Live data from Hacker News

Microsoft will switch off Recall by default after security backlash

wired.com

151–160 of 572 posts

Re: Microsoft will switch off Recall by default after security backlash

#151

It's sad that Microsoft (or any big company) wouldn't take a step back from such privacy intrusive or anti-user behavior unless there's a public backlash. Can't we just have a peaceful life without wasting time on constantly following and analyzing every single move from these companies?

[dead]

Re: Microsoft will switch off Recall by default after security backlash

#152

In all the MS Recall drama, I've yet to hear or read one single person utter something to the effect of "Wow - great!!! - I've been waiting for something like this for years! This will solve at least one of the major issues I face regularly!". In fact, it seems to me the only people that really want this feature are the ones trying to push it down everyones collective throat. Why is MS pushing something so hard when…

On the contrary, executives at the office have been coming to me about various such tools for months now. It really picked up last fall.

Microsoft was last to the party.

Re: Microsoft will switch off Recall by default after security backlash

#153

It could still just be switched on and used to spy on an unknowing spouse for example... its just so creepy. Who asked for this feature?? No one did.

In theory you could have always just installed a screen recorder to record your spouse even before this.

Re: Microsoft will switch off Recall by default after security backlash

#154

Earlier quoted context omitted.

Browser history doesn't show my passwords, everything I typed out and did on the machine. In comparison browser history is nothing.

You’re missing the point. An attacker can only see the passwords in your Recall database if they have root, but if they have root there are (and always have been) a thousand other ways they can get your passwords. There is no new attack vector being introduced by Recall.

It is possible to access to Recall database without admin access.

https://x.com/GossiTheDog/status/1798832390070276500

Re: Microsoft will switch off Recall by default after security backlash

#155

In all the MS Recall drama, I've yet to hear or read one single person utter something to the effect of "Wow - great!!! - I've been waiting for something like this for years! This will solve at least one of the major issues I face regularly!". In fact, it seems to me the only people that really want this feature are the ones trying to push it down everyones collective throat. Why is MS pushing something so hard when…

Honestly this whole thing reeks of some sort of data grab dressed up as an "innovative" new feature. They probably wanted a bunch of new training material for their AI projects, and this is what they came up with.

Re: Microsoft will switch off Recall by default after security backlash

#156

It's sad that Microsoft (or any big company) wouldn't take a step back from such privacy intrusive or anti-user behavior unless there's a public backlash. Can't we just have a peaceful life without wasting time on constantly following and analyzing every single move from these companies?

Microsoft will go ahead with Recall, will temporarily make it opt-in. Eventually, when weather is good they’ll default it to opt-out. If new backlash ensues they’ll PR that it was a a bug and turn it off only to bundle it later with something that can’t be turned off.

At this point MS is a toxic company that you’re better off, as a user, to steer away from.

Re: Microsoft will switch off Recall by default after security backlash

#157

I still don't understand how this got this far. Enabling this in any corporate setting would be a compliance nightmare.

The corporate settings that care already do this to the employee screens ...

Compliance doesn't say "company can't watch employee" -- in many cases it mandates surveillance.

This just lets the employee leverage that too.

Re: Microsoft will switch off Recall by default after security backlash

#158
Microsoft keeps attempting to violate HIPAA on my clients’ behalf. Before this, they turned on OneDrive backups via updates, and began moving sensitive documents onto their servers without prior authorization or consent. I documented the incident, because I honestly wasn’t sure whether or not a lawsuit would result from it. I notified Microsoft, but never got a response.

Re: Microsoft will switch off Recall by default after security backlash

#159

Earlier quoted context omitted.

Yeah, I think this entire debate is uninformed hysteria and manufactured outrage. "If an attacker has administrator access, they can see everything you have done on your computer!". OK? That has literally always been the case? "Attacker is root" is game over and always has been. The original writeup from DoublePulsar tried to justify that Recall is somehow different from other such scenarios, but I found it totally u…

Recall FEELS like being watched. Your browser history does not.

To be clear, I am not in favor of Recall or dismissing its intrusiveness. However, the correct comparison is not just "browser history". Google is also tracking your search history, passwords (built-in password manager), location history (Google Maps), ad clicks, and more. All-in, it's a LOT of data.

Re: Microsoft will switch off Recall by default after security backlash

#160

It could still just be switched on and used to spy on an unknowing spouse for example... its just so creepy. Who asked for this feature?? No one did.

The AI training team asked for this feature

(I’m being a bit provocative and assume today it stores locally only but a future TOS change will secretly and “anonymously” upload your data ‘for training purposes’ —- that’s what everyone else is doing these days)

Post reply on HN