Cool it with the attitude. If it's so easy to find this evidence, you could have posted links yourself to it instead of whatever the hell you think this is. Public shaming?
There's plenty of easily proven reasons to hate Microsoft without pulling stuff out of our collective asses. Like the collection of image thumbnails I already mentioned, which as I said was confirmed (as much as analyzing SSL encrypted web traffic can be without breaking the encryption) by traffic analysis.
I have a decade of experience doing tech work in Windows environments. More than half of that time now in systems administration and infrastructure "engineering". I'm better versed in Microsoft's bullshit than the average bear, and I'm definitely not trying to argue they're great.
Proof of this sort of thing can make a career in infosec, so I don't have any issues believing that people have been digging deep for any evidence of this. If direct evidence is out there, you're right that it shouldn't be hard to find.
Did my research, I'm not finding the hard evidence.
That said, all I'm finding are unsourced insistences that it exists, and that those particular settings to disable it. I've done writeups before on Wi-fi security citing white papers and thesis research. Usually I have no issues finding the hard evidence, even the crazy cryptographic math fomulae behind certain cryptography related security issues.
For this though? From what I can find, there's no direct evidence this is a keylogger in the traditional "stealing your data" sense. There's no evidence of the typing data being stored on disk or transmitted back to "home base".
I'm also finding plenty of conversations in information security communities online (and a few news articles) saying what I've already said here. It seems to be clickbait headlines that have turned into an urban myth of sorts.
What I've found in regards to it not being a keylogger (in so far as you can attempt to prove a negative):
- Reddit post about how to disable the predictive text features, calling it a keylogger. Lots of comments pointing out the misleading wording of calling it that, that predictive text is common, that it asks you if you want it or not during install, and that it doesn't store the stuff anywhere for people to be able to use it to look at previous input.
- Reddit r/netsec discussion of reasons pointing towards Windows not keylogging everyone, and the types of signs security professionals and others would look for as proof of it. Signs that aren't there.
- Another reddit post asking about the truth of the keylogger headlines, asking for any technical evidence, much like I am. None provided.
- Specific comment on a reddit post about telemetry in the Calculator application, where someone actually looks at the damn .cpp file under the hood with the data logging functions and finds that they are only active with a debugger process attached. Notes that this is pretty common practice with a lot of programs to ease debugging.
- Stack Exchange discussion of the keylogger claims/headlines. Same shit, notably misleading headlines, no hard evidence known.
The best evidence in favor of the keylogger are discussions about keylogging in the Windows 10 Preview builds, which Microsoft was explicitly open and direct about. But even this is somewhat suspect, and there's no evidence even close to what was found in the preview builds that this is occurring in the prod releases.
There's also a mountain of articles like this one that again, point to the written privacy policy and settings like they're definitive evidence, but again I'm finding no WireShark analysis, no testing through multiple VMs or a control install and an install with tons of keyboard input, no actual testing and results, no snippets of code from any of the source code leaks in the last decade. No hard proof.
So now I've danced to your tune. I've "done my research".
If this is so damn obvious, please for the love of all that is holy just link me the damn receipts. I promise I can handle whatever hacker writeups, white-papers, etc that you could throw at me. I want to see them. Please don't blueball me.