Revealed! Crucial detail that Windows 10 privacy critics are missing

Frisco said:

Yeah the "misusing the data" they collect is the far fetched concern. The "what if" on being hacked is still a slim possibility, but we've seen huge hacks in the recent past.

In particular I was surprised to see the "inking" default set to on. "Inking" and keystroke and all that adds up to passwords and anything else we input to our machines using this OS.

If some of the major players like Microsoft, Google and such would one day be hacked and user credentials stolen, those users who have not set up multi factor authentication and had their accounts accessed would only have themselves to blame.

I have no worries. If someone gets my MS account email and password, they are pretty much useless. I have the two-step verification set up, you can do nothing with password only. To get to my email account, OneDrive, any personal information you also need access to my mobile phone or my home phone to get the verification code.

You cannot access my account and see my information at outlook.com, onedrive.com, live.com or any of the other MS sites without a verification code. You cannot reset my password nor can you change any of my information; for that you would first need one verification code to sign in and see my information, then another code to change the information. You cannot set up a Windows user account using my MS account without a verification code.

Being afraid about a possible hack to MS servers is as far as I am concerned pretty much a useless fear. We consumers have to trust some basic things, for example you don't stop flying because some planes do not reach their destination. Of course not, you continue flying because you know it is by far the safest mode of transportation. Not the best metaphor but you get my point.

groze said:

I personally think it is silly to require a mobile phone to log in to an account.

What a statement that is! Respecting the forum rules I cannot express my honest opinion but Oh S***!

What could be safer and easier? When on the road, the mobile is always with me; when stopping by in a pub or Internet Café, when at airport or hotel, when visiting friends, whenever I want to / need to check my email, I can use any PC to sign in, enter my verification code from my mobile phone, and be safe. OF course I can use my email, OneDrive and stuff also on my mobile but I am talking about situations you'd prefer a real computer but do not have your laptop with you.

When leaving, I sign out and that's it. No worries that the next user of that PC gets in to my account.

dencal said:

It does not only have to be a mobile phone, home phone is also possible.

Yes, of course. And even with a mobile phone you can still select if you want to receive the verification codes by text messages or a phone call.

I use a Windows Phone and the Microsoft Authenticator app, to be able to get the codes even in rare occasions when I do not have any network coverage or the phone is for any purpose in flight mode.

groze said:

Kari,

Keep in mind not everyone has mobile phone.

I was not telling that everyone should have a mobile phone. Of course I know and fully understand that not all people want it.

My reply to you was based on this utterly **(¹) and ******(¹) comment of yours about it being silly to use mobile phone for added security:

groze said:

I personally think it is silly to require a mobile phone to log in to an account.

That being said, let's move on:

groze said:

I have a non smart pre-paid phone that cost per text & per call (10 cents a minute). I use page plus minute plan. We today's economy I am not ashamed to use it.

First, any mobile phone can be used for security verification code texts and calls. It does not has to be a smart phone.

Once again I admit my lack of knowledge about the US phone systems but it sounds very odd in my ears that you'd need to pay for the incoming text messages and calls? All MS, Google, PayPal and so on security verification codes come automatically to your phone when you have enabled the feature and entered your password on a sign-in page, without you needing to send a single text or make a call.

In Europe that would be forbidden and impossible, MS or the phone company to charge you for the incoming text or call.

Kari


(¹) = Censored in accordance to the forum rules.