Fhyujk

Are there any modern advantages of a fire piston?

Why do neural networks need so many training examples to perform?

If I delete my router's history can my ISP still provide it to my parents?

Word or phrase for showing great skill at something without formal training in it

Program that converts a number to a letter of the alphabet

Cryptic with missing capitals

Strange blocking on readable secondary after reboot

What to do when being responsible for data protection in your lab, yet advice is ignored?

How can my powered armor quickly replace its ceramic plates?

How to prevent cleaner from hanging my lock screen in Ubuntu 16.04

Is every normal subgroup the kernel of some self-homomorphism?

Why do members of Congress in committee hearings ask witnesses the same question multiple times?

Why don't American passenger airlines still operate dedicated cargo flights?

What is the lore-based reason that the Spectator has the Create Food and Water trait, instead of simply not requiring food and water?

What kind of hardware implements Fourier transform?

What is this metal M-shaped device for?

How can animals be objects of ethics without being subjects as well?

Macro only to be defined in math mode

Does Windows 10's telemetry include sending *.doc files if Word crashed?

My cat mixes up the floors in my building. How can I help him?

Is there any differences between "Gucken" and "Schauen"?

We are very unlucky in my court

Am I a Rude Number?

How to tag distinct options/entities without giving any an implicit priority or suggested order?

Does Windows 10's telemetry include sending *.doc files if Word crashed?

How long should Windows 10 pins be?What are the privacy and security implications of Windows TelemetryCan Microsoft access all private data if a user installs Windows 10?Where does Windows 10 save Keyboard input?Blocking Windows 10 telemetry destinations with Windows FirewallHow can I prevent all Windows 10 Telemetry?Stopping, editing, then sending packets in Windows 10Does Windows Update modify Hosts file?How does Windows knows a particular software is an AV?Does WinRar leave cache of opened Zip Archives (Nothing extracted)

20

3

I'm reading through the extensive description on which data is acquired by Microsoft's telemetry 1 including the following paragraph:

User generated files -- files that are indicated as a potential cause for a crash or hang. For example, .doc, .ppt, .csv files

I was wondering whether Microsoft actually gathers data from a Word document, in case word crashes (hope on being wrong on this one).

Is Microsoft getting the 'whole' file, only a paragraph or am I misreading that part of the documentation?

data-leakage windows-10

share|improve this question

edited 9 mins ago

Peter Mortensen

69849

asked 8 hours ago

VoodooCodeVoodooCode

10315

New contributor

VoodooCode is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  I don't think .doc files are very common these days. Isn't it a 1990s thing? (.docx today?)
  
  – Peter Mortensen
  33 mins ago
  
  
  

  
  
  
  

add a comment | 

20

3

I'm reading through the extensive description on which data is acquired by Microsoft's telemetry 1 including the following paragraph:

User generated files -- files that are indicated as a potential cause for a crash or hang. For example, .doc, .ppt, .csv files

I was wondering whether Microsoft actually gathers data from a Word document, in case word crashes (hope on being wrong on this one).

Is Microsoft getting the 'whole' file, only a paragraph or am I misreading that part of the documentation?

data-leakage windows-10

share|improve this question

edited 9 mins ago

Peter Mortensen

69849

asked 8 hours ago

VoodooCodeVoodooCode

10315

New contributor

VoodooCode is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  I don't think .doc files are very common these days. Isn't it a 1990s thing? (.docx today?)
  
  – Peter Mortensen
  33 mins ago
  
  
  

  
  
  
  

add a comment | 

I'm reading through the extensive description on which data is acquired by Microsoft's telemetry 1 including the following paragraph:

User generated files -- files that are indicated as a potential cause for a crash or hang. For example, .doc, .ppt, .csv files

I was wondering whether Microsoft actually gathers data from a Word document, in case word crashes (hope on being wrong on this one).

Is Microsoft getting the 'whole' file, only a paragraph or am I misreading that part of the documentation?

data-leakage windows-10

share|improve this question

edited 9 mins ago

Peter Mortensen

69849

asked 8 hours ago

VoodooCodeVoodooCode

10315

New contributor

VoodooCode is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

share|improve this question

edited 9 mins ago

Peter Mortensen

69849

asked 8 hours ago

VoodooCodeVoodooCode

10315

New contributor

VoodooCode is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

share|improve this question

edited 9 mins ago

Peter Mortensen

69849

asked 8 hours ago

VoodooCodeVoodooCode

10315

New contributor

VoodooCode is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

edited 9 mins ago

Peter Mortensen

69849

edited 9 mins ago

Peter Mortensen

69849

asked 8 hours ago

VoodooCodeVoodooCode

10315

New contributor

VoodooCode is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

asked 8 hours ago

VoodooCodeVoodooCode

10315

1 Answer
1

active

oldest

votes

16

Here is what they spy on, finally officially admitted after being proved again and again by different independent sources. That should make a pretty good idea on what actually is transmitted.

