Live data from Hacker News

Microsoft will switch off Recall by default after security backlash

wired.com

281–290 of 572 posts

Re: Microsoft will switch off Recall by default after security backlash

#281

Would love to know if any product research was done on this at all, or if it was a mandate from someone high up in Microsoft. I cannot imagine they'd go very long talking to potential users without hearing the exact same fears they seem to be surprised about today.

[deleted]

Re: Microsoft will switch off Recall by default after security backlash

#282
post #58

It's interesting to compare this to the Chrome/Safari/Edge browsing history, which is stored in an unencrypted SQLite database, and tracks what you do for the last 90 days. It's just a bit less visual, Incognito/Private modes work, and some users clear it more often. But a whole lot of the surveillance attacks people imagine about Recall apply just the same to the browser. I think it's the "little brother" casual att…

Your browsing history is unlikely to contain personal information, secrets, porn images etc. And if you use Chrome, they get your full browsing history by default. I get your point, but Microsoft's Recall can capture anything onscreen - emails, personal info, porn, passwords and the like. And it feels, bizarrely for 2024, that little thought has gone into privacy or security.

No thought at all. Just by default auto exclude private browser windows and password managers. No thought at all.

Re: Microsoft will switch off Recall by default after security backlash

#283
post #113

Earlier quoted context omitted.

Your browsing history is unlikely to contain personal information, secrets, porn images etc. And if you use Chrome, they get your full browsing history by default. I get your point, but Microsoft's Recall can capture anything onscreen - emails, personal info, porn, passwords and the like. And it feels, bizarrely for 2024, that little thought has gone into privacy or security.

It's analogous to phone call metadata vs. the contents of the phone calls.

Perhaps. A key difference though - history files can include the individual pages I requested from the same host. Right now I have like 50 entries for the various posts I read just from HackerNews, all as separate line items etc etc.

In the case of the phone, one simply sees recipient of call, duration etc, regardless of how much information was exchanged. The phone I'm calling is arguably analogous to the server I request a page from, in the metadata context.

I'd argue browser history is significantly richer in some regards due to this. It's not unheard of for user identifiers to appear in URL paths either - try visiting https://news.ycombinator.com/user?id= user name>... In my Chrome, that's instantly in the history file with my username.

Re: Microsoft will switch off Recall by default after security backlash

#284

Earlier quoted context omitted.

The concept itself has value, but the ethical and legal concerns are severe, not to mention the issue of Recall also capturing sensitive stuff like passwords. Microsoft, Google, Apple - everyone is scared shitless of some AI startup kicking their nutsacks, and is launching products that should have gone through extensive ethics discussions beforehand in a matter of weeks.

passwords are the last of it, think about women inquiring about abortions in states where they aren't legal. Or people trying to get away from an abusive partner, on and on it goes.

Agree on the "abusive partner" scenario, but regarding abortions, local police already can abuse dragnet orders on Google Maps [1] - even though they promised to auto-delete anything regarding abortion clinics, there are more than enough other ways for police to target pregnant people.

[1] https://www.npr.org/2022/07/11/1110391316/google-data-aborti...

Re: Microsoft will switch off Recall by default after security backlash

#285

Maybe a bit off-topic, but I sure wish they'd do this for OneDrive! I installed Windows for personal use for the first time recently (although I use it exclusively at work) and it drove me ABSOLUTELY BONKERS that my home drive was mapping to C:\Users\atribecalledqst\OneDrive. What I hated the most was that the File Explorer just calls the folders in there e.g. "Documents" and "Pictures" without showing the full path.…

Dear OS writers: Internet access is not always guaranteed or reliable. Please do not assume that the cloud is a viable solution for every user. I ran into this on my phone awhile back. I knew I would be out of service for some time but had some PDFs I needed to reference. So I downloaded them to "files". Que surprise when I later go to look up a value and there's a little cloud with a down arrow button next to the PD…

This is the number one thing that annoys me about so many apps, especially apps with clear use-cases for offline use like listening to music, reading, and learning apps. I don't understand how so many app writers have never gone for a run through a canyon or flown on an airplane. I specifically pay money to SoundCloud for instance just for the "feature" to cache the music locally and somehow it regularly gets stuck clearly from lack of internet. It's probably some metric collection or some other spyware to make sure all the bean counters get their money at the huge expense to usability. Pimsleurs language learning app, and many book reading apps all suffer and all I want to do is not be bored to tears on flights that don't have internet.

Re: Microsoft will switch off Recall by default after security backlash

#286
I have a really hard time understanding the use case for something like this. Stuff that I want to remember I just write down or reference something like my browser history or recently opened files. It's very low tech for sure but it works, is waaay more energy efficient, way easier to understand and audit, and doesnt have the same security concerns. I get that using "AI" has a Wow Factor that existing systems have but I cannot understand the thinking of folks that are OK with the trade-off. Ita just not even close for me.

Re: Microsoft will switch off Recall by default after security backlash

#287
post #58

It's interesting to compare this to the Chrome/Safari/Edge browsing history, which is stored in an unencrypted SQLite database, and tracks what you do for the last 90 days. It's just a bit less visual, Incognito/Private modes work, and some users clear it more often. But a whole lot of the surveillance attacks people imagine about Recall apply just the same to the browser. I think it's the "little brother" casual att…

Talk on zoom to the wife while bathing the kid, stored on recall. VC the girlfriend, stored on recall.

Does your browser history store pictures of your family?

Re: Microsoft will switch off Recall by default after security backlash

#288

Maybe a bit off-topic, but I sure wish they'd do this for OneDrive! I installed Windows for personal use for the first time recently (although I use it exclusively at work) and it drove me ABSOLUTELY BONKERS that my home drive was mapping to C:\Users\atribecalledqst\OneDrive. What I hated the most was that the File Explorer just calls the folders in there e.g. "Documents" and "Pictures" without showing the full path.…

Always set Windows up with a local account to avoid this nonsense. Used to be relatively straightforward in Windows 10, but MS made it a lot harder to dodge in 11.
Post reply on HN