It's sad that Microsoft (or any big company) wouldn't take a step back from such privacy intrusive or anti-user behavior unless there's a public backlash. Can't we just have a peaceful life without wasting time on constantly following and analyzing every single move from these companies?
Have you not seen Windows 11 lately? I have, and I am still happy to be on Linux as my daily driver for over 20 years now.
Microsoft will switch off Recall by default after security backlash
181–190 of 572 posts
Re: Microsoft will switch off Recall by default after security backlash
#182Microsoft keeps attempting to violate HIPAA on my clients’ behalf. Before this, they turned on OneDrive backups via updates, and began moving sensitive documents onto their servers without prior authorization or consent. I documented the incident, because I honestly wasn’t sure whether or not a lawsuit would result from it. I notified Microsoft, but never got a response.
Re: Microsoft will switch off Recall by default after security backlash
#183Will have to wait and see if the extra security measures actually improve anything or not. However regarding it being opt out… what would prevent a virus from just enabling it on a bunch of machines silently. Sure it would be caught but the damage done and most won’t be bothered to go in and disable it after. Or Microsoft just decides they need to really market the hell out of AI and it gets turned on my default anyw…
It will be re-enabled accidentally by an update anyways.
Re: Microsoft will switch off Recall by default after security backlash
#184I still don't understand how this got this far. Enabling this in any corporate setting would be a compliance nightmare.
The corporate settings that care already do this to the employee screens ... Compliance doesn't say "company can't watch employee" -- in many cases it mandates surveillance. This just lets the employee leverage that too.
Re: Microsoft will switch off Recall by default after security backlash
#185Earlier quoted context omitted.
Your browsing history is unlikely to contain personal information, secrets, porn images etc. And if you use Chrome, they get your full browsing history by default. I get your point, but Microsoft's Recall can capture anything onscreen - emails, personal info, porn, passwords and the like. And it feels, bizarrely for 2024, that little thought has gone into privacy or security.
> that little thought has gone into privacy or security. I think the thought is proportional to the amount of thought a non-tech customer will put into it. Nobody seems to care about or understands privacy these days. Everyone knows they're being tracked everywhere they go physically and on the web. People use their real names, address, etc for every junk service they sign up for, without seeing any reason not to. If…
That sounds good to some people. But if I mentioned it to most people in my family they would probably be rather weirded out by it. They probably also would have no idea of the scope of the size of it and how it is being used against them.
Re: Microsoft will switch off Recall by default after security backlash
#186In all the MS Recall drama, I've yet to hear or read one single person utter something to the effect of "Wow - great!!! - I've been waiting for something like this for years! This will solve at least one of the major issues I face regularly!". In fact, it seems to me the only people that really want this feature are the ones trying to push it down everyones collective throat. Why is MS pushing something so hard when…
Security nightmare aside, it seems like it would be handy all the time. Surely everyone has had trouble finding a website or document or email again, days or weeks later?
Re: Microsoft will switch off Recall by default after security backlash
#187Earlier quoted context omitted.
Your browsing history is unlikely to contain personal information, secrets, porn images etc. And if you use Chrome, they get your full browsing history by default. I get your point, but Microsoft's Recall can capture anything onscreen - emails, personal info, porn, passwords and the like. And it feels, bizarrely for 2024, that little thought has gone into privacy or security.
> that little thought has gone into privacy or security. I think the thought is proportional to the amount of thought a non-tech customer will put into it. Nobody seems to care about or understands privacy these days. Everyone knows they're being tracked everywhere they go physically and on the web. People use their real names, address, etc for every junk service they sign up for, without seeing any reason not to. If…
Privacy is not a binary concept. There are actions and information that some people are ok being public, and there are some they prefer to remain private.
What is not OK is spying and exploitation. I should know what data you’re collecting and preferably specify which I’m ok with. I also should know what is intended for and preferably for most of it to be anonymized.
Most people expect reasonable privacy policies from companies and they believe that there’s some regulation in place.
Re: Microsoft will switch off Recall by default after security backlash
#188Re: Microsoft will switch off Recall by default after security backlash
#189It's interesting to compare this to the Chrome/Safari/Edge browsing history, which is stored in an unencrypted SQLite database, and tracks what you do for the last 90 days. It's just a bit less visual, Incognito/Private modes work, and some users clear it more often. But a whole lot of the surveillance attacks people imagine about Recall apply just the same to the browser. I think it's the "little brother" casual att…
Your browsing history is unlikely to contain personal information, secrets, porn images etc. And if you use Chrome, they get your full browsing history by default. I get your point, but Microsoft's Recall can capture anything onscreen - emails, personal info, porn, passwords and the like. And it feels, bizarrely for 2024, that little thought has gone into privacy or security.
Re: Microsoft will switch off Recall by default after security backlash
#190Earlier quoted context omitted.
Without Recall, an attacker needs to get a program to stay resident in memory to log keystrokes, screen contents, etc. for an extended period of time without getting detected. With Recall, they can get the same end effect by exfiltrating the Recall database file whenever it's convenient (i.e. an infected version of a text editor could send it while pretending to check for updates). This significantly lowers the barri…
> Without Recall, an attacker needs to get a program to stay resident in memory to log keystrokes, screen contents, etc Or it could just steal your cookies which are out there in the open.