To actually see what's being reported you can give yourself permissions for
%ProgramData%MicrosoftDiagnosis directory and look what's in there, but the file are encrypted which is a very suspicious thing.

What you can look at in the newer version is the Diagnostic Data Viewer. But that does NOT guarantee or prove that there is documents privacy in any way.

At this point my guess is that they will transmit parts of files that generated crashes, or if they consider proper to do so and definitely can transmit any type of document via the encrypted content in Diagnosis and https as the transmission way.

Their EULA states:

Finally, we will access, disclose and preserve personal data,
including your content (such as the content of your emails, other
private communications or files in private folders), when we have a
good faith belief that doing so is necessary to: comply with
applicable law or respond to valid legal process, including from law
enforcement or other government agencies;
2. protect our customers, for example to prevent spam or attempts to defraud users of the services, or to help prevent the loss of life or
serious injury of anyone; 3. operate and maintain the security of our
services, including to prevent or stop an attack on our computer
systems or networks; or
4. protect the rights or property of Microsoft, including enforcing the terms governing the use of the services - however, if we receive
information indicating that someone is using our services to traffic
in stolen intellectual or physical property of Microsoft, we will not
inspect a customer's private content ourselves, but we may refer the
matter to law enforcement.

Conclusion: they can and will do it at will.

share|improve this answer

edited 6 hours ago

Esa Jokinen

1,983613

answered 8 hours ago

OvermindOvermind

3,976517

• 
  
  
  

  
  2
  

  
  
  
  
  
  

  
  
  While the answer is actually "yes, they could" the EULA snippet you cited has nothing to do with that. To investigate a crash has NOTHING to do with 1,4. Also note that crash data is an opt-in while for points mentioned in EULA you basically give them the rights to do what they want but only in those very specific circumstances (that "...at will" is incredibly misleading, IMHO).
  
  – Adriano Repetti
  2 hours ago
  
  
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Since they can do make transfers and everything is encrypted how do you know if they will be nice guys and only do it when legally allowed to ?
  
  – Overmind
  2 hours ago
  

  
  
  
  


• 
  
  
  

  
  2
  

  
  
  
  
  
  

  
  
  Is it a serious question? Because it'd be a HUGE law infringement, and - on the contrary of cloud services - they distribute the evidence (virtually anyone can inspect the decompiled source code). Given that MS is not an anonymous developer hidden somewhere in world...there are MUCH more chances that any on-line service is misusing your data (oh well, they actually tell you that they do then...) or just some obscure desktop (or mobile...) app...
  
  – Adriano Repetti
  2 hours ago
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Law infringement must be proven. And you can't since they encrypt the content. Online services are a different story and their usage is lesser that the usage of W10, but yes, you are right about them. Look what facebook previously did and what... they got a fine and added some text in their EULA.
  
  – Overmind
  1 hour ago
  
  
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  @AdrianoRepetti Well, Microsoft's website says that the linked "article describes all types of diagnostic data collected by Windows at the Full level". Under section "Product and Service Performance data", subsection "Data Description for Product and Service Performance data type" the following is listed: "User generated files -- files that are indicated as a potential cause for a crash or hang. For example, .doc, .ppt, .csv files"
  
  – VoodooCode
  1 hour ago
  

  
  
  
  

 | 
show 3 more comments

Your Answer

StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "162"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});

function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: false,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
noCode: true, onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});


}
});

VoodooCode is a new contributor. Be nice, and check out our Code of Conduct.

draft saved

draft discarded

Sign up or log in

StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});

Sign up using Google

Sign up using Facebook

Sign up using Email and Password

Post as a guest

Name

Email

Required, but never shown

StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsecurity.stackexchange.com%2fquestions%2f204530%2fdoes-windows-10s-telemetry-include-sending-doc-files-if-word-crashed%23new-answer', 'question_page');
}
);

Post as a guest

Name

Email

Required, but never shown

16

Here is what they spy on, finally officially admitted after being proved again and again by different independent sources. That should make a pretty good idea on what actually is transmitted.

