Windows 7 will often transmit quite a substantial amount of (encrypted) data to US National Security Agency Datamining servers. i noticed the massive amount of connection tries in peerblock, and turned it off for a few minutes.
then i inspected it with a packet sniffing tool and it was transmitting at the rate of like 10mb per minute. I couldn't decrypt what it was doing but it seems like theyre logging and transmitting every action due the amount of data being transferred.
Sometimes for hours on end windows will transmit, making connections every second to addresses like the one below.
It seems this occurs especially often whenever there is activity on the internet connection, but it also happened while i was not doing anything online at all and did not even have a browser or anything running.
94.245.121.253 -> teredo.ipv6.microsoft.com.nsatc.net
a whois for NSATC.net will shows it belongs to "Level 3 Communications inc"
After searching for this company i found on cryptome it belongs to an NSA IP range, which shouldn't be a surprise since the domain even has NSA in the name.
SOLUTION:
Download and install peerblock from www.peerblock.com
In peerblock click list manager -> add list,
in the url box add the microsoft blocklist: http://list.iblocklist.com/?list=bt_...chiveformat=gz
This will effectively block all Microsoft tracking/datamining efforts.
then i inspected it with a packet sniffing tool and it was transmitting at the rate of like 10mb per minute. I couldn't decrypt what it was doing but it seems like theyre logging and transmitting every action due the amount of data being transferred.
Sometimes for hours on end windows will transmit, making connections every second to addresses like the one below.
It seems this occurs especially often whenever there is activity on the internet connection, but it also happened while i was not doing anything online at all and did not even have a browser or anything running.
94.245.121.253 -> teredo.ipv6.microsoft.com.nsatc.net
a whois for NSATC.net will shows it belongs to "Level 3 Communications inc"
After searching for this company i found on cryptome it belongs to an NSA IP range, which shouldn't be a surprise since the domain even has NSA in the name.
SOLUTION:
Download and install peerblock from www.peerblock.com
In peerblock click list manager -> add list,
in the url box add the microsoft blocklist: http://list.iblocklist.com/?list=bt_...chiveformat=gz
This will effectively block all Microsoft tracking/datamining efforts.