Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Recall for Linux

github.com

Post reply on HN
Print view View original

191–200 of 228 posts

Re: Recall for Linux

#191

Post by wpollock »

cesarb wrote: post #171
kccqzy wrote: post #118

Earlier quoted context omitted.

Conceptually a feature similar to Recall doesn't have to involve sending any data to third parties. It should not need to be a service just a piece of software running locally, doing OCR and full text search indexing using local compute. Incidentally I often tell my friends I run an app on my phone that captures my location 24/7 and they would initially sound horrified. But then I tell them all my location data is no…

> I often tell my friends I run an app on my phone that captures my location 24/7 [...] But then I tell them all my location data is not sent to anywhere on the Internet Your phone is on the Internet. It takes only one attack (for instance, someone sends you an image which exploits an RCE on the image decoder and then chains into a privilege escalation exploit), or a careless mistake (like marking the wrong folder to…

Wasn't there a HN post a few weeks ago, describing how your phone's location can be tracked without anything installed and without leaving any trace on your phone? I think it was an exploit of CSS7 protocol used by networks?

Re: Recall for Linux

#192

Post by danudey »

Tarean wrote: post #129
agentultra wrote: post #113

Earlier quoted context omitted.

It's bad in concept as well. All of that data sent to a third party server is going to be public on the Internet at some point . Security? Don't make me laugh. Countries that required government IDs to participate online have already made this mistake and those IDs have been leaked. Just because it's open source or run by $NOT_MICROSOFT won't make it any safer. The problem with other people consenting to it is that i…

I'm pretty sure recall was specifically a selling point for laptops with ai chips which could do the processing locally and reasonably efficiently? Though storing the data locally still could make getting compromised by a targeted attack more dangerous.

This is correct - it was all on-device, with security guarantees that were instantly proven incorrect. Microsoft withdrew Recall, then brought it back with a newer, more secure implementation that was also proven insecure.

It also claimed that it wasn't going to record sensitive information but it did, to the point where some apps, like Signal, used available Windows APIs to set DRM flags on their windows so that Windows wouldn't capture those regions at all.

What Microsoft could have offered is an easy-to-implement API for application developers to opt into (but users can opt out of), and a blanket recall-esque toggle that users can apply to applications without explicit support. Applications like Firefox or Chrome could hook into the API to provide page content to the API along with more metadata than a simple screenshot could provide, while at the same time not providing that data when sensitive fields/data is on the page (and possibly providing ways for the HTML to define a 'secure' area that shouldn't be indexed or captured, useful in lots of other circumstances).

But, as with everything AI, they don't want users to want it; they want users to use it regardless of whether or not they want it. This is the same reason they forced Copilot into everyone's Office 365 plans and then upped the price unless you tried to cancel; they have to justify the billions they're spending and forcing the numbers to go up is the only way to do that.

Re: Recall for Linux

#193

Post by [deleted] »

sleepybrett wrote: post #178
noir_lord wrote: post #27

For the first time since the 1980's I'm not going to be running a PC with a Microsoft OS on anywhere (I dual boot my main desktop since I use it for work and gaming) but the Windows 11 install is getting binned. Tired of having to read release notes carefully and make sure I've done just the right things to stop it doing things I never asked it to do. Good job MS, you lost a customer who's never likely to come back.…

I always wonder just how much gaming has propped up and continues to prop up windows.

[deleted]

Re: Recall for Linux

#194

Post by beefnugs »

jFriedensreich wrote: post #67

Its kind of naive satire that looks silly on second thought. Recall was not bad because of the concept but implementation details, rollout communication and of course the microsoft part. Recall by an open entity with data ownership, security and transparency would have none of those issues and its just a new take on the universal desktop search that is enabled by ai being able to utilise pixels. I refuse to be shamed…

Its a pure unhidden giveaway: ai is not about anything you want as a user, its about busting the last shreds of privacy and security for the vast majority of computer users

Re: Recall for Linux

#197

Post by cindyllm »

chemotaxis wrote: post #173
jFriedensreich wrote: post #67

Its kind of naive satire that looks silly on second thought. Recall was not bad because of the concept but implementation details, rollout communication and of course the microsoft part. Recall by an open entity with data ownership, security and transparency would have none of those issues and its just a new take on the universal desktop search that is enabled by ai being able to utilise pixels. I refuse to be shamed…

You're criticizing a joke. Worse, you seem to be aware that you're criticizing a joke, and still went through with it. I also disagree with your premise: Recall by an open-source entity would have many of the same problems. The threat model for most people isn't that Microsoft might tailor ads to their interests. The threat model is that you're giving that ransomware gang, or an abusive spouse, a new tool with devast…

[dead]

Re: Recall for Linux

#198

Post by hulitu »

cesarb wrote: post #171
kccqzy wrote: post #118

Earlier quoted context omitted.

Conceptually a feature similar to Recall doesn't have to involve sending any data to third parties. It should not need to be a service just a piece of software running locally, doing OCR and full text search indexing using local compute. Incidentally I often tell my friends I run an app on my phone that captures my location 24/7 and they would initially sound horrified. But then I tell them all my location data is no…

> I often tell my friends I run an app on my phone that captures my location 24/7 [...] But then I tell them all my location data is not sent to anywhere on the Internet Your phone is on the Internet. It takes only one attack (for instance, someone sends you an image which exploits an RCE on the image decoder and then chains into a privilege escalation exploit), or a careless mistake (like marking the wrong folder to…

> You can't leak what you don't have

Your mobile provider has your location history

Re: Recall for Linux

#200

Post by szszrk »

ayewo wrote: post #92
szszrk wrote: post #85

Earlier quoted context omitted.

I still recall (duh) a post here from a guy who literally made a recall feature on his mac way before them. I would love to find that post... It was screenshotting all the time, storing that locally, and then you could ask it any questions and roll back to that moment. Processing was also fully local.

https://github.com/jasonjmcghee/rem ? Here's the Show HN: https://news.ycombinator.com/item?id=38787892

Yes! Thank you.
Post reply on HN