To actually see what's being reported you can give yourself permissions for
%ProgramData%MicrosoftDiagnosis directory and look what's in there, but the file are encrypted which is a very suspicious thing.

What you can look at in the newer version is the Diagnostic Data Viewer. But that does NOT guarantee or prove that there is documents privacy in any way.

At this point my guess is that they will transmit parts of files that generated crashes, or if they consider proper to do so and definitely can transmit any type of document via the encrypted content in Diagnosis and https as the transmission way.

Their EULA states:

Finally, we will access, disclose and preserve personal data,
including your content (such as the content of your emails, other
private communications or files in private folders), when we have a
good faith belief that doing so is necessary to: comply with
applicable law or respond to valid legal process, including from law
enforcement or other government agencies;
2. protect our customers, for example to prevent spam or attempts to defraud users of the services, or to help prevent the loss of life or
serious injury of anyone; 3. operate and maintain the security of our
services, including to prevent or stop an attack on our computer
systems or networks; or
4. protect the rights or property of Microsoft, including enforcing the terms governing the use of the services - however, if we receive
information indicating that someone is using our services to traffic
in stolen intellectual or physical property of Microsoft, we will not
inspect a customer's private content ourselves, but we may refer the
matter to law enforcement.

Conclusion: they can and will do it at will.

share|improve this answer

edited 6 hours ago

Esa Jokinen

1,983613

answered 8 hours ago

OvermindOvermind

3,976517

• 
  
  
  

  
  2
  

  
  
  
  
  
  

  
  
  While the answer is actually "yes, they could" the EULA snippet you cited has nothing to do with that. To investigate a crash has NOTHING to do with 1,4. Also note that crash data is an opt-in while for points mentioned in EULA you basically give them the rights to do what they want but only in those very specific circumstances (that "...at will" is incredibly misleading, IMHO).
  
  – Adriano Repetti
  2 hours ago
  
  
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Since they can do make transfers and everything is encrypted how do you know if they will be nice guys and only do it when legally allowed to ?
  
  – Overmind
  2 hours ago
  

  
  
  
  


• 
  
  
  

  
  2
  

  
  
  
  
  
  

  
  
  Is it a serious question? Because it'd be a HUGE law infringement, and - on the contrary of cloud services - they distribute the evidence (virtually anyone can inspect the decompiled source code). Given that MS is not an anonymous developer hidden somewhere in world...there are MUCH more chances that any on-line service is misusing your data (oh well, they actually tell you that they do then...) or just some obscure desktop (or mobile...) app...
  
  – Adriano Repetti
  2 hours ago
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Law infringement must be proven. And you can't since they encrypt the content. Online services are a different story and their usage is lesser that the usage of W10, but yes, you are right about them. Look what facebook previously did and what... they got a fine and added some text in their EULA.
  
  – Overmind
  1 hour ago
  
  
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  @AdrianoRepetti Well, Microsoft's website says that the linked "article describes all types of diagnostic data collected by Windows at the Full level". Under section "Product and Service Performance data", subsection "Data Description for Product and Service Performance data type" the following is listed: "User generated files -- files that are indicated as a potential cause for a crash or hang. For example, .doc, .ppt, .csv files"
  
  – VoodooCode
  1 hour ago
  

  
  
  
  

 | 
show 3 more comments

16

Here is what they spy on, finally officially admitted after being proved again and again by different independent sources. That should make a pretty good idea on what actually is transmitted.

To actually see what's being reported you can give yourself permissions for
%ProgramData%MicrosoftDiagnosis directory and look what's in there, but the file are encrypted which is a very suspicious thing.

What you can look at in the newer version is the Diagnostic Data Viewer. But that does NOT guarantee or prove that there is documents privacy in any way.

At this point my guess is that they will transmit parts of files that generated crashes, or if they consider proper to do so and definitely can transmit any type of document via the encrypted content in Diagnosis and https as the transmission way.

