Kevin BeaumontMay 21, 2024

For those who aren’t aware, Microsoft have decided to bake essentially an infostealer into base Windows OS and enable by default.

From the Microsoft FAQ: “Note that Recall does not perform content moderation. It will not hide information such as passwords or financial account numbers."

Info is stored locally - but rather than something like Redline stealing your local browser password vault, now they can just steal the last 3 months of everything you’ve typed and viewed in one database.

Show threadKevin BeaumontMay 21, 2024

I've written up my thoughts on the Copilot Recall feature in Microsoft Copilot+ PCs

I think it will enable fraud and endanger users, and is not the sign of a company who are committed to security first.

https://doublepulsar.com/how-the-new-microsoft-recall-feature-fundamentally-undermines-windows-security-aa072829f218

How the new Microsoft Recall feature fundamentally undermines Windows security

Yesterday, Microsoft CEO Satya Nadella sat down with the media to introduce a new feature called Recall, as part of their Copilot+ PCs. It takes screenshots of what you’re doing on constantly, by…

DoublePulsar
Show threadKevin BeaumontMay 22, 2024
The UK’s ICO have opened an investigation into Copilot+ Recall. https://www.bbc.co.uk/news/articles/cpwwqp6nx14o
Microsoft Copilot+ Recall feature 'privacy nightmare'

The ICO wants to know the safeguards around Recall, which can take screengrabs of your screen every few seconds.

BBC News
Show threadKevin BeaumontMay 22, 2024

Copilot+ Recall has been enabled by default globally in Microsoft Intune managed users, for businesses.

You need to enable DisableAIDataAnalysis to switch it off. https://learn.microsoft.com/en-us/windows/client-management/manage-recall

Manage Recall for Windows clients

Learn how to manage Recall for commercial environments and about Recall features.

Show threadJayMay 22, 2024
@GossiTheDog how do I tell if my workplace PC is Intune managed?
Show threadsen

@jaystephens Settings: Accounts: Access work or school: here it’ll say something along the lines of “Connected to Blah Azure AD/Entra.” Beyond that, Recall is currently limited to Copilot+ ARM based devices.

@GossiTheDog

May 22, 2024 at 1:50pmWeb
Show threadJayMay 23, 2024
@sendai @GossiTheDog thanks. I did it the other way by simply chatting to one of the sysadmin team responsible for group policy, AD, etc... but I'll have a look there too so I know what to look for in case this gets rolled out to us.
Show threadsenMay 23, 2024

@jaystephens @GossiTheDog It does need sufficiently performant neural network blocks on die, so it’s currently in something like an open beta on Microsoft’s latest ARM based devices.

But that’ll expand as the NN blocks in AMD Ryzen 8000G and any recent discrete GPU can do the same thing, and non-G Ryzen 9000s will likely have sufficient performant NN block in their IO chiplets, while Intel’s range will have them by their 15/16th gen.