Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add missing spy domains #465

Open
ghost opened this issue May 16, 2022 · 8 comments
Open

Add missing spy domains #465

ghost opened this issue May 16, 2022 · 8 comments

Comments

@ghost
Copy link

ghost commented May 16, 2022

The following spy domains are already blocked by hosts but not by DNSCrypt or proxifier:

cy2.vortex.data.microsoft.com.akadns.net
db5.vortex.data.microsoft.com.akadns.net
geo.vortex.data.microsoft.com.akadns.net
sqm.telemetry.microsoft.com.nsatc.net
v10-win.vortex.data.microsoft.com.akadns.net

Please add them everywhere.

@crazy-max
Copy link
Owner

already there through wildcards.

@ghost
Copy link
Author

ghost commented May 16, 2022

Please read domains from the right to the left. There are no wildcard entries for *.akadns.net or *.nsatc.net.

@crazy-max
Copy link
Owner

I prefer to use passive detection from the VMs I use to make sure I don't include false positives. I still keep your list aside. Thanks.

@ghost
Copy link
Author

ghost commented May 16, 2022

The entries are from your hosts file, not anything new. I only suggest to make all your different data files (hosts, DNSCrypt, proxifier, etc.) match the same domains.

@crazy-max
Copy link
Owner

Oh indeed wildcard is missing, will fix that, thanks for your feedback.

@thatsprettygood
Copy link

Will a hotfix for this be released soon?

@crazy-max crazy-max reopened this May 17, 2022
@ghost
Copy link
Author

ghost commented May 18, 2022

@thatsprettygood This only affects DNSCrypt and proxifier spy rules, so it's not that urgent.

@einfacharthur
Copy link

what about this adresses?

au-v10.events.data.microsoft.com
au-v20.events.data.microsoft.com
au.vortex-win.data.microsoft.com
de-v20.events.data.microsoft.com
de.vortex-win.data.microsoft.com
eu-v10.events.data.microsoft.com
eu-v20.events.data.microsoft.com
eu.vortex-win.data.microsoft.com
events-sandbox.data.microsoft.com
events.data.microsoft.com
jp-v10.events.data.microsoft.com
jp-v20.events.data.microsoft.com
settings-win.data.microsoft.com
telecommand.telemetry.microsoft.com
uk-v20.events.data.microsoft.com
uk.vortex-win.data.microsoft.com
us-v10.events.data.microsoft.com
us-v20.events.data.microsoft.com
us.vortex-win.data.microsoft.com
us4-v20.events.data.microsoft.com
us5-v20.events.data.microsoft.com
v10.events.data.microsoft.com
v10.vortex-win.data.microsoft.com
v20.events.data.microsoft.com
v20.vortex-win.data.microsoft.com
vortex-win-sandbox.data.microsoft.com
vortex-win.data.microsoft.com
watson.*.microsoft.com

https://www.bsi.bund.de/SharedDocs/Downloads/DE/BSI/Cyber-Sicherheit/SiSyPHus/Telemetrie-Endpunkte_Windows10_Build_Build_21H2.html

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

3 participants