and let me tell you: Windows has its fair share of weird problems, inexplicable failures, stuff that "worked yesterday"...
Windows may "just work" often enough, but unlike Linux, it also "just stops working" so often, it's just not funny any more. On Linux, once one has it working, at least it keeps working.
My point is that they're simply not sufficient to tip the scales. Even if every single HN reader did what you demand they do, it would not tip the scales.
Once you realize that, this whole notion of "fighting the man" by struggling with config files and broken hardware support rather loses its edge.
This is fine. This is great. Everyone should waste their time with this.
Or not.
Since you used KDE as an example, maybe you switched too soon. A lot of people did. The recent Plasma 5 release was exactly like the KDE 4 release - it took a good 5 - 6 major releases before stability and feature parity with the predecessor were reached. But if you switched from KDE 3 to 4.5, or from 4 to 5.6, the new desktop worked fine. Were on Plasma 5.9 now and its boring. In a good way. It is stable, it works, the features are great, the looks are excellent, it gets out of my way and I can get work done on it very well.
Linux is boring. And thats a good thing. I can easily buy a system76 / Dell computer that runs Ubuntu, install whatever I want on it, and have a crisp experience without issue now, unless I go looking for trouble on the bleeding edge of hardware or software.
How about being much easier to keep up to date for the average user? A single tool updates everything and doesn't leave a million bundled copies of various low level libraries in every app that uses them. It's much easier for a normal person (or advanced user) to keep a linux system patched. Keeping your OS and applications takes a lot of effort on windows.
Another is that it comes with a lot more great tools out of the box than windows, users don't have to navigate the web trying to find software or rely on OEM crapware.
UI wise it provides a much more consistent experience and it stays out of your way a lot better (no focus stealing shit everywhere).
Funny, because this is exactly how I would describe windows 10.
Anyway!
> If you don't have a positive argument for using your thing instead of framing its competition negatively, few people will ever use it.
There are plenty of positive arguments. They have been repeated over and over so I won't do it again.
> It's not a good experience. It's bad.
> Because, for most people and including most developers, it is a strictly inferior good.
Citations needed. Because this seems purely your subjective opinion. I'm sure many people will share it with you, but that definitely isn't my experience and many will share my opinion too.
For very small values of "works". I've found that even high school projects turn out to be a bit too much for libre office.
Regarding wine, no need for that now that Office online and Google docs exists.
This is evidence you've never used Google Docs for real work and have never encountered its absolutely dismal docx rendering. I get stuff in Gmail regularly I then have to open in LibreOffice to bloody read.
If I send an ODF to my lawyer, investor or accountant they're going to panic.
Filing you into the "change resistant and lying to themselves" category of Windows user, too.
Only 2013 or older which you can't easily buy anymore. 2016 / 365 doesn't work at all: https://appdb.winehq.org/objectManager.php?sClass=version&iI...
Maybe that's why Microsoft is pushing hard to move everybody to an online office subscription?
Excel teach bad habit about having list every where not maintained.
My theory is that Excel's userbase includes the guys who actually sign the cheques, so MS has to get it right.
Due to lack of other tools, people learned to do absolutely crazy things with the Office - from saving screenshots in the Word files to drawing in PowerPoint.
But on the other hand LO has Base, which is pretty good.
This is now a bad excuse, not a reason.
It boils down to "it works for me, and if it doesn't work for you because of X, Y and Z, then you should just stop doing that".
You can judge for yourself just how persuasive this argument really is by looking at desktop Linux market share over the past 20 years.
I say this as an avid Windows 10 user. IMHO there's still a usability gap (which is why I'm on Windows), but it's narrowing. GP's argument has a lot more merit now than it did 15 years ago.
Developers don't develop for it since the user base isn't large enough, and people don't switch to it because app support is severely lacking. How good the raw OS is doesn't matter that much when the apps aren't up to par.
Your Wine comment illustrates my point - while Wine is an awesome project - even apps running perfectly through it feel like they're running on Windows 2000. That's fine if you just care about the functionality of the app, but not if you care about the user experience.
