Hey so,
This windows recall thing?
Enables domestic abuse.
Hey so,
This windows recall thing?
Enables domestic abuse.
Like, flat-out.
This 'feature' means that someone in an abusive relationship now has a canonized part of the OS monitoring their activities that can be then invoked and studied by the abuser.
Ain't no amount of -group policy- bullshit gonna fix this,
because Microsoft -doesn't allow- the granularity of administration required to defuse this for non-corporate users.
"Use Linux" is not an appropriate response.
People do not always have the agency to choose their operational environment and you cannot fix structural unsafety with individual choice.
This is not a jape nor a joke, and I am not willing to countenance this as an argument.
Do not perpetuate abusive situations by blaming a victim for the environment they are in.
How -do- you fix this?
You do not put the capability to automate screen-scraping into the OS as a canonized feature.
Yes, this does not stop screen scraping from being possible - it's been around for years.
Disallowing it from the canonical image -of- the OS, however, means that there is an increased barrier in the way of implementing this: an abuser will need to learn how to implement this, and will need to rely on third-party software not integrated into the OS as expected functionality.
This in turn means that abuse victims are able to rely on tools already in-use to remove third-party software from the computer in order to have more assurance of private operation.
Yes, no single measure is capable of ensuring safety.
This is why it's a security -system- and not a security -item-; systemic effects require an understanding of the entire context in order to evaluate the safety or unsafety of the system.
@anniethebruce @munin What are these things that would close a gap, exactly?
If you say Unity I am going to scream.
@munin The structural unsafety is indeed terrible, and absolutely needs to be called out.
On the other hand, I think relatively few people even have awareness that there *might* be a choice that they can make. Maybe they ask, and the answer is still no. Maybe, just maybe, the awareness leads to being able to make a constructive choice.
Pointing out possible alternatives is still useful.
No.
Knowledge that alternatives theoretically exist is not helpful when a victim does not have the agency to apply that change.
Systemic unsafety -cannot- be addressed by individual choice, because individual choice can be coerced or prevented.
Unsafe infrastructure is not fit for purpose.
@munin @tim_lavoie I can't disagree that unsafe infrastructure is the issue but
1. Microsoft doesn't care and I don't see how naming the problem will be sufficient to get the OS changed
2. The abuse victim in the mooted scenario still needs the technical know how to use third party tools to prevent her technically savvy abuser doing the same thing via his own third party program
Given that, I'm not convinced there is any practical difference between advocating Microsoft roll back their system choices and abuse victims learn how to do whatever they would have to do to protect themselves from third party tools (being a total computer ignoramus I can't even describe it) and learning to install some user friendly version of Linux
I do agree that the problem is a systemic one and so needs Microsoft to change course. I just don't get the hostility to people willing to help others embrace alternatives.
I had several people pop up saying "use linux instead" and decided to textually indicate why that was not acceptable.
Yeah. Been chewing on how to communicate "personal choice cannot fix structural unsafety" effectively.
@munin For many people, being advised to use Linux is about as helpful as being advised to live in a yurt.
It's not that they can't see the advantages of living in a yurt. They may even find the yurt-dwelling lifestyle intriguing. But they can't see how they would ever be able to rearrange their life such that a yurt is an option.
So, please read upthread for context: this is about domestic violence situations, where the persons in question may not be able to change the OS of a computer.
@munin Understood. I meant to express agreement with you that “Use Linux” isn't an acceptable response. As you say, people don't all get to choose what OS they use, in the same way that they don't get to choose whether to live in an apartment or a yurt.
I appreciate that it's a bit of a tangent from your main point in the rest of the thread, which I also agree with.
They make up all kinds of 'but awareness of options' excuses but it's ultimately variously flavored victim blaming and I'm not at all interested in arguing with their choice to enable abusive behaviors.
@munin
If we can't laugh at horrors even a little, then we're all going to go crazy.
It's not a _good_ argument, but then, neither is anything else; Microsoft will do whatever they're going to do, and they'll probably ignore the abuse potential of their tech because, well, *gestures at the entire history of computing so far*
Maybe they'll back off, maybe they won't, but there's a very real chance we will be stuck here doing harm reduction. As we always are. And we should be prepared to do it as well as we can.
@mav @0xabad1dea like how they got slapped down with antitrust penalties 20-25 years ago over their abusive treatment of Windows users and Explorer.
Now they're doing it all over again with Win 11 and Edge... They really should be dragged into court over that again.
@munin @gsuberland Honestly believe that the reason you get so many „use X option“ answers is because people focus on the technical part of the recall discussion. Even MS themselves don’t get it…
There is no option or freedom of choice under an abusing relationship, any kind of it, even the thought of that makes you tremor.
On top of that, MS is completely tone deaf on even more, real issues with this „feature“ ( that noone asked for ). Sharing the computer in the same household that is struggling financially and has no knowledge of how to use User profiles, The very Common „let me remote connect to your PC dear lady so we can fix my wrongly sent money to you for MS customer support“ call scams, even TSA asking you to open the laptop in front of them and provide the password or else… EVERYTHING you have done in the past ( three months ? ) will be on the plate for people to take and use against you, and no, there is no such thing as global ethical values.
All of those are very common scenarios that noone in MS prioritises over ROI in AI and are indicative of how tech companies function, they are not there anymore to provide a tool to improve your life with, but act both as a (re)marketing device and a will enforcement one…
I wish i had an answer but i have none at this point, i feel depressed about how we, even now in 2024, seem to have such a low priority on our society needs compared to profit.
countries that chose us oss are looking for troubles ...
Alright.
Use Linux if you can.
I understand that not everybody can use it but it is certainly the best advice.
It is saying: Stop the water where it's leaking.
It is easier than cleaning up the mess after you're flooded.
For those who must use Windows 11 - here is how to disable Recall:
- Open a command prompt as Administrator (Local Admin should do)
- Type: Dism /Online /Disable-Feature /FeatureName:Recall
Disclaimer
Do understand and Please Read - This may hinder some features of the new file explorer. Because Microsoft never learns.
@jeff @munin
I use Directory Opus, xplorer² is pretty good too. I've heard of xyplorer but not tried it, and there's another that's in pre-release that looks really good but I can't remember the name
edit: I found it! it's been released too - https://files.community/
Exactly. No amount of individual "choice" matters when the structural situation is comprehensively unsafe.
I'm genuinely curious to hear from corp lawyers, tbh. I have an -idea- about what they'd say, but I would genuinely value that point of view for this.
@munin Yeah, I don't have any that deal in corporate law to refer to, unfortunately.
But given the corp infosuck policy training I have to go through every year, I'm pretty certain my people would be screaming holy hell about discovery. Hell, I'm surprised they haven't disabled the Spotlight feature on my Mac, or whatever the Windows equivalent is.
Oh hells, I hadn't even gotten to considering the 'discovery' threat surface to this. Yowza, that's gonna be spicy as fuck.
@munin Ya think, DiNozzo? 🤣
Discovery was the third thing that came to mind, after "advertising" and "AI training for *redacted* purposes".
In fairness, my situation's a lot more compliance and malware research flavored, and the DV implications have me -extremely- shook given some past context.
But that's what friends are for, to give different points of view.
@munin Like you not thinking discovery, I hadn't thought of DV implications. Sweet Tester.
Maybe I should take every computing device newer than my 40-year-old pocket calculator out into the driveway and set it on fire now.
Just to be on the safe side.
Problem is, can't really participate in society -without- modern information processing devices - try getting your tax info from the IRS, for example.
@munin Dude, we both hang in the same circles of people.
Remind me again how participating in society any more is a good idea? 🤣