Microsoft will try the data-scraping Windows Recall feature again in October

Initial Recall preview was lambasted for obvious privacy and security failures.

https://arstechnica.com/gadgets/2024/08/microsoft-will-try-the-data-scraping-windows-recall-feature-again-in-october/?utm_brand=arstechnica&utm_social-type=owned&utm_source=mastodon&utm_medium=social

Microsoft will try the data-scraping Windows Recall feature again in October

Initial Recall preview was lambasted for obvious privacy and security failures.

Ars Technica

@arstechnica

Linux has been my answer to Microsoft since 2003.

@marc_w @arstechnica I finally switched to a Linux distro for my gaming pc. Won’t go back.

@arstechnica
Thank you, Microsoft, for Windows 11 and 'Recall', thus making Linux the only reasonable choice.

By October 15th, 2025, I will have (somewhat ironically) defenestrated my final Windows machine.

@arstechnica can someone please explain to me what the issue with that functionality is supposed to be in a non-emotional way? My PC already indexes all my files for faster searching and sees all of my browser history for the same reason. How is recall any different? Especially if done locally.

@tulx @arstechnica Short answer: Want to share your porn history with everyone? How about your last tax return or your banking details? Recall stores all of this making you a BIGGER target for hackers. The original implementation also stored everything in plain sight (no encryption) although the 'addition' of encryption into the next release is potentially somewhat dubious, especially if you share your pc with others.

https://arstechnica.com/gadgets/2024/06/microsoft-makes-recall-feature-off-by-default-after-security-and-privacy-backlash/

Microsoft is reworking Recall after researchers point out its security problems

Windows Hello authentication, additional encryption being added to protect data.

Ars Technica

@tulx @arstechnica hi @tulx , yes the Browser has your browsing history, but does not save what you see. Here is an example the Browser saves (Browser history) that you went to the website of your bank Recall would take screenshoots of everything you see there for example your username, balance, transactions (if you reveal the password (eye symbol) also the password) etc. The same is true for every other website or application e.g web.whatsapp.com projects of your company.

While the data is saved locally it might not be in the future. One of the really big problems eith it the first time was that it was not securely stored (not encrypted).

It also makes it easy for attackers to just grab the recall files and get all the information they could ever wish for.

There are a lot more issues with it for more check @GossiTheDog he made some great toots (and blogposts) about it.

@Luxano @arstechnica @GossiTheDog Thank you for the reasonable explanation! Even though it sounds like finding a way to not make the data such a big target for hacking could be difficult, I'd still use the functionality because if sounds extremely useful for someone who's jumping between many different tasks a day and is struggling to keep it all organised.
This sounds insane for security-focused people, but having a blob of ALL my data/history with an AI attached to it is *exactly *what I need!
@tulx @arstechnica You've already gotten one answer I might have given. But even if you're squeaky clean, giving Microsoft access to the fact you purchased <brand of personal hygiene product> and <book you read out of curiousity but never want to see again> just seems to me like a gateway to further wasting my time with "helpful" ads that don't interest me.
Not to mention things like period trackers that report to the local police if you stop using it (and other privacy invasions)

@tulx @arstechnica the main reason it's exceptionally dangerous is because you'll have up to 50 gigabytes of literally everything you've seen on your screen or typed, including passwords and secrets, wrapped up in a nicely indexed big fat blob for the first piece of malware that breaks the flimsy defenses of Windows to exfiltrate.

You can say local and encrypted all you like but it won't be long before an excel macro exploit will come along that scans all your recall data looking for juicy nuggets to dump out on the internet.

It's bad enough if it happens to you, but even worse if it happens to your banker, or Insurance provider, or psychologist or local government official.

If we can't trust Microsoft to keep the data they already collect safe, it doesn't make sense to trust them to collect vastly more and more personal data.

@arstechnica They REAALLLLYYY want this data.

This, as we say in the industry, is a "clue."

@arstechnica
Qualcomm must be ropeable that Microsoft are sabotaging their Windows-on-ARM attempts with such a huge security hole.

Intel and AMD can breathe a sigh of relief as they have been given another stay of execution,

“The x86 builds of Windows for Intel and AMD processors don't currently support any Copilot+ features”

@arstechnica
I really hate this bullshit, and want no part of it on or near my computer. REALLY starting to wish I wasn't stuck on Windows for my office machine. Pretty much everything they do to it makes it worse.
@arstechnica
The history of Recall shows MS's true commitment to security.

@arstechnica @hacks4pancakes I see this tactic with so many big companies. They want to do something extremely unpopular, news covers it so they backtrack... But only until the public seemingly forgets about it.

Le sigh 💨

@catsalad @arstechnica @hacks4pancakes

One that really made me laugh that was flipped here in the US was the usb C charger by Apple.

Euro said you can't have the lightning cable here anymore so Apple switched to the usb c and the news made it out like it was a favor for us here in the United States.

@catsalad @arstechnica @hacks4pancakes the other half of this is announcing something with hype and a media blitz... But then retract 100% of it silently either the first week or before the launch happens.

Like when companies started slapping "pay with bitcoin" on their sites and their CEO chats about it in interviews.... But then that offering dies on the 3rd day or it literally never happens at all while people are left with the feeling that the service is out there.

Like IBM Watson... 😅

@catsalad @arstechnica @hacks4pancakes To be fair, "coming back" this time as a preview for people who sign up to be early testers. The original plan was for the product to be included on new laptops.
@catsalad @arstechnica @hacks4pancakes isn't that the same with public regulations?
We kill one spy-bill and 2 years later it's back under a new name

@arstechnica Another privacy-busting idea that will be presented as something really hip and happening and we want to sign up to now, or in 3 days' time.

Time to dump MS for good now, I think. I've had years of practice with Linux, after all.

@arstechnica That seems to be a good improvement, and it might be a nice feature for some. But all I see is a product made to try and sell more computers :)
I don't need a new computer, and will probably switch to Linux when support for Windows 10 ends.
@arstechnica Microsoft keeps proving why #Linux is superior to #Windows!
@arstechnica What could Possibly Go Wrong?
@arstechnica Is there anything good, that Microsoft did, let's say in the last 10 years? I can't remember. Help!
@arstechnica oh you mean that feature that was so widely panned/ridiculed that even windows fanboys hated the idea? Yeah, that’s definitely something your customers are begging for!