I agree that things have improved since then... but with hardware, for example, it's very much a moving target. Your chances of running Linux on a random new PC bought off the shelf, or assembled from off the shelf components, and having all the hardware fully supported without mucking around with firmware, kernels, configs etc, are still low enough that hardware shopping needs to be done specifically with Linux hardware compatibility in mind, checking lists for what works on what distros etc. And I'm not talking about exotic stuff here, but basic things like WiFi.
The problem is steadily getting better in some areas, but there are still thousands of specialist applications in service today that only run on Windows. If you are lucky, there may also be Mac versions.
The reality is that it's often not feasible to only run FOSS, and nothing but FOSS.
Sponsoring getting a vertical market app working 100% in Wine is unlikely to be cheaper than cleaning up after WannaCry's competently-written successors.
I meant, of course, unlikely to be more expensive. Gah!
Stop using the operating system where everything works: apps, games, hardware, good office package, etc.; rather use an operating system on which debugging to a layman translates to a plane of hell itself, where your hardware may or may not work, and half your game library certainly won't.
I would happily switch to Linux permanently the day the flagship office package UI doesn't resemble Office 97 (the ribbon UI is absolutely fantastic in MS Office), I can get all of my games to work, and I don't need to recompile a kernel to get something as basic as a graphics driver running.
It's being worked on: http://www.omgubuntu.co.uk/2017/02/how-to-enable-libreoffice...
> I can get all of my games to work
Many games don't port to Linux until all users have switched. It's a chicken-egg problem :(
> I don't need to recompile a kernel to get something as basic as a graphics driver running.
You already don't need to do that. Intel and AMD's open-source drivers are included in the kernel and nVidia's driver can be installed without recompiling the kernel.
Also many games require nVidia drivers or AMD's open source driver (e.g. Life is strange). I'm using a 144 Hz monitor and therefore need touse AMDGPU Pro (AMDGPU has a bug with >120 Hz: https://bugs.freedesktop.org/show_bug.cgi?id=93826 ).
But you're right: It's getting better :) For example Rocket League and Dota 2 work great.
He made this error countless times, rendering the entire experiment a failure.
Oops.
Yeah, it's his fault that he didn't properly navigate the Kafkaesque nightmare that Microsoft has created in order to thwart people from disabling all this spyware.
Sensible defaults matter.
What an unnecessary insult. If you can read the incredibly confusing Microsoft documentation better than him (or any of us), then please post the definitive step-by-step instructions for turning off all telemetry and privacy-invasive connections in Windows 10.
Then we'll see if your insult was warranted.
https://social.technet.microsoft.com/wiki/contents/articles/...
It shows how there's an Explain box that describes what the various settings do.
[ * ] How do you know that it even works? Plenty of times I've followed instructions from Microsoft's TechNet that didn't solve the problem it purported to solve.
And by the way, that's a helluva lot of steps to disable IPv6. Multiply that by a hundred other things you need to do, and probably a hundred you don't know about, and changes that get undone by updates, and you have a nightmare trying to create a privacy-respecting Windows 10.
https://docs.microsoft.com/en-us/windows/configuration/confi...
No matter your opinion about the subject at least we are talking about it now and from what I can tell he's going to make a more reproducible test with a script so we can all tear it to pieces.
If not, I hope someone else do it. Even better if it's somebody with the proper credentials some of you all are requiring (from a freaking tweet).
It should read "unconfigured" -- not "disabled"
Some of the GPO settings make me feel like I'm reading a contract written by a lawyer out to get me.
I don't have any concrete examples, but I swear I've stumbled across settings like this <not a real setting, just an example, probably exaggerated>:
Setting - Disable Windows Error Reports.
Description: Disable the submission of error reports
Options: Unconfigured - Use client settings.
Disable - Send only minimal information in error reports.
No - Do not send any error reports.
Yes - automatically send full error reports.
So when you Enable the "disable windows security reports" option, it Enables sending of the security reports, and when you "Disable" the option, it still sends reports.
Many of them are extremely confusingly worded like this. It takes several reads to figure out which option actually disables it.
edit: fix formatting
I haven't published results anywhere and many people, including in the comments here, have corroborated what I saw.
The results are the results. I am re-verifying before I publish anything on this and to provide a script so that others can reproduce the results. That certainly does not make it wildly implausible.
I don't know if this will be of any help but https://news.ycombinator.com/item?id=13727712
But the major result shown was your incompetence in setting GPOs.
