Salta al contenuto principale


For those who aren’t aware, Microsoft have decided to bake essentially an infostealer into base Windows OS and enable by default.

From the Microsoft FAQ: “Note that Recall does not perform content moderation. It will not hide information such as passwords or financial account numbers."

Info is stored locally - but rather than something like Redline stealing your local browser password vault, now they can just steal the last 3 months of everything you’ve typed and viewed in one database.

in reply to Kevin Beaumont

I can't see this going live without a literal and figurative revolt, within Microsoft and outside of it.
in reply to NosirrahSec 🏴‍☠️

So every unlocked workstation, every compromised device. "Recall show me the last adult material I viewed." I can see printed porn coming back into fashion. Or Linux
in reply to Kevin Beaumont

I've written up my thoughts on the Copilot Recall feature in Microsoft Copilot+ PCs

I think it will enable fraud and endanger users, and is not the sign of a company who are committed to security first.

doublepulsar.com/how-the-new-m…

in reply to Kevin Beaumont

The UK’s ICO have opened an investigation into Copilot+ Recall. bbc.co.uk/news/articles/cpwwqp…
in reply to Kevin Beaumont

Copilot+ Recall has been enabled by default globally in Microsoft Intune managed users, for businesses.

You need to enable DisableAIDataAnalysis to switch it off. learn.microsoft.com/en-us/wind…

Questa voce è stata modificata (9 mesi fa)

reshared this

in reply to Kevin Beaumont

Here’s Copilot+ Recall search in action, showing instant text based search finding a WhatsApp chat and a PDF from 6 months ago being viewed on screen.
in reply to Kevin Beaumont

Two quick updates -

A) if you disallow recording of a website in Control Panel or GPO, in Chrome it is still recorded - disallow recording only works in Edge browser

B) Firefox and Tor Browser is recorded always, including in private mode - the exception is Hollywood DRM’d videos

in reply to Kevin Beaumont

I got ahold of the Copilot+ software.

Recall uses a bunch of services themed CAP - Core AI Platform. Enabled by default.

It spits constant screenshots (the product brands then “snapshots”, but they’re hooked screenshots) into the current user’s AppData as part of image storage.

The NPU processes them and extracts text, into a database file.

The database is SQLite, and you can access it as the user including programmatically. It 100% does not need physical access and can be stolen.

reshared this

in reply to Kevin Beaumont

And if you didn’t believe me.. found this on TikTok.

There’s an MSFT employee in the background saying “I don’t know if the team is going to be very happy…”

They should probably be transparent about it, rather than telling BBC News you’d need to be physically at the PC to hack it (not true). Just a thought.

Questa voce è stata modificata (9 mesi fa)
in reply to Kevin Beaumont

I ponder if Microsoft's engineers are following the SQLite code of ethics, since they're using it in Windows OS with Copilot+ Recall? :D sqlite.org/codeofethics.html
Questa voce è stata modificata (9 mesi fa)
in reply to Kevin Beaumont

So the code underpinning Copilot+ Recall includes a whole bunch of Azure AI backend code, which has ended up in the Windows OS. It also has a ton of API hooks for user activity monitoring.

Apps themselves can also search and make themselves more searchable.

It opens a lot of attack surface.

The semantic search element is fun.

They really went all in with this and it will have profound negative implications for the safety of people who use Microsoft Windows.

Peter Van Eynde reshared this.

in reply to Kevin Beaumont

If you want to know where tech companies are with AI safety, know Microsoft Recall won’t record screenshots of DRM’d movies..

..but will record screenshots of your financial records and WhatsApp messages, as corporate interests were prioritised over user safety.

And it’s enabled by default.

in reply to Kevin Beaumont

I’ve managed to get Recall working in full on a non-Copilot+ system, without an NPU. Will accelerate testing.
in reply to Kevin Beaumont

Copilot+ Recall feature pop quiz:

You deal with a sensitive matter on my Windows PC. E.g. an email you delete. Does Copilot Recall still store the deleted email?

Answer: yes. There's no feature to delete screenshots of things you delete while using your PC. You would have to remember to go and purge screenshots that Recall makes every few seconds.

If you or a friend use disappearing messages in WhatsApp, Signal etc, it is recorded regardless.

in reply to Kevin Beaumont

It comes up a lot as people are rightly confused, but if you wonder what problem Microsoft are trying to solve with Recall:

It isn't them being evil, it's business leaders who are middle aged and can't remember what they're doing driving decision making about which problems to solve.

