search

crazy-max / WindowsSpyBlocker

Block spying and tracking on Windows
https://crazymax.dev/WindowsSpyBlocker/
MIT License
4.67k stars 363 forks source link

Add missing spy domains #465

Open ghost opened 2 years ago

ghost commented 2 years ago

The following spy domains are already blocked by hosts but not by DNSCrypt or proxifier:

cy2.vortex.data.microsoft.com.akadns.net
db5.vortex.data.microsoft.com.akadns.net
geo.vortex.data.microsoft.com.akadns.net
sqm.telemetry.microsoft.com.nsatc.net
v10-win.vortex.data.microsoft.com.akadns.net

Please add them everywhere.

crazy-max commented 2 years ago

already there through wildcards.

ghost commented 2 years ago

Please read domains from the right to the left. There are no wildcard entries for *.akadns.net or *.nsatc.net.

crazy-max commented 2 years ago

I prefer to use passive detection from the VMs I use to make sure I don't include false positives. I still keep your list aside. Thanks.

ghost commented 2 years ago

The entries are from your hosts file, not anything new. I only suggest to make all your different data files (hosts, DNSCrypt, proxifier, etc.) match the same domains.

crazy-max commented 2 years ago

Oh indeed wildcard is missing, will fix that, thanks for your feedback.

thatsprettygood commented 2 years ago

Will a hotfix for this be released soon?

ghost commented 2 years ago

@thatsprettygood This only affects DNSCrypt and proxifier spy rules, so it's not that urgent.

einfacharthur commented 2 years ago

what about this adresses?

au-v10.events.data.microsoft.com au-v20.events.data.microsoft.com au.vortex-win.data.microsoft.com de-v20.events.data.microsoft.com de.vortex-win.data.microsoft.com eu-v10.events.data.microsoft.com eu-v20.events.data.microsoft.com eu.vortex-win.data.microsoft.com events-sandbox.data.microsoft.com events.data.microsoft.com jp-v10.events.data.microsoft.com jp-v20.events.data.microsoft.com settings-win.data.microsoft.com telecommand.telemetry.microsoft.com uk-v20.events.data.microsoft.com uk.vortex-win.data.microsoft.com us-v10.events.data.microsoft.com us-v20.events.data.microsoft.com us.vortex-win.data.microsoft.com us4-v20.events.data.microsoft.com us5-v20.events.data.microsoft.com v10.events.data.microsoft.com v10.vortex-win.data.microsoft.com v20.events.data.microsoft.com v20.vortex-win.data.microsoft.com vortex-win-sandbox.data.microsoft.com vortex-win.data.microsoft.com watson.*.microsoft.com

https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Cyber-Sicherheit/SiSyPHus/Telemetrie-Endpunkte_Windows10_Build_Build_21H2.html