You should be retracting your 'findings' until you learn how to use Windows properly, not doubling down on your claims. What an embarrassment.
But to show how easy of a mistake this is to make, here is what Microsoft's documentation from https://docs.microsoft.com/en-us/windows/configuration/manag... says:
Enable the Group Policy: Computer Configuration > Administrative Templates > Network > TCPIP Settings > IPv6 Transition Technologies > Set Teredo State and set it to Disabled State.
Reading that, it seems as though you should disable the policy but in fact you should first Enable the policy, then go into the policy settings and Disable the setting there. And even with that mistake, I had it manually disabled in both HKCU and HKLM so if disabled means it uses the local host settings then it should use that.
Nevertheless, there are some serious concerns here:
1. Why is it even connecting to facebook, msn ad services, google analytics, etc when nothing is running?
2 Why is it doing this by default on an Enterprise operating system?
4. Why is this the default setting that requires dozens of group policy settings (and knowledge of group policy) to disable?
5. And why is there no option to opt out completely?
I find the author's point about people using third-party programs to stop Windows spying, and potentially impairing their security, very telling. He's absolutely correct.
I use programs called Shutup10 and WinAero Tweaker to stop the telemetry myself, and both of these programs have settings that would potentially impair your security, primarily by stopping Windows Updates entirely.
So the real question is this-- is this debacle the consumer's fault or Microsoft's? I know which side I'm on.
If this is important to you, demand more open and peer-reviewed source code, and demand that things run behind carefully-controlled walls like sandboxes and limited host files. Don’t just run your organization by trusting one software vendor.
if gaming is the problem you can run Windows in a VM at 97% native speed with GFX passthrough, been doing this for almost 2 years now without any problems
the vfio subreddit has a lot of info: https://www.reddit.com/r/VFIO/
MS are then free to spy on me playing starcraft as much as they want
If you want to control your software, run software that you control.
I run Linux as a dual-boot and I run it in a VM from Windows/mac.
It's frustrating because Apple has fallen far behind on hardware I want. I need 3840x2160, a touchscreen, a card reader, both USB 3.0 and 3.1, 16GB of RAM, and full-size HDMI. They've jumped too far ahead into their 'revolutionary' view of the future. I can find better hardware for much cheaper. Dell XPS 13, HP Envy 2-in-1, Toshiba Radius 12... the build quality on the Toshiba is pretty bad, but it out-performs a would-be Macbook. I'm not spending 2 -fucking- thousand dollars for sub-standard hardware simply because I like the OS better than Windows. Apple spies on its users, but at least when you turn it off it's actually off.
I can't continue using Windows because it's clearly hostile to users, and I can't go with Apple because the hardware sucks.
Linux requires so much involvement to keep it running "well".
Just argh.
I might be missing the joke here, is this a jab at Mark Shuttleworth?
Running Debian Testing with Gnome has been a joy. In my opinion the user experience is easier and better than that of Windows 7 or 8. Office staff could quite easily be trained to click on the Start key or the drop-down Activities menu or move the mouse to the top-left corner to start a program. Office software is quite good. Program-switching keyboard combinations are excellent. The Evolution mail client is very good. Browser software is the same as on Windows or a Mac. Problems with bad fonts, poorly designed UI, lacking drivers etc. are things of the past (with the notable exception of very new hardware).
This may not be possible due to the necessity of using specific proprietary programs that run only on Windows, for example. On the other hand, the level of tech support required is perhaps not significantly greater than what is necessary for installing and maintaining Windows on a bunch of machines.
On the plus side, everything is very fast, tasks like backing up files or systems are simple with GUI or terminal interface, and if you want to learn iptables and set up that router/firewall you can do that too. Everything you learn is an investment instead of an annoyance. Nobody is going through your company or personal files to serve you ads.
There's no reason any more, besides defaults and inertia, why Linux should have 2% desktop market share instead of 10% of somewhat technical people or even 20 or 30% of the general population.
[0] https://twitter.com/m8urnett/status/866353982217699328
Edited to omit needless words
"Also note this is a system with minimal software install, all default windows store apps removed, and nothing running on it."
Edited to reword the second sentence.
Also note that the only third-party software running at the time was wireshark, DNSQuerySniffer, and Glasswire.
