AdGuard roadmap - Block windows telemtry

Itguy

New Member
I feel it is CRUCIAL for an adblocker to consider blocking Windows Telemetry for privacy reasons.

Also, I can help with this development aspect if needed. We spent 3 weeks sniffing Windows 10 Traffic to develop what I feel is the most comprehensive list of domans/ips to block. We also tested it on nearly a dozen machines to ensure it doesn't break any important aspect of Windows 10. We have a SIEM watching traffic, and have added 3 new telemetry domains Microsoft added over the last few weeks to try and circumvent.
 

avatar

Administrator
Staff member
Administrator
The issue with telemetry blocking is that it often messes with Windows own update features.

That's why we still have not implemented it.
 

Gass

Member
I feel it is CRUCIAL for an adblocker to consider blocking Windows Telemetry for privacy reasons.
Also, I can help with this development aspect if needed. We spent 3 weeks sniffing Windows 10 Traffic to develop what I feel is the most comprehensive list of domans/ips to block. We also tested it on nearly a dozen machines to ensure it doesn't break any important aspect of Windows 10. We have a SIEM watching traffic, and have added 3 new telemetry domains Microsoft added over the last few weeks to try and circumvent.
The issue with telemetry blocking is that it often messes with Windows own update features. That's why we still have not implemented it.
We spent 3 weeks sniffing Windows 10 Traffic to develop what I feel is the most comprehensive list of domains/ip's to block.
I was reading sometime back trying to understand this realm of MS Windows spying on their OS user, they've always had some built in means to I guess but moved in to a new frontier with it now. Google discovered surveillance capitalism, Microsoft has been late to this game, but it has now waded in.
www.theguardian.com/technology/2016/may/02/google-microsoft-pact-antitrust-surveillance-capitalism
www.theguardian.com/commentisfree/2016/may/01/profits-perils-drilling-data-oil-surveillance-online-information

This may help either one of you and other members if you'd care to tackle all the information contained in it.
PS sorry I'm over a month late to the conversation... I do hope that Avatar might figure out in this (add here) to all of this in some tactics to use for Adguard's Stealth Mode or with an Adguard Hybrid Browser ideal that Adguard could move in to. Then at the least stimulate many ideals in areas I can't even conceive his knowledge may lay and ability to link things together. Itguy use any of this that's helpful to you also, which I'm in hopes there is something. To view some information you may have to join a certain site which will allow you to ask questions too.

