You're wrong about Windows Recall — How Microsoft keeps your data safe on Copilot+ PCs

[Windows Central]

There's a lot of FUD going around about Microsoft's new Windows Recall feature. This article lays out the facts about how Windows Recall is actually works, and how it keeps your data safe.

You're wrong about Windows Recall — How Microsoft keeps your data safe on Copilot+ PCs : Read more

 

[dharmababa]

I generally agree that there is a lot of FUD out there on Recall but curious how it can enable cross-device syncing without uploading anything to the cloud? We can argue and trust that it is stored in the cloud "privately" and not used to train, etc. but some relevant data has to get off the device for cross device scenarios.

 

[Zac Bowden]

What a two faced article Zac. 'Recall is safe but don't trust MS.' smdh

The article does not say "don't trust MS," it highlights that it's good to be sceptical of big tech. This includes Apple and Google. But facts are facts: Windows Recall doesn't send personal data to the cloud.

 

[Zac Bowden]

I generally agree that there is a lot of FUD out there on Recall but curious how it can enable cross-device syncing without uploading anything to the cloud? We can argue and trust that it is stored in the cloud "privately" and not used to train, etc. but some relevant data has to get off the device for cross device scenarios.

Windows Recall does not have any cross-device support. No sync, as none of the data leaves your device.

 

[dharmababa]

Windows Recall does not have any cross-device support. No sync, as none of the data leaves your device.

Thanks Zac. I thought the article said it did but maybe I misread.

 

[dharmababa]

Across what devices? Your PC and ??

A lot of people have multiple PCs.

 

[whcrumb]

The most likely problems with this "feature" come from scammers, malware, others with physical access to your computer, and, for corporations, legal process. This article rebuts none of them.

Scammers - like the India call centers who stole over $10 billion from US households in 2022 alone - trick the victim into installing remote access tools like Anydesk. Their criminal gains will only be bolstered by being able to turn on Recall, likely with a hack to hide its visual indicator, and then use AI search to find access paths to all available assets.

Malware - Readers here are likely plenty familiar with Microsoft's bugs and the weekly patches to address them. Any exploit allowing root access will allow a hacker to turn on Recall, obfuscate its presence, and extract its data.

Physical Access - Often the people who most want to spy on or obtain passwords from you can be people in your own household. Technical savvy may not be the same for all household members, meaning one person turns it on, and the target won't notice or understand the ramifications.

Legal Process - Discovery: I'm not a lawyer, but I've been a corporate middle manager, and am all-too familiar with the periodic instructions from legal counsel about the requirement that all emails and other work records be archived for legal discovery, and the not infrequent times it is asked for (even for companies who are not particularly doing anything wrong.) Are all of these Recall snapshots now also fair game, and what implications might be drawn from them, fair or not?

Extra-Legal Process: OK, you can award me my tinfoil hat for (just) this last one, but at least the US government can issue secret warrants for "national security" demanding information about targets who are never told about them. For example, the NSA serves these warrants on all the telcos to demand and receive the phone numbers called by essentially every American. I'd be surprised if mass-surveillance is on the initial Recall agenda but targeted surveillance certainly seems possible, even probable.

In short, this article is a disservice to readers. While not all Recall users may experience harmful effects from it, it is near guaranteed that plenty will. Just look at all the problems from the past decade, and ask how is Microsoft going to be able to do any better now?

 

[sonicscooter]

The article does not say "don't trust MS," it highlights that it's good to be sceptical of big tech. This includes Apple and Google. But facts are facts: Windows Recall doesn't send personal data to the cloud yet.

FTFY

 

[John McIlhinney]

But facts are facts

Yeah, but feelings are feelings so... checkmate, I guess.