Anonymity

Anonymity

Postby winworld » 09.07.2015, 11:12

1. Is any identifying information (IP, hardware serials, configuration) uploaded to servers when downloading updates and making an iso?

2. Is any identifying information embedded in the iso and transferred to machines that receive the updates? In essence, is it possible to identify the machine or network that produced the iso by examining or querying the machine that received the updates?

In my situation, it's acceptable for each machine to be non-anonymous (pseudonymous) as long as the two machines can't be linked together. Is this the right tool for that?

Thanks in advance!
Last edited by winworld on 09.07.2015, 17:25, edited 1 time in total.
winworld
 

Re: Anonymity

Postby boco » 09.07.2015, 17:18

I'm sure the author will answer this, but without knowing the WSUSOU code I can already say that the IP is always transferred to the servers you connect to. Communication is not possible without the other peer knowing your IP. While you could run WSUSOU through Tor, for example, this hurts performance.

Even your connection to this website and participation in the forum transfers your IP. Any moderator and admin can look it up. Other users can not.
Microsoft update catalog: http://catalog.update.microsoft.com/v7/site/
Windows Install media download: https://support.microsoft.com/en-us/help/15088/windows-create-installation-media
boco
 
Posts: 2398
Joined: 24.11.2009, 17:00
Location: Germany

Re: Anonymity

Postby winworld » 09.07.2015, 18:52

Thank you for reply.

I understand that the machine that downloads the updates (PC1) will have its IP logged on a server somewhere.

Also, after the updates are applied, and when the new installation (PC2) connects to Windows Update, it also will have its IP logged by Microsoft's servers.

I would like to know if there is any information (IP, serial #'s, etc) about PC1 that is embedded in the update iso itself and if that information is somehow transferred to PC2 by way of WSUSOffline. If wsusoffline simply downloads generic patch files that are untouched and executed on PC2, then there should be no link between the 2 PCs?

Will wait for author's reply. Thanks again.
winworld
 

Re: Anonymity

Postby aker » 09.07.2015, 21:01

wsusou just downloads the original generic files from MS. The are SHA1-checked, so they cannot get "personalised" as that would break the SHA1 (SHA1 of the file = last part of the file name before the extention). Also the wsusou repo from one PC does not differ from the one from another PC (except for the WD/MSSE definitions as the servers aren't in sync).
Wer Rechtschreibfehler findet, darf sie behalten oder an den Meistbietenden versteigern. / Everybody finding a misspelling is allowed to keep or sell it.
aker

WSUS Offline Update „Community Edition“
https://gitlab.com/wsusoffline/wsusoffline/-/releases
aker
 
Posts: 3999
Joined: 02.03.2011, 15:32

Re: Anonymity

Postby WSUSUpdateAdmin » 10.07.2015, 13:51

Hi!

boco wrote:I'm sure the author will answer this, [...]

Okay ;): WOU doesn't store any information about the downloading computer, so on the target computer there won't be any way to trace back to the download computer.

Regards
T. Wittrock
WSUSUpdateAdmin
Administrator
 
Posts: 2245
Joined: 07.07.2009, 14:38


Return to Download

Who is online

Users browsing this forum: No registered users and 379 guests