Wait, what. Windows 10 sends info on USB devices plugged in directly to Microsoft?

And it does that using pure HTTP?
https://pastebin.com/ttYp5rLg

You gotta be kidding me.

#InfoSec

@rysiek
As early as Windows 7, when you opened up the Devices and Printers control panel, there was an option to "Obtain device information from the internet" (or some wording to that effect) which would retrieve graphics for printers and such, so they wouldn't show up with generic icons. I wonder if this is *that*, but perhaps without asking for permission, and of course being done insecurely as it may have been all along.

@rysiek
More information:
https://docs.microsoft.com/en-us/windows-hardware/drivers/install/device-metadata-packages

Overview of the Device Metadata System > Device Metadata Retrieval Client
"When the user opens the gallery view window of the Devices and Printers user interface, the DMRC [...] checks the local computer's device metadata cache and device metadata store. If the device is newly installed [or] scheduled for a periodic metadata update, DMRC queries the Windows Metadata and Internet Services (WMIS) website [...]"