It's proven time and time again that if the entire org isn't behind something, the good deeds of some get vastly overshadowed by these kind of games.
This way each Windows computer does not have to connect to Microsoft to download, e.g., the Windows 10 "upgrade". It seems like this could also be used to evade attempts by users to block such downloads by blocking Microsoft IP addresses.
Windows 10 could propagate itself through a network of Windows computers, like a ...
Seriously, how does this work in pratice?
Windows 10 does peer-to-peer file sharing automatically without requiring any user interaction?
You can turn it off, or disable pulling from internet peers, but given the OP, who knows if MS actually respects that setting? I guess we have to roll the dice now.
https://privacy.microsoft.com/en-us/windows-10-windows-updat...
https://docs.microsoft.com/en-us/windows/deployment/update/w...
It allowed us to remove hundreds of local depot servers unless there was an SLA on reimaging.
What's the problem? I guess it still receives the hashes signed from Microsoft.
And embedded stuff aside, a system with a firewall whitelist on a separate box is unusable for daily use...
Comes in several formats: hosts, firewall, openwrt, dnscrypt. You can choose telemetry, update and extra. Has ip rules aswell as DNS rules.
I am actually thinking of writing a modular openwrt luci plugin to make it easy to add to your router as it is only effective on router level as other have mentioned here.
It's updated regularly, tested and one of the best lists out there, a clean copy and paste works into firewall rules as and there is nothing to install.
Happy user. MS probably really dislikes this because they are adding new domains serving the same function almost every update.
EDIT: Just realized it was already mentioned by mcbridematt, and with more detail too! I’ll just leave this comment here for the Little Snitch link.
――――――
Moreover, for some years now we have considered our Windows operating systems as 'hostile' privacy-busting code on our PCs and if there was some easy way we could get rid of them then we would do so in an instant (please don't come at me with the Linux bumph/argument because in many instances it's not a possible option).
This really is tiresome, why can't we just buy Windows/Microsoft busting routers that have a big red button on them that says: "Stop all Phone-home to Microsoft" or alternatively ones that have easily updatable blocking lists/text files that we can easily administer/download to them?
This ought to be an easy no-brainer but it isn't! Why is it that router manufacturers, etc. aren't falling all over themselves to provide such devices? I'm amazed that they're not, one would think there'd be dozens of available by now; are manufactures that timid and afraid of Microsoft that they're not game to make them?
Furthermore, it is not only a Microsoft Windows O/S problem, as these days just about all software talks home without seeking the user's permission to do so beforehand, and none of them tell you exactly what information is being transmitting home. It seems to me that we users will never solve this "talk home" problem until we have easy to use gateways that are external to our PCs, phones etc. that automatically block all "phone-home" addresses.
BTW, anyone thinking of developing such a device needs to keep in mind that for years Microsoft has hard-coded within Windows certain IP address that bypass the hosts file irrespective of how it is set so that it is impossible to block Windows completely from talking home. Thus, there is no other option other than to block these addresses by means that are external to the PC/device!
A final point: Microsoft could claim that as it has provided the upgrade to Windows 10 free and that entitles it to sap the private life info out of its users. I would counter that by saying that if alternatively I actually buy/pay for the operating system then I'm entitled to have complete control over it—and that means no talkback to Microsoft by the OS.
Of course, none of this would be a problem now if the Microsoft monopoly had been busted years ago (i.e. if our fearful democracies had been game enough to use already existing law to thwart the monopoly early on).
You didn't buy/pay for the operating system. You bought the rights to use the operating system under the terms Microsoft stated.
Then, some distros/desktop environments are even friendlier than Windows itself. elementary OS for instance, is very minimalistic and simple.
So I have to disagree with you.
My free time is worth a lot now ;)
I mean you trust your entire digital life to this OS yet the idea of analytics being sent back to the people who made the OS terrifies you? They also seem to freak out and declare certain versions near unusable when I've recently started using Win 10 after not using Windows since Win 2K and honestly it's 90% the same thing to me.
Also interested as to how many people freaking out over telemetry use Google software.
I know companies that will pre install McAfee in the brand new MacBooks they give out to employees! It's insane. Microsoft should just say, if you want to use our OS, stop fucking with it.
I guess he's only an IT security analyst so perhaps isn't up to speed.