A huge amount of business leaders are dudes who have no idea what the fuck is happening. This leads to the Recall feature.

Microsoft exists in and is driven by that bubble.

Questa voce è stata modificata (9 mesi fa)
in reply to Kevin Beaumont

Managed to find out how BBC News printed in a headline story that it was not possible to steal Recall data without being physically at the device (which is false) - this is from the journalist:
Questa voce è stata modificata (9 mesi fa)
in reply to Kevin Beaumont

Some screenshots of Recall's SQLite database here: mastodon.social/@detective/112…

Just to clarify, I can access it without SYSTEM too. Microsoft are about to set cybersecurity back a decade by empowering cyber criminals via poor AI safety. Feature ships in a few weeks.

in reply to Kevin Beaumont

The latest Risky Business episode on Recall is good, but one small correction - it doesn’t need SYSTEM rights.

Here’s a video of two MSFT employees gaining access to the Recall database folder - with SQLite database right there. Watch their hacking skills. (You don’t need to go this length as an attacker, either). Cc @riskybusiness

I’m not being hyperbolic when I say this is the dumbest cybersecurity move in a decade. Good luck to my parents safely using their PC.

Questa voce è stata modificata (8 mesi fa)
in reply to Kevin Beaumont

Stealing everything you’ve ever typed or viewed on your own Windows PC is now possible with two lines of code — inside the Copilot+ Recall disaster.

My look at the feature, FAQs from the community etc

doublepulsar.com/recall-steali…

reshared this

in reply to Kevin Beaumont

this is the out of box experience for Windows 11's new Recall feature on Copilot+ PCs. It's enabled by default during setup and you can't disable it directly here. There is an option to tick "open Settings after setup completes so I can manage my Recall preferences" instead.

HT @tomwarren

in reply to Kevin Beaumont

You allow BYOD so people can pick up webmail and such. It’s okay, because when they leave you revoke their access, and your MDM removes all business data from the machine ✅

What the employee does: opens Recall, searches their email, files etc and pastes the data elsewhere.

Nothing is removed from Recall, as it is a photographic memory of everything the former employee did.

in reply to Kevin Beaumont

Security and privacy researchers - You can now install Copilot+ Recall on any ARM hardware (doesn’t need an NPU) or in Azure VMs.

Guide from @detective

The devices launch THIS MONTH to customers so I suggest people look at this.

github.com/thebookisclosed/Amp…

in reply to Kevin Beaumont

Nvidia just announced that Copilot+ and Recall are coming to AMD systems. theverge.com/2024/6/2/24169568…
in reply to Kevin Beaumont

Somebody made a tool called Total Recall to dump Recall database and screenshots. x.com/xaitax/status/1797349055…
Questa voce è stata modificata (8 mesi fa)
in reply to Kevin Beaumont

my only light at the end of the tunnel at this point is that big orgs will still take some time before they have any devices running the software and hopefully Microsoft gets their shit together for a more secure implementation until then.
in reply to Marius Kießling

@marius yeah, I agree - my hope is they rework it substantially before it has widespread adoption. I’m not sure they will. Devices are in the wild in a few weeks.
in reply to Kevin Beaumont

Please keep us informed here about Alex progress and a release. I don't read X...
in reply to Kevin Beaumont

hey, can you add alt text to the image so I can boost this? It doesn’t need to be a full transcription, just however you’d describe it to somebody on the phone.
in reply to Kevin Beaumont

local ai is always better than the cloud. However, Microsoft recall is just a huge privacy virus and Trojan horse.
in reply to Kevin Beaumont

@MostlyBlindGamer #ALT4you
Screenshot of the output of the script "totalrecall.py" that shows a detected "Windows Recall", and an extraction folder created for extracted Recall contents.
Two lists of captured content follow, one containing the captured windows (one with an open Gmail account) and the other one shows all extracted screenshots.
in reply to Kevin Beaumont

I really dislike Microsoft's wording around this. They throw around terms like "encrypted" and "secure" to placate the lay person, when they know as well as anybody that encrypted data has to be decrypted at runtime, and if the user has access to the unencrypted data, so does any malware running with that user's privileges.

