{"id":60224,"date":"2024-06-04T13:15:03","date_gmt":"2024-06-04T17:15:03","guid":{"rendered":"http:\/\/pappp.net\/?guid=70655b203653e5628a2c501b47b55954"},"modified":"2024-06-04T13:15:03","modified_gmt":"2024-06-04T17:15:03","slug":"windows-recall-demands-an-extraordinary-level-of-trust-that-microsoft-hasnt-earned","status":"publish","type":"post","link":"https:\/\/pappp.net\/?p=60224","title":{"rendered":"Windows Recall demands an extraordinary level of trust that Microsoft hasn\u2019t earned"},"content":{"rendered":"<p class=\"syndicated-attribution\">Source: <a href=\"https:\/\/arstechnica.com\/?p=2028683\">Ars Technica<\/a><\/p>\n<div style=\"background-color : #fff7d5;\n\t\t\tborder-width : 1px; padding : 5px; border-style : dashed; border-color : #e7d796;margin-bottom : 1em; color : #9a8c59;\">Article note: It takes some advanced incompetence to make something that seems like a terrible idea at a glance, then just keeps getting worse the more you look.\nIt's like a supercharged Sub7 (an old trojan that kind of prestaged modern malware) built right into the OS.\nThe ill-conceived executive FOMO AI rollouts going on across the tech industry are really destructive dumb-herd-animal behavior.<\/div><div>\n<figure>\n  <img src=\"https:\/\/cdn.arstechnica.net\/wp-content\/uploads\/2024\/06\/win11-recall-listing-800x543.jpg\" alt=\"The Recall feature as it currently exists in Windows 11 24H2 preview builds.\" referrerpolicy=\"no-referrer\" loading=\"lazy\"\/>\n      <p><a href=\"https:\/\/cdn.arstechnica.net\/wp-content\/uploads\/2024\/06\/win11-recall-listing.jpg\" rel=\"noopener noreferrer\">Enlarge<\/a> <span>\/<\/span> The Recall feature as it currently exists in Windows 11 24H2 preview builds. (credit: Andrew Cunningham)<\/p>  <\/figure>\n\n\n\n\n\n\n<div><a name=\"page-1\"><\/a><\/div>\n<p>Microsoft&rsquo;s Windows 11 Copilot+ PCs come with quite a few new AI and machine learning-driven features, but the tentpole is <a href=\"https:\/\/arstechnica.com\/gadgets\/2024\/05\/microsofts-new-recall-feature-will-record-everything-you-do-on-your-pc\/\" rel=\"noopener noreferrer\">Recall<\/a>. Described by Microsoft as a comprehensive record of everything you do on your PC, the feature is pitched as a way to help users remember where they&rsquo;ve been and to provide Windows extra contextual information that can help it better understand requests from and meet the needs of individual users.<\/p>\n<p>This, as many users in infosec communities on social media <a href=\"https:\/\/infosec.exchange\/@chetwisniewski@securitycafe.ca\/112475715570662237\" rel=\"noopener noreferrer\">immediately pointed out<\/a>, sounds like a potential security nightmare. That&rsquo;s doubly true because Microsoft says that by default, Recall&rsquo;s screenshots take no pains to redact sensitive information, from usernames and passwords to health care information to NSFW site visits. By default, on a PC with 256GB of storage, Recall can store a couple dozen gigabytes of data across three months of PC usage, a huge amount of personal data.<\/p>\n\n<p>The line between &ldquo;potential security nightmare&rdquo; and &ldquo;actual security nightmare&rdquo; is at least partly about the implementation, and Microsoft <a href=\"https:\/\/support.microsoft.com\/en-us\/windows\/privacy-and-control-over-your-recall-experience-d404f672-7647-41e5-886c-a3c59680af15\" rel=\"noopener noreferrer\">has been saying things that are at least superficially reassuring<\/a>. Copilot+ PCs are required to have a fast neural processing unit (NPU) so that processing can be performed locally rather than sending data to the cloud; local snapshots are protected at rest by Windows&rsquo; disk encryption technologies, which are generally on by default if you&rsquo;ve signed into a Microsoft account; neither Microsoft nor other users on the PC are supposed to be able to access any particular user&rsquo;s Recall snapshots; and users can choose to exclude apps or (in most browsers) individual websites to exclude from Recall&rsquo;s snapshots.<\/p><\/div><p><a href=\"https:\/\/arstechnica.com\/?p=2028683#p3\" rel=\"noopener noreferrer\">Read 18 remaining paragraphs<\/a> | <a href=\"https:\/\/arstechnica.com\/?p=2028683&amp;comments=1\" rel=\"noopener noreferrer\">Comments<\/a><\/p>","protected":false},"excerpt":{"rendered":"<p>Enlarge \/ The Recall feature as it currently exists in Windows 11 24H2 preview builds. (c&#8230;<\/p>\n<p> <a href=\"https:\/\/pappp.net\/?p=60224\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[226],"tags":[],"class_list":["post-60224","post","type-post","status-publish","format-standard","hentry","category-news-2"],"_links":{"self":[{"href":"https:\/\/pappp.net\/index.php?rest_route=\/wp\/v2\/posts\/60224","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pappp.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/pappp.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/pappp.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/pappp.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=60224"}],"version-history":[{"count":0,"href":"https:\/\/pappp.net\/index.php?rest_route=\/wp\/v2\/posts\/60224\/revisions"}],"wp:attachment":[{"href":"https:\/\/pappp.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=60224"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/pappp.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=60224"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/pappp.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=60224"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}