For those who aren’t aware, Microsoft have decided to bake essentially an infostealer into base Windows OS and enable by default.
From the Microsoft FAQ: “Note that Recall does not perform content moderation. It will not hide information such as passwords or financial account numbers."
Info is stored locally - but rather than something like Redline stealing your local browser password vault, now they can just steal the last 3 months of everything you’ve typed and viewed in one database.
I've written up my thoughts on the Copilot Recall feature in Microsoft Copilot+ PCs
I think it will enable fraud and endanger users, and is not the sign of a company who are committed to security first.
Copilot+ Recall has been enabled by default globally in Microsoft Intune managed users, for businesses.
You need to enable DisableAIDataAnalysis to switch it off. https://learn.microsoft.com/en-us/windows/client-management/manage-recall
@GossiTheDog "organisations that aren‘t ready to use AI for historical analysis"
The *gall* to frame this as innevitable.
Also saying the parts out out where "spying on workers" and "replacing workers" is the entire point.
Yes, this "inevitable" thing instead of choice shows the total lack of respect for consent in modern tech companies.
They really think they can take whatever they want, and no one can stop them.
Kevin Beaumont
Sevoris
FediThing 