Microsoft’s Recall feature is still threat to privacy despite recent tweaks
Microsoft’s Recall feature is still threat to privacy despite recent tweaks
adguard.com
Microsoft’s Recall feature is still threat to privacy despite recent tweaks
89 comments
-
-
The worst thing about it is, even if you switch to Linux for privacy yourself, you'll also need your friends to switch as well, otherwise if you message them on their desktop, they're a liability, as the damn recall will be there too, leaking your data.
It'll be hell for activists.
-
Funnily enough, Signal has circumvented the issue by marking their chat window as DRM content, making it invisible to Recall.
-
Lol
-
-
They didn’t circumvent the issue - they did what Microsoft tell developers to do in regards to their programs and recall lol.
-
-
-
Um, the core feature is privacy invasion. It does what it says on the tin.
It's fine if some people want that functionality, as long as it's not enabled by default.
-
One could argue that it's a feature that could be done on-client without sending to a server. Or with its server component doing nothing more than syncing with E2E encryption.
-
I have zero interest in Recall, but I thought it was already done on-device? IIRC it always was that way, which is why it's only available on new computers containing dedicated "neural coprocessors" I believe was the term.
Now given that it's closed source, you have to trust that they aren't silently sending data back to themselves - which is where my problem lies, I don't trust them in the slightest.
-
Recall is done on-client.
-
-
-
Part of why i knew so-called "digital rights management" was fucking bullshit was because very little software ever came out that empowered me to manage MY OWN rights in the digital space.
I need there to be FOSS applications that allow me to root-level BLOCK applications from perceiving what I'm doing, to just fucking SANDBOX ABSOLUTELY EVERYTHING BY DEFAULT and let me whitelist what specific things are allowed to directly access the hardware.
Sadly I am not as tech savvy as I used to think I was. I might've been technologically clever twenty years ago but I hadn't managed to keep up... I think what I've described might be referred to as a "hypervisor"? And I'm told it's an overbearing, clumsy, heavy-handed overkill measure that would be difficult to implement and make everything a pain in the ass to do. So ... shit, man, I dunno... i'm just so damn tired of my hardware being bossed around by people I didn't authorize.
-
Qubes OS ?
-
I prefer the term Digital Restrictions Management.
-
Maybe it's time you invested some time in finding alternatives that let you stay in control of said hardware. I know time is in short supply for all of us, so consider your priorities.
-
A "hypervisor" is more applicable to servers than anything else, but I agree with you on everything else. That first sentence, man... Big companies get DRM for their property, so where's my DRM, y'know?
Fucking maddening.
-
Programs ran through Flatpak can only access permissions and directories that it has explicit permission for. This is perfect for a very small program that only does one thing, it can get rather awkward when you need it to access multiple storage volumes. For example, I wanted to have my Steam games stored on different hard drives, but they were never visible through Steam. I had to override the Flatpak permission to give access to my mounted disks for it to work.
-
The fact that we can choose to enhance the permissions beyond their default scope on a case by case basis is powerful.
-
-
Write your own OS and software then. Your hardware is running someone else’s software otherwise, so no you don’t get to control every aspect of what it does.
-
-
-
Yes.
Worth it.
-
Honestly it's what drove me over the edge. I'm on endeavorOS and it has been great honestly. Would recommend 👍🏻
-
-
I've disabled windows update completely so I can pick and manually dl updates. Never going to put that recall shit on my pc.
-
How'd you do that? I've made registry tweaks, group policy tweaks, etc and my windows machine still eventually hits a limit where it forces updates around the 12 week mark. Granted it's still longer than before, it isn't completely disabled.
-
At that point it's easier to install Linux.
-
around the 12 week mark.
Not all computers need to tell the date & time, just uninstall clock.exe
-
It was a combination of things between policies and taking over folder and file permissions. I can look up the specifics I used if you are looking to replicate it. It's a bitch to undo unless you write down everything you change.
-
-
I've disabled Windows completely so I can be safe and sound. Never going to put that shit on my PC.
-- sorry, it seemed funnier in my head.