Their EULA states:

Finally, we will access, disclose and preserve personal data,
including your content (such as the content of your emails, other
private communications or files in private folders), when we have a
good faith belief that doing so is necessary to: comply with
applicable law or respond to valid legal process, including from law
enforcement or other government agencies;
2. protect our customers, for example to prevent spam or attempts to defraud users of the services, or to help prevent the loss of life or
serious injury of anyone; 3. operate and maintain the security of our
services, including to prevent or stop an attack on our computer
systems or networks; or
4. protect the rights or property of Microsoft, including enforcing the terms governing the use of the services - however, if we receive
information indicating that someone is using our services to traffic
in stolen intellectual or physical property of Microsoft, we will not
inspect a customer's private content ourselves, but we may refer the
matter to law enforcement.

Conclusion: they can and will do it at will.

share|improve this answer

edited 6 hours ago

Esa Jokinen

1,983613

answered 8 hours ago

OvermindOvermind

3,976517

• 
  
  
  

  
  2
  

  
  
  
  
  
  

  
  
  While the answer is actually "yes, they could" the EULA snippet you cited has nothing to do with that. To investigate a crash has NOTHING to do with 1,4. Also note that crash data is an opt-in while for points mentioned in EULA you basically give them the rights to do what they want but only in those very specific circumstances (that "...at will" is incredibly misleading, IMHO).
  
  – Adriano Repetti
  2 hours ago
  
  
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Since they can do make transfers and everything is encrypted how do you know if they will be nice guys and only do it when legally allowed to ?
  
  – Overmind
  2 hours ago
  

  
  
  
  


• 
  
  
  

  
  2
  

  
  
  
  
  
  

  
  
  Is it a serious question? Because it'd be a HUGE law infringement, and - on the contrary of cloud services - they distribute the evidence (virtually anyone can inspect the decompiled source code). Given that MS is not an anonymous developer hidden somewhere in world...there are MUCH more chances that any on-line service is misusing your data (oh well, they actually tell you that they do then...) or just some obscure desktop (or mobile...) app...
  
  – Adriano Repetti
  2 hours ago
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  Law infringement must be proven. And you can't since they encrypt the content. Online services are a different story and their usage is lesser that the usage of W10, but yes, you are right about them. Look what facebook previously did and what... they got a fine and added some text in their EULA.
  
  – Overmind
  1 hour ago
  
  
  

  
  
  
  


• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  @AdrianoRepetti Well, Microsoft's website says that the linked "article describes all types of diagnostic data collected by Windows at the Full level". Under section "Product and Service Performance data", subsection "Data Description for Product and Service Performance data type" the following is listed: "User generated files -- files that are indicated as a potential cause for a crash or hang. For example, .doc, .ppt, .csv files"
  
  – VoodooCode
  1 hour ago
  

  
  
  
  

 | 
show 3 more comments

Here is what they spy on, finally officially admitted after being proved again and again by different independent sources. That should make a pretty good idea on what actually is transmitted.

To actually see what's being reported you can give yourself permissions for
%ProgramData%MicrosoftDiagnosis directory and look what's in there, but the file are encrypted which is a very suspicious thing.

What you can look at in the newer version is the Diagnostic Data Viewer. But that does NOT guarantee or prove that there is documents privacy in any way.

At this point my guess is that they will transmit parts of files that generated crashes, or if they consider proper to do so and definitely can transmit any type of document via the encrypted content in Diagnosis and https as the transmission way.

Their EULA states:

Finally, we will access, disclose and preserve personal data,
including your content (such as the content of your emails, other
private communications or files in private folders), when we have a
good faith belief that doing so is necessary to: comply with
applicable law or respond to valid legal process, including from law
enforcement or other government agencies;
2. protect our customers, for example to prevent spam or attempts to defraud users of the services, or to help prevent the loss of life or
serious injury of anyone; 3. operate and maintain the security of our
services, including to prevent or stop an attack on our computer
systems or networks; or
4. protect the rights or property of Microsoft, including enforcing the terms governing the use of the services - however, if we receive
information indicating that someone is using our services to traffic
in stolen intellectual or physical property of Microsoft, we will not
inspect a customer's private content ourselves, but we may refer the
matter to law enforcement.

Conclusion: they can and will do it at will.

share|improve this answer

edited 6 hours ago

Esa Jokinen

1,983613

answered 8 hours ago

OvermindOvermind

3,976517

share|improve this answer

edited 6 hours ago

Esa Jokinen

1,983613

answered 8 hours ago

OvermindOvermind

3,976517

edited 6 hours ago

Esa Jokinen

1,983613

edited 6 hours ago

Esa Jokinen

1,983613

answered 8 hours ago

OvermindOvermind

3,976517

answered 8 hours ago

OvermindOvermind

3,976517