Windows 10 silently uses your bandwidth to send updates to others

Discussion in 'Members News Depot' started by Spider, Aug 4, 2015.

  1. Spider

    Spider Super Moderator Staff Member

    Joined:
    Feb 3, 2015
    Messages:
    285
    Likes Received:
    74
    Trophy Points:
    28
    Location:
    Chicago, IL
    If you've upgraded to Windows 10 then Microsoft could be using your PC - and your internet connection - to silently send Windows updates to others.

    [​IMG] By Adrian Kingsley-Hughes for Hardware 2.0 | August 4, 2015 -- 12:48 GMT (05:48 PDT) |

    • [​IMG]

    • If you've upgraded to Windows 10 then Microsoft could be using your PC - and your internet connection - to silently send Windows updates to others.

      The feature used to do this is called Windows Update Delivery Optimization (WUDO). Here's how Microsoft describes it in an online FAQ:

      "Windows Update Delivery Optimization lets you get Windows updates and Windows Store apps from sources in addition to Microsoft. This can help you get updates and apps more quickly if you have a limited or unreliable Internet connection. And if you own more than one PC, it can reduce the amount of Internet bandwidth needed to keep all of your PCs up-to-date."

    • A system that helps you save some bandwidth by sending updates to other PCs on your network. Sounds great, right? But then you read on [emphasis added]:

      "Delivery Optimization also sends updates and apps from your PC to other PCs on your local network or PCs on the Internet."

    • So Microsoft is turning newly upgraded Windows 10 PCs into systems to effectively fileshare updates with others.

      Some aspects worth highlighting:
      • Delivery Optimization is turned on by default in Windows 10. At no point during the Windows 10 installation process are users asked about this, which means that those with a restricted bandwidth don't get the chance to opt out.
      • WUDO doesn't replace the existing Windows Update mechanism but instead is used to augment it.
      • Microsoft states in the FAQ that WUDO "uses the same security measures as Windows Update and the Windows Store" and "doesn't access your personal files or folders or change any files on your PC".
      • There are three options: Get and send updates from PCs on your local network and PCs on the internet, just with PCs on your network, or turn the feature off.
      • For Windows 10 Enterprise and Windows 10 Education the default option is to download and share updates with PCs on your local network, while for all other versions Windows 10 with send and receive files from PCs on your local network and PCs on the internet.
      • WUDO will not use connections marked as metered. To mark a connection as metered click Start > Settings > Network & Internet > Wi‑Fi > Advanced options and use the toggle switch under Set as metered connection.
      • WUDO can be disabled. Go to Start > Settings > Updates & security > Windows Update > Advanced options and then select Choose how updates are delivered, and use the toggle to turn Delivery Optimization off.

    • Beyond the ability to turn the feature off or mark connections a metered, I don't see any obvious method to control how much bandwidth this feature consumes.

      While WUDO doesn't present any known security risks at present, security expert Graham Cluley was keen to point out that hackers have previously managed to exploit weaknesses in the Windows Update mechanism, using it to spread the Flame malware.
     
  2. GreyFox7

    GreyFox7 Super Moderator Staff Member

    Joined:
    Jul 27, 2014
    Messages:
    6,331
    Likes Received:
    1,279
    Trophy Points:
    113
    GreyFox7 < Updates from more than one place = OFF.
     
  3. jnjroach

    jnjroach Administrator Staff Member

    Joined:
    Nov 9, 2012
    Messages:
    7,095
    Likes Received:
    1,724
    Trophy Points:
    113
    Location:
    Seattle, WA USA
    My Device:
    Surface Book
    The fallacy and FUD of this article is huge, what they fail to qualify is that this feature is can be configured for LAN distribution - allowing home networks to have one machine download the updates and distribute to others on the local network (network needs to be a private network not public).

    On Corporate Networks GPOs and EAS policies will point to WSUS or Config Manager Update Points.

    These capability has been used for years in Enterprise shops that took advantage of Branch Cache functionality in both System Center and Server 2008 R2 or later (Clients Win7 or later).

    The level of conspiracy theories and privacy issues around Windows 10 is ridicules as 98% of these terms have been baked into the Privacy Policy since Windows 7.

    These articles do the general public a huge disservice and qualify as "Click Bait"....

    We as geeks need to stop the spread of this type of FUD....
     
    sharpuser and leeshor like this.
  4. Spider

    Spider Super Moderator Staff Member

    Joined:
    Feb 3, 2015
    Messages:
    285
    Likes Received:
    74
    Trophy Points:
    28
    Location:
    Chicago, IL
    My bad, I didn't intend to start a panic by posting the article. Yes, it's safe and has been used by Enterprise shops and Geeks for years. However, this is the first time it's been turned on for mere mortals.

    My primary intent was to let people know about this, so those "with a restricted bandwidth" would know what's going on and how to turn it off. Better than having them blame WX for suddenly spotty internet service and trying to live with it.
     
  5. GreyFox7

    GreyFox7 Super Moderator Staff Member

    Joined:
    Jul 27, 2014
    Messages:
    6,331
    Likes Received:
    1,279
    Trophy Points:
    113
    I don't mind it on for my desktop, local network only, and laptops but I don't want my Surface serving files to the other boxes. maybe if there was an option for receive only from other local network machines not send.
     
  6. leeshor

    leeshor Well-Known Member

    Joined:
    Jun 19, 2012
    Messages:
    5,071
    Likes Received:
    877
    Trophy Points:
    113
    Location:
    Norcross, GA
    My Device:
    SPro4
    ICYMI I had posted this yesterday, but it was for a different reason.
    http://www.surfaceforums.net/threads/running-slow-eating-battery-and-bandwidth.16353/
     

Share This Page