this post was submitted on 10 Nov 2023
30 points (96.9% liked)

Privacy

31683 readers
239 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

I am trying to block all connections to microsoft ip addresses. I only occasionaly boot windows and don't want it phoning home. I tried disabling the net interfaces in device manager but windows just re-enables them and send god only knows what back to their servers. I don't like relying on disconnecting the ethernet cable each time I boot windows because I forget to.

top 8 comments
sorted by: hot top controversial new old
[–] [email protected] 4 points 11 months ago* (last edited 11 months ago)

Windows 10 Enterprise + https://www.w10privacy.de/english-home/ + https://learn.microsoft.com/en-us/windows/privacy/manage-windows-21h2-endpoints to disable all spyware.

Don't that there are some services that require a bit of work, for instance Windows gets time from MS servers, you can change that. There are other calls home for things such as updates, SSL certificate revocations and whatnot.

[–] [email protected] 4 points 11 months ago (2 children)

I found this list on their site. I didn't verify if the ips match though.

Another way to solve this problem might be to block your MAC address at a router level (then unblock while booting).

[–] [email protected] 3 points 11 months ago

Another way to solve this problem might be to block your MAC address at a router level (then unblock while booting).

Windows will eventually retry those calls once it has internet.

[–] [email protected] 2 points 11 months ago

Thanks for the list. I will try the mac address block on the router idea for windows and set a non default mac address when linux boots.

[–] [email protected] 2 points 11 months ago (1 children)

Another option would be to run windows in a VM

[–] [email protected] 1 points 11 months ago

I do that as well. I just use dual boot windows for samsung disk tools and logitech software. Couldn't get either to work in a vm.

[–] [email protected] 2 points 11 months ago (1 children)

Ok, so i guess you're dual boot. So in Windows, Device manager, find your network device and disable it there. It shouldnt ever reenable itself on its own.

Microsoft IPs blocklists exist, though I havent used them. I imagine they update frequently. Adguard home or pihole have good uses but itll need an always on device to run it.

A simpler idea which should be a 20 minute turn around to do, amd will cost you nothing would be either:

  • Set a static ip on the windows computer, blank out the dns so it cant reach the internet.
  • Set the MAC address on the windows ethernet adapter to something custom, or a static ip. Make sure the static IP is out of DHCP scope or at least not the same as your other OS or devices. Then on your router, block internet access to that Device MAC or IP.
[–] [email protected] 1 points 11 months ago

Yes, dual boot. It is a Dell Optiplex. Windows re-enables devices disabled in device manager.