-
-
What I don't understand, is what I would need and use it for? Never in my life I thought "damn if only I had a screen recording of everything I did 1 week, 1 month or 1 year ago". Like I don't get the use case, ignoring anything else. There is no use case.
I can view my terminal history and my recently accessed files. I have version control with git where I want and need it.
There is no use case.
-
So you’ve never wanted to find an article/headline that you vaguely remember seeing? Or a product that you looked at? Or a picture that you looked at?
There absolutely is a use case for full reachability of everything you’ve done on your computer. Git commits and terminal history and “recent” files list don’t even come close to providing the same thing lol
-
It's true that there's some usefulness in recollection, but geez I find myself digging through my browser history and being absolutely lost... whether it's an article, video, online store product, anything. Then I usually just re-search for whatever it was from scratch 🤷♂️
-
-
-
OK, so... where the hell is Recall?
I have a Copilot + device. I am typing this in one, in fact. Recall does not seem to be anywhere to be seen. They added a deployable Google Lens-style "highlight a thing for us to review" thing. It was so intrusive and easy to deploy by accident I got a pretty good notification that I should go turn it off. Maybe that was part of the Recall rollout?
Incidentally, this piece is... a bit weird. Not only is it an ad, but the concerns they seem to flag as still existing (presumably to sell you their security subscription) seem to be that there is no biometric unlock and just the system PIN and that they don't trust Microsoft on principle. The second is up to you, but the first doesn't really work for me. Not only is the PIN a valid override to biometrics across the board in general (Windows defaults to that when biometrics fails), but it's more secure on principle, since it can't be entered by accident or by force.
I just don't think the featue is particularly useful for how much potential it has for accidental misuse (even if they never see the data and they keep it entirely secure). It's not the only one of this class, or even Microsoft's first attempt at this (a similar feature shipped with Windows 8). It's certainly become more of a meme than anything else at this point.
-
Yeh the entire article is just an ad for AdGuard, using FUD to sell their product.
-
-
Another great reason to switch to Linux. Fuck this shit
-
This is just a thinly veiled ad for AdGuard.
-
If only we could have a response from an independent security researcher instead of a product, that would be great.
-
-
To the surprise of nobody… 😆
-
No shit.
-
For windows users
89 comments
Of course it is. It's invasive by design. The "recent tweaks" were because of backlash, but now that's died down
I am surprised by how rabid the Recall backlash continues to be compared to similar features elsewhere. Apple's equivalent, in particular, seems to not be a concern to anybody. I don't have anything Apple, so I'm not sure if they ever rolled this out, but they sure announced it to a whole bunch of crickets.
In fairness they’re not the same thing - recall records everything you do making a nice single honeypot of all your actions. Apple’s thing is really just a search bar that can reach into apps like email, calendar, etc - it’s not recording your bank logins. Google Play Services tracks everything you do on Android and sells it to advertisers.
Interesting, I hadn't seen news about that Apple feature before... There seems to be a lot more press around Recall, which in turn amps up the amount of consumer attention and backlash.
That said (and I wouldn't want Apple's "semantic search" even if I had an Apple device), I'd still trust Apple more to manage the dataset securely compared to Microsoft. The Apple ecosystem is far more strictly controlled, whereas in Windows it's more of a free-for-all (most people just used XP as an administrator, the UAC could be easily disabled on Windows Vista and 7, etc.). Especially with Microsoft's move to put advertising in Windows 11 and complete lack of security measures in the initial version of Recall, it is very hard to trust Microsoft in this regard.
that’s because “Apple Intelligence” is nearly 100% vaporware
It is a stereotype but Apple diehards seem to go along with whatever Apple pushes, and people who don't like them don't use them anyways. Meanwhile Windows and Linux seems to have more people who are nitpicky about what they use, so group that tends to complain is going to be complaining more loudly about the OS they use would be my guess.
Nobody acturally expects privacy from Apple, if you use an Apple device they know Apple has all your information.
Well:
That's because when it comes to Apple, hypocrisy is the way of life.