WEBVTT 00:00.360 --> 00:06.210 You can configure the privacy settings manually in Windows 10 but this requires time and knowledge of 00:06.210 --> 00:07.220 all the settings. 00:07.320 --> 00:11.330 Fortunately there are a number of automated tools to choose from to help. 00:11.580 --> 00:15.990 You still have to look at disabling the privacy features as a moving target. 00:15.990 --> 00:21.990 Microsoft will make up days and you will have to keep on top of any changes that need to be made to 00:21.990 --> 00:27.840 protect your privacy which is why Windows 10 isn't the right choice if privacy is paramount to you. 00:27.970 --> 00:33.180 But I think if you just want to minimize your tracking you could get away with Windows 10 as long as 00:33.180 --> 00:36.890 you stay on top of what needs to be blocked with it too. 00:36.900 --> 00:42.600 The hope is this software will keep up to date with any changes made by Microsoft and the latest information 00:42.600 --> 00:44.300 in protecting privacy. 00:44.310 --> 00:50.190 So these are the current tools for automatically fixing the privacy issues in Windows 10. 00:50.190 --> 00:52.690 First you have destroy Windows 10 spine. 00:52.730 --> 00:55.210 This only affects host file changes. 00:55.260 --> 01:02.520 So that's no good at all explain why later than this when cold disable Windows 10 tracking that's written 01:02.520 --> 01:05.070 in Python is open source. 01:05.100 --> 01:06.390 That's very good. 01:06.400 --> 01:12.420 There's do not spy 10 which is closed source that does have explanations as to all the fix that it's 01:12.420 --> 01:14.740 making and you can do backups. 01:14.790 --> 01:20.830 There's Windows 10 privacy and shit which is a batch files that's open source. 01:20.850 --> 01:24.940 There's Windows 10 privacy fix which is open source. 01:25.230 --> 01:31.460 There's 10 privacy top10 that has backup functionality. 01:32.000 --> 01:39.080 Spy bar anti-B can for Windows 10 and that's produced by a known anti-spyware company so you could say 01:39.080 --> 01:42.380 there is some trust there built with those guys. 01:42.470 --> 01:51.330 There is a shampoo anti-spy a Windows 10 as back of functionality and there's windows privacy tweaker. 01:51.370 --> 01:56.310 Those are the ones I'm aware of many of these are made by pretty random developers. 01:56.310 --> 01:58.810 You don't really have much knowledge or background on them. 01:58.960 --> 02:00.730 So you have to think about trust. 02:00.820 --> 02:06.880 Can you trust these people to have developed this software with your security and privacy in mind if 02:06.880 --> 02:12.120 they are opensource and you understand the language they are written you can verify the software. 02:12.160 --> 02:19.030 This is why it's best to go with open source as a tool for this because these are from trusted sources. 02:19.030 --> 02:21.300 You have no idea who has written some of these. 02:21.340 --> 02:26.470 And you don't know what extra bits of crap they've put into them which could be counter to your security 02:26.470 --> 02:33.040 or privacy which is why I go with an open source auction a couple of points about how these tools work. 02:33.040 --> 02:35.800 They do things like disable services. 02:35.890 --> 02:43.690 They affect app access disable telemetry remove apps and firewall rules and the host files and other 02:43.690 --> 02:48.040 things the host file is a plain text file named hosts. 02:48.040 --> 02:54.940 It stops the operating system making DNS requests to resolve a web address or domain name into an IP 02:54.940 --> 02:55.630 address. 02:55.630 --> 03:01.770 Now an example of that might be you put Google into the host file and a corresponding IP address. 03:01.930 --> 03:07.570 Then whenever you go to Google it doesn't need to do a DNS query it just looks in the host file first. 03:07.570 --> 03:15.250 Now what these tools are doing is they're using these hoes file to put in false IP addresses in correspondence 03:15.310 --> 03:21.280 to the phone home domain names to stop them calling back home to Microsoft. 03:21.280 --> 03:26.860 So for example they might be to be a Microsoft dot com and they put in a corresponding IP address of 03:26.880 --> 03:29.590 0 0 0 0 0. 03:29.780 --> 03:36.190 The host file is no longer the all powerful thing it used to be in Windows 10 Microsoft is hard coded 03:36.190 --> 03:42.010 IP addresses into the systems dynamically linked libraries effectively making domains and IP addresses 03:42.130 --> 03:46.200 on block cable by the operating system so HOST file doesn't work. 03:46.240 --> 03:50.020 But not everything is hardcoded like this though. 03:50.170 --> 03:55.120 So some of the phone homes that Windows 10 does too can be blocked in the host file. 03:55.210 --> 03:59.210 The House will provide some benefit but it won't block everything. 03:59.230 --> 04:04.900 The other method that some of these tools use is to employ software firewall rules like the Windows 04:04.900 --> 04:11.200 firewall to block the phone homes again because the file sits on top of the operating system there is 04:11.200 --> 04:16.160 no guarantee that they will block all the IP addresses and for all time. 04:16.180 --> 04:21.670 Plus if you're using the Windows Firewall which is a Microsoft product that isn't a good choice to block 04:21.700 --> 04:25.960 Microsoft IP addresses it would require testing and monitoring. 04:26.020 --> 04:33.460 The most effective way to block a phone homes is to block the addresses off the machine at your gateway 04:33.460 --> 04:38.740 device to the Internet so your router your hardware firewall etc.. 04:38.830 --> 04:41.690 And we'll talk more about that later and how you might do that.