Live data from Hacker News

Recall for Linux

github.com

171–180 of 228 posts

Re: Recall for Linux

#171
post #118

Earlier quoted context omitted.

It's bad in concept as well. All of that data sent to a third party server is going to be public on the Internet at some point . Security? Don't make me laugh. Countries that required government IDs to participate online have already made this mistake and those IDs have been leaked. Just because it's open source or run by $NOT_MICROSOFT won't make it any safer. The problem with other people consenting to it is that i…

Conceptually a feature similar to Recall doesn't have to involve sending any data to third parties. It should not need to be a service just a piece of software running locally, doing OCR and full text search indexing using local compute. Incidentally I often tell my friends I run an app on my phone that captures my location 24/7 and they would initially sound horrified. But then I tell them all my location data is no…

> I often tell my friends I run an app on my phone that captures my location 24/7 [...] But then I tell them all my location data is not sent to anywhere on the Internet

Your phone is on the Internet.

It takes only one attack (for instance, someone sends you an image which exploits an RCE on the image decoder and then chains into a privilege escalation exploit), or a careless mistake (like marking the wrong folder to be synchronized), or even an automatic update of the app (which adds a helpful "sync across your devices through the cloud" feature or similar), to have all that saved location data copied elsewhere.

You can't leak what you don't have; if you never saved your location history, there's no risk of it being leaked after the fact.

Re: Recall for Linux

#172

These recall apps disappoint me. They screenshot all the time. It's not enough data. They should be adding event driven window history reporting, accessibility tree scraping, and filesystem deltas too. I want a better exocortex!

Look up eidetic os - it runs a micro kernel and captures all the inputs to it, to be able to perfectly deterministicly replay everything. Like running all your programs under a time travel debugger. It’s a cool idea I think!

Stop it. I can only get so nerdsniped this week.

Re: Recall for Linux

#173

Its kind of naive satire that looks silly on second thought. Recall was not bad because of the concept but implementation details, rollout communication and of course the microsoft part. Recall by an open entity with data ownership, security and transparency would have none of those issues and its just a new take on the universal desktop search that is enabled by ai being able to utilise pixels. I refuse to be shamed…

You're criticizing a joke. Worse, you seem to be aware that you're criticizing a joke, and still went through with it.

I also disagree with your premise: Recall by an open-source entity would have many of the same problems. The threat model for most people isn't that Microsoft might tailor ads to their interests. The threat model is that you're giving that ransomware gang, or an abusive spouse, a new tool with devastating capabilities.

Even for people legitimately worried about law enforcement / the government, the same applies. You're gifting your adversary a database of everything you've ever done that understands context and can literally be queried for "just show me the bad things". It's slightly better if it lives locally rather than in the cloud, but it can be used to nab you just the same.

Re: Recall for Linux

#174

Its kind of naive satire that looks silly on second thought. Recall was not bad because of the concept but implementation details, rollout communication and of course the microsoft part. Recall by an open entity with data ownership, security and transparency would have none of those issues and its just a new take on the universal desktop search that is enabled by ai being able to utilise pixels. I refuse to be shamed…

It's bad in concept as well. All of that data sent to a third party server is going to be public on the Internet at some point . Security? Don't make me laugh. Countries that required government IDs to participate online have already made this mistake and those IDs have been leaked. Just because it's open source or run by $NOT_MICROSOFT won't make it any safer. The problem with other people consenting to it is that i…

Not only leaks, but anything on the cloud is subject to be inspected by the government.

Re: Recall for Linux

#175

Earlier quoted context omitted.

Recall is an attempt at a solution all of us have encountered so many times in life.

Please include me (and *everyone I've spoken to, from ignorant users to experts) out of 'all of us have encountered ..." If you use recall, could you explain how? And what solutions does it provide (for you)?

ostensibly - and I'm in your camp, so this is just devilish advocacy - the idea is that you will be wondering, "who said X to me the other day?" or "what was that article I saw about Y?" and you'll be able to just ask one unified search interface instead of searching in 5 different messengers or poring through your browser history.

I don't know that I need that. Certainly not at the privacy cost involved.

Re: Recall for Linux

#178

For the first time since the 1980's I'm not going to be running a PC with a Microsoft OS on anywhere (I dual boot my main desktop since I use it for work and gaming) but the Windows 11 install is getting binned. Tired of having to read release notes carefully and make sure I've done just the right things to stop it doing things I never asked it to do. Good job MS, you lost a customer who's never likely to come back.…

I always wonder just how much gaming has propped up and continues to prop up windows.

Re: Recall for Linux

#179

Its kind of naive satire that looks silly on second thought. Recall was not bad because of the concept but implementation details, rollout communication and of course the microsoft part. Recall by an open entity with data ownership, security and transparency would have none of those issues and its just a new take on the universal desktop search that is enabled by ai being able to utilise pixels. I refuse to be shamed…

It's bad in concept as well. All of that data sent to a third party server is going to be public on the Internet at some point . Security? Don't make me laugh. Countries that required government IDs to participate online have already made this mistake and those IDs have been leaked. Just because it's open source or run by $NOT_MICROSOFT won't make it any safer. The problem with other people consenting to it is that i…

> All of that data sent to a third party server is going to be public on the Internet at some point.

Windows Recall is on-device only (for now). The captures stay on device in a local sqlite database, and all the processing is done on device on the NPU.

Re: Recall for Linux

#180

Its kind of naive satire that looks silly on second thought. Recall was not bad because of the concept but implementation details, rollout communication and of course the microsoft part. Recall by an open entity with data ownership, security and transparency would have none of those issues and its just a new take on the universal desktop search that is enabled by ai being able to utilise pixels. I refuse to be shamed…

> e2e encryption freaks

I refuse to be shamed by AI and surveillance freaks who can't be bothered to take notes of important things and instead demand their and by extension "my" daily computing habits are recorded "just in case."

Post reply on HN