Live data from Hacker News

Windows Recall demands an extraordinary level of trust Microsoft hasn't earned

arstechnica.com

21–30 of 37 posts

Re: Windows Recall demands an extraordinary level of trust Microsoft hasn't earned

#21
post #3

I trust Microsoft to not send photos/videos of user activity back to home base. Seems like a lot of bandwidth. What I imagine will happen is the Recall feature will send summaries of user activity back to Microsoft. That way, it's "anonymized" and somehow legal

> I trust Microsoft to not send photos/videos of user activity back to home base. Seems like a lot of bandwidth.

And you trust them also to not report you to 3 letter agencies when they see "something unusual" ? /s

Re: Windows Recall demands an extraordinary level of trust Microsoft hasn't earned

#22

Earlier quoted context omitted.

The research is... kinda bad. Beaumont critzies that Microsoft stores the data... locally in an SQLite database? Because it's "easy to steal with malware" (just like your browser history, etc). Blew up in the media though...

What's the difference between stealing some random sqlite database and the history of OCRs of screenshots of anything ypu did on that PC?

If someone has admin access to your PC (which they need to access the SQLite file) they could also just install malware that sends everything you do and type over the network.

Re: Windows Recall demands an extraordinary level of trust Microsoft hasn't earned

#23
post #20
post #17

Earlier quoted context omitted.

And that makes the security associated with it any more important than my kept documents how?

Text on screen can be more confidential than text on disk.

And it can be the other way around. I still don’t get why this demands some new level of security beyond what protects other data.

Re: Windows Recall demands an extraordinary level of trust Microsoft hasn't earned

#25
For MS to even think Recall was a good idea is quite worrisome.

Financial services, government departments (including things like criminal cases), healthcare - talk about a privacy and confidentiality nightmare.

It should be interesting to hear the inside story about how this was championed inside the company and how it got the greenlight from the higher ups.

Re: Windows Recall demands an extraordinary level of trust Microsoft hasn't earned

#27

Earlier quoted context omitted.

What's the difference between stealing some random sqlite database and the history of OCRs of screenshots of anything ypu did on that PC?

If someone has admin access to your PC (which they need to access the SQLite file) they could also just install malware that sends everything you do and type over the network.

One difference is the speed apparently. You'd need the malware to be installed for a while. With recall you need to exfiltrate a couple kb of data that's already there on disk.

That said, yeah, if the user interacts dumping saved passwords is trivial as well.

Re: Windows Recall demands an extraordinary level of trust Microsoft hasn't earned

#28
post #23
post #20

Earlier quoted context omitted.

Text on screen can be more confidential than text on disk.

And it can be the other way around. I still don’t get why this demands some new level of security beyond what protects other data.

So I want to read an encrypted mail, then delete it. What do I do?

Re: Windows Recall demands an extraordinary level of trust Microsoft hasn't earned

#29

Earlier quoted context omitted.

What's the difference between stealing some random sqlite database and the history of OCRs of screenshots of anything ypu did on that PC?

If someone has admin access to your PC (which they need to access the SQLite file) they could also just install malware that sends everything you do and type over the network.

Someone like Microsoft ? /s

Re: Windows Recall demands an extraordinary level of trust Microsoft hasn't earned

#30

It's really refreshing and heartening to see the criticism on Microsoft in the comments there on ars. I work in a typical MS shop and as usual their evangelism is really strong. Everyone in the admin team is a hardcore Microsoft promoter, everywhere from internally on Yammer and externally on socials. They're probably fishing to get made MVP. But still, I have more self-respect. While they're all eagerly piling on Co…

Local LLM code autocomplete for the win. I use Twinny and LM Studio. It rocks.
Post reply on HN