And you just know that it's gonna be on by default, if you turn it off Windows updates will randomly re-enable it, etc. This will be a privacy nightmare.

in reply to Kevin Beaumont

Recent DHS published report handed to the US President which said it had "identified a series of Microsoft operational and strategic decisions that collectively pointed to a corporate culture that deprioritized enterprise security investments and rigorous risk management"

Microsoft: let’s use AI to screenshot everything users do every 5 seconds, OCR the screenshots, make it searchable and store it in AppData!

in reply to Kevin Beaumont

I'm thinking the rave in Fall of the House of Usher would be even more appropriate.
in reply to Kevin Beaumont

passwords ending up stored in plain text, who could have thought this would be a security risk? WHO? 🤣
in reply to Kevin Beaumont

@awakecoding It's *fine*. We just need apps to use randomly generated 24 character strings for field labels and mask all inputs with *****, and it'll be nbd.
in reply to Kevin Beaumont

great, so Amazon passwords will be the first to fall as Amazon (for whatever reason) feels like showing your password while you type it …
in reply to Kevin Beaumont

If anybody is wondering if you can enable Recall on a machine remotely without Copilot+ hardware support - yep.

I’ve also found a way to disable the tray icon.

in reply to Kevin Beaumont

who needs to build malware when the OS ships with it ready and waiting for you to use.
in reply to Kevin Beaumont

I went and looked at YouTube for Recall to get out of the echo chamber and I can only find one positive video. Even the people at the event are slating it, including people with media provided Copilot+ PCs.

There’s some content creators who’ve realised it records their credit cards, so they’re making videos of their cards going walkies.

in reply to Kevin Beaumont

It’s going to be interesting to see how Microsoft get out of this one. They may have contractual commitments to ship Recall with external parties.

I thought they were risking crashing the Copilot brand with this one, but I was wrong looking at the videos and comments on them - I think they’re crashing the Windows consumer brand.

The reaction to photographic memory of what people do at home has - you’ll be surprised to know - not been seen as a reason to buy a device, but a reason why not to.

in reply to Kevin Beaumont

It sucks because the prospect of good ARM laptops that aren’t made by Apple is finally here, but this puts them in jeopardy if sales tank due to Recall.
in reply to Forgi :neofox_woozy:

yep. And there’s loads of tangible security benefits from the rest of the work going on in Windows 11 in terms of security.

They just shit their own bed on this one by not understanding their customers, Apple must be so happy.

Questa voce è stata modificata (8 mesi fa)
in reply to Kevin Beaumont

Actual clown show announcing it immediately after this blog post:
blogs.microsoft.com/blog/2024/…

But yeah, the direction 11 was going in has been great, then they abruptly veered right off the cliff.

in reply to Kevin Beaumont

it's too late at this point. MS _will_ ship Recall, but what happens afterwards will be fun to see.
in reply to Longhorn

@never_released oh I agree they will be shipping. Commercially it looks like they’ve made New Coke. There’s gonna be victims in terms of fraud from Recall, which is just going to pile on the problems.
in reply to Kevin Beaumont

@never_released … except that this is New Coke that sends your financial secrets to gangsters.
in reply to Kevin Beaumont

@never_released Fraud? Domestic violence is the event that's going to be disastrous for them. The first time a man beats his wife to death after finding a screenshot of a convo she didn't want him to see?

The Microsoft Murderer Trial would certainly test the aphorism that there's no such thing as bad publicity.

in reply to Kevin Beaumont

I feel that Windows has been on shaky ground with many for a while. Honestly, the fact that anyone in Microsoft even thought up Recall is horrendously concerning. That it ever got built is terrifying. But right now I'm not convinced that at some point every OS/WM isn't going to end up with dumb shit like this
in reply to Kevin Beaumont

I think 'Recall' is a very good name for what is gonna happen to their new devices.
in reply to Kevin Beaumont

Investments by oil despots yields products that despots want.
businessinsider.com/microsoft-…

arabnews.com/node/2507356/busi…

consultancy-me.com/news/8148/p…

cio.com/article/2079045/pwc-mi…

arabnews.com/node/2518936/amp

bloomberg.com/news/articles/20…

in reply to Nicole Parsons

@Npars01 I don’t think it’s anything like that at all, they’ve probably just signed deals with AMD, Dell etc for laptops with Copilot+
in reply to Kevin Beaumont

Saudi Arabia had been flooding American tech companies with cash since 2018.

Twitter was just one example of anti-democracy oil oligarchs hijacking tech.

Kushner's $2 billion in Saudi sovereign funds isn't buying beach-front condos in Gaza, it's being spent on torpedoing tech brands like Microsoft.

