Live data from Hacker News

Microsoft to delay release of Recall AI feature on security concerns

reuters.com

441–450 of 485 posts

Re: Microsoft to delay release of Recall AI feature on security concerns

#441

Earlier quoted context omitted.

Nevermind accessible to other users, but accessible to any 3rd party application that the user executes. A nightmare of a security hole.

That's already true for every desktop application though. All third party programs can spy on all other programs and documents that user has available. This has been a seemingly criminally-overlooked shortcoming of desktop systems and this approach has fallen WAY behind current mobile security practices.

That is why "firejail" exists.

Re: Microsoft to delay release of Recall AI feature on security concerns

#442

Earlier quoted context omitted.

>Recall is neither the first nor the last thing to record and store your actions and data. Why is it such a big problem? Not agreeing to something that one does not want, in spite of tolerating qualitatively similar yet different objects that one also does want not want, is not "hypocrisy". It's a boundary. Are you unfamiliar with the concept of boundaries? I feel like I'm in an argument with a psychologically abusiv…

>Not agreeing to something that one does not want, in spite of tolerating qualitatively similar yet different objects that one also does want not want, is not "hypocrisy". It's a boundary. It is hypocrisy because there is no difference. None of you have yet managed to answer what differences, if any, exist between Recall and All The Other Tracking Siphoning Things(tm) most of us either accept or tolerate. >Your need…

Personally I do not think that there are any fundamental differences; Recall is just more "obvious" or "apparent". Plus according to someone Apple's AI thing does not record what you type into the text field inside your browser, but I really am not certain about that. All that said, I will continue using Linux with firejail (because I do not like the idea of programs sharing data in many cases).

Re: Microsoft to delay release of Recall AI feature on security concerns

#443
post #55

This is confusing and vague to me, which I believe is exactly the intent. It focuses on security, reiterates that security is their top priority (and we know that this is untrue). What were the security problems? They don't even allude to the existence or detection of any specific security problems. It sounds to me like they're figuring out a new marketing approach, or they're softening the blow by "listening to user…

The specific security problem was that their enterprise customers said no, and not in a 'no thanks' way, but a more vehement 'no fucking way', way.

They could conceivably push to SOHO users, but a) there's no revenue there (and this stuff is expensive), and b) it's really bad optics.

"We're going to offer you a feature that your workplace refused to run on their network."

I'm sure there's ways to spin that, but it'd be a challenge.

Re: Microsoft to delay release of Recall AI feature on security concerns

#445

I wonder if MKBHD's podcast discussing the feature is the cause of the backlash: https://www.youtube.com/watch?v=kg8uJXSRhKo . I think they do a fairly good job talking about the pros/cons of the feature. It definitely seems insane that raw screenshots would just be accessible on the device.

No, I saw this video come out after the backlash. I assumed MKBHD was jumping on the hype.

Re: Microsoft to delay release of Recall AI feature on security concerns

#446

I love all of the “I see how this could be useful software. I’d maybe use it!” comments. Since this functionality can pretty much be replicated with OBS Studio + a keylogger I would love to know what keylogger/screen recorder software combo everybody is already running on their own machines

The data capture could, but the part where you ask AI a humanised query and it will search your data for you couldnt.

Re: Microsoft to delay release of Recall AI feature on security concerns

#447

There was a post on HN not too long ago about a random 3rd party/open source tool that does exactly this, no? When I first heard about Recall AI, I immediately thought back to that HN article, but can't find it.

You mean rewind.ai

Re: Microsoft to delay release of Recall AI feature on security concerns

#448
post #276

Satya Nadella's Microsoft is such a weird company. It's like there's one side of it that is running with Zuckerberg's "move fast and break things" and the other side is saying "wait, we're the most important software company in the world! Things can't break!"

Even before Nadella, MS took insane risks with Windows. Ballmer oversaw the disastrous Windows 8 wigh the fullscreen Start Menu, which was hated far more than Vista ever was. W8 didn't even last 3 years before being replaced by Win10. And that's to say nothing of the decade-long attempt to compete with Google and Apple in mobile with Windows Phone/RT/Nokia, which Nadella mercifully unwound.

I'm one of the very few people who genuinely loved Windows 8

Re: Microsoft to delay release of Recall AI feature on security concerns

#449
post #78

What is recall ai?

It's a system microsoft designed that took regular screenshots of what was happening on the desktop, stored them in a sqlite database, and then allowed people to ask their "AI" questions that would take into account literally everything they user has ever done on their computer. People pointed out that this would record things like people watching porn, typing in banking credentials, viewing bills, filing taxes, etc…

That’s horrifying

Re: Microsoft to delay release of Recall AI feature on security concerns

#450

Earlier quoted context omitted.

>Recall is neither the first nor the last thing to record and store your actions and data. Why is it such a big problem? Not agreeing to something that one does not want, in spite of tolerating qualitatively similar yet different objects that one also does want not want, is not "hypocrisy". It's a boundary. Are you unfamiliar with the concept of boundaries? I feel like I'm in an argument with a psychologically abusiv…

>Not agreeing to something that one does not want, in spite of tolerating qualitatively similar yet different objects that one also does want not want, is not "hypocrisy". It's a boundary. It is hypocrisy because there is no difference. None of you have yet managed to answer what differences, if any, exist between Recall and All The Other Tracking Siphoning Things(tm) most of us either accept or tolerate. >Your need…

There is a difference or Recall would be redundant, and you and they wouldn't care about it so much. It wouldn't exist. Your insistent advocacy and what you are demanding people accept, in Recall's supposed relative insignificance, are incongruent.

Second, this situation doesn't fall under the definition of hypocrisy. It's more like date rapist's logic: "She didn't reject me when I kissed her while she was passed out, and so she's a hypocrite if she denies me sex". TF is your problem, honestly.

Third, again see "boundaries" and people's right to them without needing to tolerate browbeating. Only weirdos and abuser types ignore firmly stated boundaries, and try to move past them via abuse tactics.

> None of you have yet managed to answer what differences, if any, exist between Recall and All The Other Tracking Siphoning Things(tm) most of us either accept or tolerate.

I wasn't aware that an answer to your nonsense question was required in order to justify Recall's popular rejection. It isn't. However, the answer is that nothing else in the base OS is creating a word for word, second to second, record of what is on one's screen to include passwords. And if it is, that should be made widely known so that it also has a chance to be broadly rejected.

>I am asking you all a question and so far noone has managed to answer it. If none of you can answer what exactly about Recall makes it unacceptable unlike All The Others(tm), your logic is flawed.

Your "flawed logic" premise is rejected.

The assertion that your question is not sufficiently answered is rejected, but irrelevant regardless.

You need people to accept Recall, for some bizarre reason. Beyond the already presented logic, they simply don't have to.

To state that your logic is flawed would be polite. More accurately, its nonexistent. You resort to browbeating as a replacement for it.

> Whether I can persuade you is irrelevant, the commons still do not fucking care about digital privacy. Seriously. That's the reality. It's like how the Earth will spin and keep spinning no matter what any of us do.

And yet here you are.

>One of Recall's biggest marketing spiels is that it's all stored and processed locally.

Few if any who comment on either side of this fake argument trust MS or those who are above it, if they are being honest. MS spent its trust currency long ago, and no one owes it to them.

Post reply on HN