WindowsSpyBlocker icon indicating copy to clipboard operation
WindowsSpyBlocker copied to clipboard

Published 20 hours ago • verified publisher icon crazy-max

Add missing spy domains

Open ghost opened this issue 2 years ago • 8 comments

The following spy domains are already blocked by hosts but not by DNSCrypt or proxifier:

cy2.vortex.data.microsoft.com.akadns.net
db5.vortex.data.microsoft.com.akadns.net
geo.vortex.data.microsoft.com.akadns.net
sqm.telemetry.microsoft.com.nsatc.net
v10-win.vortex.data.microsoft.com.akadns.net

Please add them everywhere.

ghost avatar May 16 '22 14:05 ghost

already there through wildcards.

crazy-max avatar May 16 '22 14:05 crazy-max

Please read domains from the right to the left. There are no wildcard entries for *.akadns.net or *.nsatc.net.

ghost avatar May 16 '22 15:05 ghost

I prefer to use passive detection from the VMs I use to make sure I don't include false positives. I still keep your list aside. Thanks.

crazy-max avatar May 16 '22 16:05 crazy-max

The entries are from your hosts file, not anything new. I only suggest to make all your different data files (hosts, DNSCrypt, proxifier, etc.) match the same domains.

ghost avatar May 16 '22 16:05 ghost

Oh indeed wildcard is missing, will fix that, thanks for your feedback.

crazy-max avatar May 16 '22 16:05 crazy-max

Will a hotfix for this be released soon?

thatsprettygood avatar May 17 '22 15:05 thatsprettygood

@thatsprettygood This only affects DNSCrypt and proxifier spy rules, so it's not that urgent.

ghost avatar May 18 '22 15:05 ghost

what about this adresses?

au-v10.events.data.microsoft.com au-v20.events.data.microsoft.com au.vortex-win.data.microsoft.com de-v20.events.data.microsoft.com de.vortex-win.data.microsoft.com eu-v10.events.data.microsoft.com eu-v20.events.data.microsoft.com eu.vortex-win.data.microsoft.com events-sandbox.data.microsoft.com events.data.microsoft.com jp-v10.events.data.microsoft.com jp-v20.events.data.microsoft.com settings-win.data.microsoft.com telecommand.telemetry.microsoft.com uk-v20.events.data.microsoft.com uk.vortex-win.data.microsoft.com us-v10.events.data.microsoft.com us-v20.events.data.microsoft.com us.vortex-win.data.microsoft.com us4-v20.events.data.microsoft.com us5-v20.events.data.microsoft.com v10.events.data.microsoft.com v10.vortex-win.data.microsoft.com v20.events.data.microsoft.com v20.vortex-win.data.microsoft.com vortex-win-sandbox.data.microsoft.com vortex-win.data.microsoft.com watson.*.microsoft.com

https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Cyber-Sicherheit/SiSyPHus/Telemetrie-Endpunkte_Windows10_Build_Build_21H2.html

einfacharthur avatar Jul 19 '22 10:07 einfacharthur