[10165]

I read that Windows 10 uses peer-to-peer file sharing with any other Windows hosts it locates on the same network.

This way each Windows computer does not have to connect to Microsoft to download, e.g., the Windows 10 "upgrade". It seems like this could also be used to evade attempts by users to block such downloads by blocking Microsoft IP addresses.

Windows 10 could propagate itself through a network of Windows computers, like a ...

Seriously, how does this work in pratice?

Windows 10 does peer-to-peer file sharing automatically without requiring any user interaction?

[hendersoon]

Yes, this is called "delivery optimization" and it's on by default. By default, Windows Enterprise/Education only pull updates from Microsoft and the local domain, while Windows Home/Pro will also pull updates from other peers on the internet.

You can turn it off, or disable pulling from internet peers, but given the OP, who knows if MS actually respects that setting? I guess we have to roll the dice now.

https://privacy.microsoft.com/en-us/windows-10-windows-updat...

[glenneroo]

Maybe they changed it, but I just checked my fresh install of Pro build 1703 from MSDN and it was disabled.

[hendersoon]

Odd, their docs say it's on by default.

https://docs.microsoft.com/en-us/windows/deployment/update/w...

[glenneroo]

One of the handful of tools I installed from Ninite must have turned it off then. After a quick look, I'm guessing it was Classic Start Menu.

[nthcolumn]

malware delivery optimization hehe

[Spooky23]

Windows has done this forever with enabled apps like SCCM. I think it was released in 2008.

It allowed us to remove hundreds of local depot servers unless there was an SLA on reimaging.

[hendersoon]

Yes, but you needed to configure that. This comes enabled by default. And on Windows Home/Pro, it downloads updates from third-parties on the internet too.

[jhasse]

> This comes enabled by default. And on Windows Home/Pro, it downloads updates from third-parties on the internet too.

What's the problem? I guess it still receives the hashes signed from Microsoft.