So, Microsoft is silently installing Copilot onto Windows Server 2022 systems and this is a disaster.

How can you push a tool that siphons data to a third party onto a security-critical system?

What privileges does it have upon install? Who thought this is a good idea? And most importantly, who needs this?

#infosec #security #openai #microsoft #windowsserver #copilot

shuv (@shuv1337) on X

@kennethvs I assumed this was just bait, but I logged into my 2022 Server and it looks like it just installed itself today.

X (formerly Twitter)

@sos Well. They said, it installed 'itself'. That's the answer. It's looking for a home, you see? 😂

Jokes aside, what a sh*t show. 👎

@sos didn't they *just* revert course on this in Server 2025?
@sos @nixCraft There’s no way I’ll ever run Windows Server
@sos this reinforces my efforts to ditch MS since they decided to force ads on me. My server is 2019, but I'll still be blowing that away soon enough
@sos What an absolute disgrace

@sos The Problem is to install Windows Server and than use it as a security-critical system...

And obviously give it access to the internet.

@schenklklopfer @sos The Problem is installing Windows Server FULLSTOP
@pebo @schenklklopfer @sos Could as well have stopped after "Windows".
@hllizi @schenklklopfer @sos
Shure, added this. Thanks for the reminder.
@schenklklopfer @sos The Problem is installing Windows
FULLSTOP
@sos It's already installed in Outlook.
I've literally seen ai.exe running on my windows computer for work. I keep deleting the executable but every now and then it grows back.
@sos
I also stumbled across this and uninstalled it immediately, not knowing when it was installed

@sos For your information this is not the full blown Microsoft Copilot, it is just a Webapp feature of Microsoft Edge. Look at the size of the Microsoft Copilot listed in the “Apps & features" screenshot.

More information here: https://windowsreport.com/copilot-is-getting-installed-again-on-windows-server-but-you-can-get-rid-of-it-with-this-policy-setting/

Copilot is getting installed (again) on Windows Server, but you can get rid of it with this policy setting

Many Windows Server users discovered tthat Copilot installed automatically on their machines. Here's why and how to get rid of it!

Windows Report
@hazenet "don’t panic. Even if Copilot is installed on Windows Server, you can get rid of it." WHAT?
@sos
That guy's got the jokes lol
@hazenet
@sos One more argument for using Linux on servers... As if the list wasn't long enough...
@sos NOW is it time to dump Microsoft? I think /maybe/ so... but what do /I/ know?
@sos tbh not really surprising news but rather something that could be expected
@sos 8kb ist the best compression I've seen so far :)
@sos My guess is Microsoft needs this 😬

@sos

I got tired of their shit when they started forcing updates. Haven't used Windows privately or professionally for more than a decade.

@AlexanderESmith I'm a gamedev so I'm stuck with this, but gonna phase out Server after this for sure.
@sos
Critical system hopefuly dont run windows
@sos This won't go ever well in highly secure environments.
@sos now we wait for various companies to have problems with data leaks caused by copilot trying to be "helpful"

@sos

Liking my Linux Mint home server more every day.

@sos I think the inference here is… if it runs Windows, it clearly isn't "security critical".

Otherwise it wouldn't have cruft like Microsoft Copilot on there.

@sos How? With whatever tooling they use to do something like this.

Why? Because they’re allowed to.
Underlying reason: Capitalism.

Not at all surprising, is it? If you allow someone to do something, they will at some point.

@sos they really want number to go up, huh
@sos Also onto Windoz 10 without permission at all.
@sos how many people use windows server anyway?
@error420 @sos my small 5 people company alone takes care of like 100+.... (Including virtual windows servers, running on a windows server hyperV)
@sos This is absolutely insane wtf

@sos

I'm now down to my one last Microsoft app, which runs on a virtual Windows 10 machine. I am looking forward to never seeing anything of theirs again...

@Walrus @sos One app to bring them all, and in the darkness bind them?

Which one is it?

@miblo @sos

An old version of OneNote, as I have been using it for yonks, and have found nothing better for the job. I think M$ bought it, rather than writing it, and they've been adding unwanted extra "features" until the latest version is unusable...

@Walrus @sos Oh cool, seems pretty sweet. I've wondered about trying an outliner – https://en.wikipedia.org/wiki/Outliner – for my own notes, but still just do it all manually in text files! Even with the occasional table like this:
Outliner - Wikipedia

@sos at least it is uninstallable, unlike other apps?
@sos fking malware behaviour
@sos @pluralistic #Alt4You image description (you may be able to update your post to make it more accessible): “I assumed this was just bait, but I logged into my 2022 Server and it looks like it just installed itself today,” reads post with screenshot of copilot in list of software from a post by shuv1337

@sos I also get a warning about #MS installing some chat bot into my chrome browser every couple of months.

Something about "#BGAUpsell " - but so far I couldn't find much about it. It doesn't seem to be a virus... but one would expect an out cry about MS hijacking other programs. I guess that's normal now.

https://mastodon.coffee/@oxpal/110899517738380667

Thomas Schmall (@[email protected])

Attached: 1 image I'm getting #Bing Popups on my PC. And the only explanation I found is that it's truly #Microsoft installing Adware and hijacking #GoogleChrome settings via #MicrosoftEdge updates. I'm not sure though, since I see no outcry about this #BGAUpsell app. This just can't be legal, right?

Mastodon ☕
@sos thanks for the headsup - installed, uninvited, on 2024-03-29 and removed by me, today.
@sos People running a gaming OS on a server probably knew what they were getting themselves into. Hopefully.
@xerge a licence for this costs 1000 euros, I don't think anyone knew :P
@sos I can only laugh. Wtf were they thinking? Who sat in the meeting where this was approved? It’s. Just. Words fail me.
@sos
They don't care about you, their customer

@sos I don't believe MicroSoft can make a lightweight telemetry tool and less one that fits into 8KiB of storage.

It's a stub as of now but they can probably update the app and tell the user that they already had the app installed.

Or it could be an add-on for Microsoft's ADs in Windows engine so they can advertise CoPilot in the Windows file explorer and MS Paint.

@sos My guess is they aren't enabling Copilot on servers at least for the time being, but they don't want to do the work on the dependencies on it that will crop up in other Windows components, so they just bundle the whole thing.
@sos Or it's a screw up and they pushed it by mistake.
@sos I should say I like Copilot and use it all he time on my personal machines despite the downsides. It should be very easy to remove though, and it isn't.
@sos tfw you don't read the EULA...
@sos server needs autopilot few minutes before the crash ;)..

@sos Such slimy behavior.

Does anyone have a link to a well-researched article about what data exposure there is from this if you don't actually use Copilot?

@sos 'Windows' and 'server' in one sentence 🤣
@sos kind of interesting to see they're doing the android thing of hiding the resource use of Really Heavy Software behind "oh that's actually the SYSTEM" like how Google Play Services doesn't use your battery or disk space, it's the ANDROID SYSTEM
ignore that if you rip it out your battery life triples and you have twice as much space

@sos

oh hey new era of "AI computing" lol. Also a new era of data privacy being compromised.