Microsoft will try the data-scraping Windows Recall feature again in October

Initial Recall preview was lambasted for obvious privacy and security failures.

https://arstechnica.com/gadgets/2024/08/microsoft-will-try-the-data-scraping-windows-recall-feature-again-in-october/?utm_brand=arstechnica&utm_social-type=owned&utm_source=mastodon&utm_medium=social

Microsoft will try the data-scraping Windows Recall feature again in October

Initial Recall preview was lambasted for obvious privacy and security failures.

Ars Technica
@arstechnica can someone please explain to me what the issue with that functionality is supposed to be in a non-emotional way? My PC already indexes all my files for faster searching and sees all of my browser history for the same reason. How is recall any different? Especially if done locally.

@tulx @arstechnica the main reason it's exceptionally dangerous is because you'll have up to 50 gigabytes of literally everything you've seen on your screen or typed, including passwords and secrets, wrapped up in a nicely indexed big fat blob for the first piece of malware that breaks the flimsy defenses of Windows to exfiltrate.

You can say local and encrypted all you like but it won't be long before an excel macro exploit will come along that scans all your recall data looking for juicy nuggets to dump out on the internet.

It's bad enough if it happens to you, but even worse if it happens to your banker, or Insurance provider, or psychologist or local government official.

If we can't trust Microsoft to keep the data they already collect safe, it doesn't make sense to trust them to collect vastly more and more personal data.