0
36

[–] Kleyno 0 points 36 points (+36|-0) ago 

Windows 10 has detected that you have attempted to run an unauthorised script, which could be used to circumvent the security of this system. For your own protection, its execution has been prevented. Have a nice day.

0
21

[–] NikoMyshkin 0 points 21 points (+21|-0) ago 

I can't let you do that Dave

0
5

[–] repoman 0 points 5 points (+5|-0) ago 

Something happened

0
9

[–] shovelcock 0 points 9 points (+9|-0) ago 

i actually surprised that this isn't a thing

0
9

[–] awshidahak 0 points 9 points (+9|-0) ago 

Just you wait. I'm sure it's coming.

[–] [deleted] 0 points 10 points (+10|-0) ago 

[Deleted]

0
4

[–] datjedi [S] 0 points 4 points (+4|-0) ago  (edited ago)

can also confirm. Also did this on my Win 8.1 with success.

0
3

[–] RunningShark 0 points 3 points (+3|-0) ago 

still at work but will read when i get a chance but can you walk me through on this? I have a laptop with 8.1 and that damn "Update to windowsn10 now!" is super annoying

0
2

[–] Bobsentme 0 points 2 points (+2|-0) ago 

I ran this (yes, under a CMD window as administrator) and it seemed to work..but a reboot caused everything to come back. I think I'm going to have to double check the windows update settings

0
4

[–] shovelcock 0 points 4 points (+4|-0) ago 

yea it seems that the second and third part will both fail if not ran under admin

0
7

[–] 2052021? 0 points 7 points (+7|-0) ago  (edited ago)

Why is "configure internet time service" task disabled in this? Does it do anything untoward?

It seems like a fork/variant if http://pastebin.com/KXM7ZFg7 and I'm not sure which is better, or why, for example, the pastebin uses the hosts file, but the hakspek script uses a different method.

0
3

[–] datjedi [S] 0 points 3 points (+3|-0) ago  (edited ago)

configure internet time service sends time stamps i believe. Altering hosts files is something that doesn't need to be done and can be considered overkill. the sources can be blocked from different points. in hakspek's, it is blocked with the route -p add command, which adds a TCP/IP Routes to the Windows Routing Table

0
2

[–] brianmoore 0 points 2 points (+2|-0) ago  (edited ago)

Cool. I might play around with route. A Packet Filter set of rules might look like this, not sure what the M$ equivalent is.

table <whitelist> persist file "..."
block drop all #drops all traffic by default
pass all from 192.168.0.0/24 to 192.168.0.0/24 #pass local traffic, or whatever your private network range is.
pass all from <whitelist> to 192.168.0.0/24 #pass all inbound whitelist traffic
pass all from 192.168.0.0/24 to <whitelist>

Your whitelist can contain domain names, but if your firewall loads before your dns, then it borks. I haven't figured out how to wait to load my firewall until after the dns is up yet.

Maybe the windows tools have a rough translation to that.

man pfconf
man pfctl

After you had your firewall in place, or ran that script above (those echo 0.0.0.0 24.... >> ../etc/hosts things) will probably disable a lot of windows update functionality. You'll have to go manually download updates from then on.

0
1

[–] SolarBaby 0 points 1 points (+1|-0) ago 

Does disabling keep Windows from updating the computer's clock? Or is this some new thing that's come with the Win10 stuff?

1
0

[–] Tantalus 1 points 0 points (+1|-1) ago 

Because the NSA are trying to manipulate your perception of time, obviously.

0
2

[–] 2058876? 0 points 2 points (+2|-0) ago 

it's not 1984?

[–] [deleted] 0 points 6 points (+6|-0) ago  (edited ago)

[Deleted]

0
2

[–] arrggg 0 points 2 points (+2|-0) ago 

Nice script, thanks for posting.

0
1

[–] gbj1301 0 points 1 points (+1|-0) ago 

Thank you :) Have an upvoat :)

0
6

[–] OpusMioda 0 points 6 points (+6|-0) ago 

I'll try this on my win 7 soon. But, I except it to explode in a burst of anti-spyware fire.

0
4

[–] Adrinus 0 points 4 points (+4|-0) ago 

Looks like you've got anti-spyware software infesting your machine... You should really look into removing them, they are worse than viruses.

0
4

[–] BlackOptx 0 points 4 points (+4|-0) ago 

Will i need to stop updating windows after i use this script, or run it periodically when windows updates? I understand it removes the Telem data mining, but will that all come back when windows updates naturally? will it be worse?

Basically what is the long term by using this script. Should i keep updating my system with essential updates?

0
2

[–] datjedi [S] 0 points 2 points (+2|-0) ago  (edited ago)

This is not a long term solution. It is possible to redownload these updates. So it might be good to keep the script on hand

Edit: if I'm not mistaken, there's a way to block defined updates thru the update manager but nor sure.

0
1

[–] k3mist 0 points 1 points (+1|-0) ago 

You can hide the update using right click.

0
1

[–] Nebakanezzer 0 points 1 points (+1|-0) ago 

Just did this. After you run the script and reboot, check for updates. They will be old updates, hide right click and hide. Check for updates and repeat. Do this until you reach the most recent updates.

0
4

[–] Paradox3121 0 points 4 points (+4|-0) ago 

KB3035583 – “Get Windows 10 App” (delivers ready to use UAC backdoor as bonus)

KB3075249 and KB3080149 are both marked as optional updates in Windows update, which tend not to get installed on my computer. However I do still have the update that spams you with Windows 10 advertising, for now. What is this UAC backdoor they're referring to here? Is that sending telemetry as well?

0
3

[–] peacegnome 0 points 3 points (+3|-0) ago 

I'm guessing that a "UAC backdoor" would be a process that has elevated (admin) rights, and so it can do anything it wants to the computer without prompting you.

0
4

[–] InDifferent 0 points 4 points (+4|-0) ago 

So is this just for people that have Windows 10 or for people that have 7, 8, and 8.1?

0
4

[–] datjedi [S] 0 points 4 points (+4|-0) ago 

the script has all of the updates for both OS. If you do not have the update, the script will just bypass and move on to the next

load more comments ▼ (12 remaining)