Feeds

Windows Update keeps tabs on all system software

Spy on the wire

  • alert
  • submit to reddit

5 things you didn’t know about cloud backup

Evidence obtained by German hardware site tecChannel suggests a list of software installed on an XP machine is sent to Microsoft when users run Windows Update.

When patches are downloaded, a few kilobytes of data are sent in the opposite direction over a secure SSL channel.

Because the data is encrypted a simple packet sniffer can't be used to see what this data contains.

However tecChannel's tecDUMP utility takes advantage of an undocumented WinInet API, enabling an examination of the data before it becomes encrypted.

According to tecChannel, the information sent to Microsoft includes details of all the software installed in a machine, not only Microsoft applications.

The latest version of Windows Update Privacy Statement (which dates from last October) states: "Windows Update must collect a certain amount of configuration information from your computer".

This configuration information includes OS version number, IE version number and "version numbers of other software for which Windows Update provides updates" along with plug and play ID numbers and regional settings.

But there's no mention of collecting data on software from other vendors running on a machine. And this software can't be updated using Windows Update. So why is Microsoft collecting this data?

One for the conspiracy theorists ... ®

Gartner critical capabilities for enterprise endpoint backup

More from The Register

next story
Why has the web gone to hell? Market chaos and HUMAN NATURE
Tim Berners-Lee isn't happy, but we should be
Apple promises to lift Curse of the Drained iPhone 5 Battery
Have you tried turning it off and...? Never mind, here's a replacement
Microsoft boots 1,500 dodgy apps from the Windows Store
DEVELOPERS! DEVELOPERS! DEVELOPERS! Naughty, misleading developers!
Eat up Martha! Microsoft slings handwriting recog into OneNote on Android
Freehand input on non-Windows kit for the first time
Linux turns 23 and Linus Torvalds celebrates as only he can
No, not with swearing, but by controlling the release cycle
Scratched PC-dispatch patch patched, hatched in batch rematch
Windows security update fixed after triggering blue screens (and screams) of death
This is how I set about making a fortune with my own startup
Would you leave your well-paid job to chase your dream?
prev story

Whitepapers

Best practices for enterprise data
Discussing how technology providers have innovated in order to solve new challenges, creating a new framework for enterprise data.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Advanced data protection for your virtualized environments
Find a natural fit for optimizing protection for the often resource-constrained data protection process found in virtual environments.
How modern custom applications can spur business growth
Learn how to create, deploy and manage custom applications without consuming or expanding the need for scarce, expensive IT resources.
High Performance for All
While HPC is not new, it has traditionally been seen as a specialist area – is it now geared up to meet more mainstream requirements?