Gass :D

http://www.getblackbird.net and to http://www.getblackbird.net/documentation/
Blackbird's update (v0.9.95- Latest) Jul26,2016 - This doesn't yet handle the Win 10 Anniversary/Redstone - has an Alpha build in the works because as they note:
Blackbirds Dev. has commented to these issues about Redstone-
""Unfortunately Cortana's been integrated deeper in the OS with Redstone. It's one of the things we wish to solve before releasing the new version.
Defender's a bitc_ to remove too but it can be completely disabled from collecting and sending info back to MS quite easily.
With Redstone they made a lot of changes, registry, services and system apps-wise, with even less documentation than before.""
Blackbird Does more than this topic here but, in tune and of interest to this topic, it does - Disables system-wide Windows/Office Telemetry on any Windows version, - Disables all Diagnostic-tracking / CEIP / Telemetry / Compatibility services, tasks and agents, - Disables all AutoLoggers, - Prevents device meta-data collection, - Blocks 150+ different tracking/telemetry/ad servers (supports IPv6/IPv4, Wifi/Eth, custom lists) and lots more to it's credit from Vista up and all levels of additions.
112.2o7.net
a-0001.a-msedge.net
a-0002.a-msedge.net
a-0003.a-msedge.net
a-0004.a-msedge.net
a-0005.a-msedge.net
a-0006.a-msedge.net
a-0007.a-msedge.net
a-0008.a-msedge.net
a-0009.a-msedge.net
a.ads1.msads.net
a.ads1.msn.com
a.ads2.msads.net
a.ads2.msn.com
ac3.msn.com
ad.doubleclick.net
adclick.g.doubleclick.net
admeld.com
adnxs.com
ads.ak.facebook.com.edgesuite.net
ads.eu.msn.com
ads.facebook.com
ads.google.com
ads.msn.com
ads.youtube.com
ads1.msads.net
ads1.msn.com
adtrack.king.com
afs.googlesyndication.com
analytics.google.com
analytics.live.com
analytics.yahoo.com
apps.skype.com
arc1.msn.com
auto.search.msn.com
az361816.vo.msecnd.net
az512334.vo.msecnd.net
c.bing.com
c.urs.microsoft.com
cache.datamart.windows.com
cdn.fastclick.net
choice.microsoft.com
choice.microsoft.com.nsatc.net
cm.g.doubleclick.net
compatexchange.cloudapp.net
connect.facebook.com
corp.sts.microsoft.com
corpext.msitadfs.glbdns2.microsoft.com
creative.ak.facebook.com
creative.ak.fbcdn.net
cs1.wpc.v0cdn.net
cx.atdmt.com
df.telemetry.microsoft.com
diagnostics.support.microsoft.com
external-veil-1.xx.fbcdn.net
fbcdn-creative-a.akamaihd.net
fbexternal-a.akamaihd.net
fe2.update.microsoft.com.akadns.net
fe3.delivery.dsp.mp.microsoft.com.nsatc.net
feedback.microsoft-hohm.com
feedback.search.microsoft.com
feedback.windows.com
files.adform.net
g.msn.com
gg.google.com
global.msads.net
google-analytics.com
googleads.g.doubleclick.net
googleads2.g.doubleclick.net
googleadservices.com
googlesyndication.com
i.kissmetrics.com
i1.services.social.microsoft.com
i1.services.social.microsoft.com.nsatc.net
iecvlist.microsoft.com
licensing.md.mp.microsoft.com
live.rads.msn.com
livetileedge.dsx.mp.microsoft.com
m.adnxs.com
media.fastclick.net
msedge.net
msftncsi.com
onedrive.live.com
oca.telemetry.microsoft.com
oca.telemetry.microsoft.com.nsatc.net
oft.msn.com
otf.msn.com
pagead.l.google.com
pagead2.googlesyndication.com
partner.googleadservices.com
partnerad.l.google.com
pixel.facebook.com
pnrpv2.ipv6.microsoft.com
pnrpv21.ipv6.microsoft.com
popup.msn.com
pre.footprintpredict.com
preview.msn.com
pricelist.skype.com
pubads.g.doubleclick.net
rad.msn.com
redir.metaservices.microsoft.com
reports.wes.df.telemetry.microsoft.com
rmads.msn.com
s.youtube.com
s0.2mdn.net
s1.2mdn.net
scontent-veil-1.xx.fbcdn.net
secure-ds.serving-sys.com
secure.adnxs.com
services.wes.df.telemetry.microsoft.com
settings-sandbox.data.microsoft.com
settings-ssl.xboxlive.com
sitefinder-idn.verisign.com
sitefinder.verisign.com
sls.update.microsoft.com.akadns.net
spynet2.microsoft.com
spynetalt.microsoft.com
sqm.df.telemetry.microsoft.com
sqm.telemetry.microsoft.com
sqm.telemetry.microsoft.com.nsatc.net
ssl.google-analytics.com
ssl-youtube.2cnt.net
ssw.live.com
static.2mdn.net
static.doubleclick.net
static.xx.fbcdn.net
statsfe1.ws.microsoft.com
statsfe2.update.microsoft.com.akadns.net
statsfe2.ws.microsoft.com
storeedgefd.dsx.mp.microsoft.com
survey.watson.microsoft.com
sync.liverail.com
telecommand.telemetry.microsoft.com
telecommand.telemetry.microsoft.com.nsatc.net
telemetry.appex.bing.net
telemetry.microsoft.com
telemetry.urs.microsoft.com
tpc.googlesyndication.com
tpcnc.googlesyndication.com
urs.microsoft.com
video-stats.video.google.com
vortex-sandbox.data.microsoft.com
vortex-win.data.microsoft.com
vortex.data.microsoft.com
watson.live.com
watson.microsoft.com
watson.ppe.telemetry.microsoft.com
watson.telemetry.microsoft.com
watson.telemetry.microsoft.com.nsatc.net
wer.microsoft.com
wes.df.telemetry.microsoft.com
wscont-scdn.windows.akadns.net
wscont.apps.microsoft.com
wscont.apps.microsoft.com.edgekey.net
www-google-analytics.l.google.com
www.bing.com
www.googleadservices.com
www.google-analytics.com
www.googletagservices.com
www.youtube-nocookie.com
youtube.2cnt.net
yt3.ggpht.com
a.rad.msn.com
ads.msn.com
adnexus.net
aidps.atdmt.com
aka-cdn-ns.adtech.de
b.ads1.msn.com
b.ads2.msads.net
b.rad.msn.com
bs.serving-sys.com
c.atdmt.com
c.msn.com
cdn.atdmt.com
cds26.ams9.msecn.net
cdnjs.cloudflare.com.cdn.cloudflare.net
cdp1.public-trust.com
corp.sts.microsoft.com
db3aqu.atdmt.com
e2835.dspb.akamaiedge.net
e8218.ce.akamaiedge.net
e7341.g.akamaiedge.net
e7502.ce.akamaiedge.net
ec.atdmt.com
fe2.ws.microsoft.com.nsatc.net
flex.msn.com
h1.msn.com
hostedocsp.globalsign.com
li581-132.members.linode.com
lb1.www.ms.akadns.net
m.hotmail.com
msnbot-65-55-108-23.search.msn.com
msntest.serving-sys.com
rad.live.com
s.gateway.messenger.live.com
schemas.microsoft.akadns.net
schemas.microsoft.akadns.net
secure.flashtalking.com
settings-win.data.microsoft.com
sls.update.microsoft.com.akadns.net
sO.2mdn.net
telemetry.appex.bing.net:443
ui.skype.com
view.atdmt.com
vortex-bn2.metron.live.com.nsatc.net
vortex-cy2.metron.live.com.nsatc.net
www.go.microsoft.akadns.net
www.msftncsi.com
65.39.117.230
134.170.30.202
137.116.81.24
Blackbird exe is readable, just open Temp folder while script is running and the whole thing is literally a batch file that's extracted from the EXE.

There a fella named NoelC (-Noel) over at http://www.msfn.org/board/topic/174456-okay-lets-discuss-how-to-get-rid-of-these-processes/?page=1 and at http://win10epicfail.proboards.com/thread/100/interested-participating-tweaker-development-test

That has some pretty good documented findings in his own right in do along these same lines as Blackbird and more to Win 10 and has a script as well to keep his settings after MS updates revert any changes made to the OS.
Windows 10 Lite (Better Privacy) - Don't be mislead by the title label! it's just a "trick" to tweak up Windows 10 install and privacy tweaking things. https://sourceforge.net/projects/windows-10-lite/

NOTE@I copied lists and other bits and pieces that's on the web into this maybe useful resource, I'm nothing but a gatherer and assembler here.
 
Last edited:
Top