Google, Apple, Oracle, Amazon, Microsoft, all had MBS visit in 2018. The investments continued after the Khassoghi murder & its accelerated in recent months.
vox.com/technology/2023/5/1/23…

in reply to Kevin Beaumont

Microsoft made a sudden shift towards AI development in 2018 under pressure from investors. As did the Big Five.

Recall was one of the products developed with those investments.

in reply to Kevin Beaumont

@Npars01

Sure, and it's an coincidence that the WaPo ousted it's editor in favor of someone who wants TuckerKarlson op-eds.

I suppose you believe it was pure incompetence that drove Musk's management of Twitter into the shitter.

Rupert Murdoch marries his ruZZian handler, nothing to see here.

But co-pilot's creation has nothing to do with the billions of autocratic petro-dollars being pumped into Microsoft. Your not trying nearly hard enough to stick your head in the sand.

in reply to Kevin Beaumont

I mostly hear about issues for company laptops and data that could be stolen by 'Hackers' (both valid arguments) but has anybody considered that this is like your browserhistory 2.0 and what it means to let other people (family and friends) use your computer?
in reply to Kevin Beaumont

part of me suspects there is some government/agency pressure behind the whole idea, because who really benefits from this

then again I wonder if I am just being overly paranoid, and remind myself of Hanlon's razor

in reply to Kevin Beaumont

I know at least one person (and not just in in the little bubble here) that this was actually the last drop and he wiped his windows partition and is now Mac and Debian only.
in reply to Kevin Beaumont

Windows Central, about the only outlet giving Recall positive coverage and having articles tweeted by Microsoft staff - have updated their take after being hands on with a device. windowscentral.com/software-ap…
in reply to Kevin Beaumont

they still say finding Recall data scrappers is unlikely... it might be right now, but as you say it won't be in the future if MS doesn't correct this App Data plain text SQLite database fiasco.
in reply to João Tiago Rebelo

@jt_rebelo yeah, they’re wrong about that. They’re talking to Microsoft people about it and unfortunately Microsoft people don’t seem to understand what happens outside their world.
in reply to Kevin Beaumont

is there a way to make AV companies ID if Recall is enabled? I ask this because, for example, Bitdefender Total Security has a Vulnerability Scan that identifies misconfigurations in Windows, other software, and even in network equipment, as a security risk and helps automate their correction/elimination. Seeing how bad this is, it'd be awesome if AV companies treated Recall as what it is: a Windows vulnerability.
in reply to Kevin Beaumont

oh to be a fly on the wall in those internal meetings at MS right now. My jaw will hit the floor if they release as is
in reply to Kevin Beaumont

I thought this was a stretch to call malware designed to scrape Windows Recall data “quite unlikely” but I asked Bing and it agreed, so I’m reassured
in reply to Kevin Beaumont

Microsoft has been declining to comment on criticism of Recall for a week - but they have apparently told a journalist off the record at Future that changes will be made before Copilot+ devices drop in the coming days.

This may include an attempt to invalidate researcher criticism, we’ll see.

Questa voce è stata modificata (8 mesi fa)
in reply to Kevin Beaumont

the option not to will be at the bottom of a locked filing cabinet stuck in a disused lavatory with a sign on the door saying "Beware of the Leopard"...
in reply to Kevin Beaumont

that's the way to sell a shit sandwich. Tease it out on stale Wonderbread, upgrade it to artisinal organic whole-wheat sesame rolls, and people will feel like "you really listened to their input". But they're still eating shit.
in reply to Kevin Beaumont

because telling Microsoft that you want something off/disabled/uninstalled has been so reliable in the past...
in reply to Kevin Beaumont

WIRED has a piece about Total Recall, a now released tool which dumps keypresses, text and screenshots (they’re JPEGs) from Microsoft Recall

wired.com/story/total-recall-w…

Total Recall software by @xaitax github.com/xaitax/TotalRecall

Example search for ‘password’:

🪟 Captured Windows: 133
📸 Images Taken: 36
🔍 Search results for 'password': 22

📄 Summary of the extraction is available in the file:
C:\Users\alex\Downloads\TotalRecall\2024-06-04-13-49_Recall_Extraction\TotalRecall.txt

Charlie Stross reshared this.

in reply to Kevin Beaumont

I'm surprised this hadn't happened sooner, it was just crying out to be done.
in reply to Kevin Beaumont

giant security vulnerability for corporations and personal safety fail vs stalkers - Recall really is a product for everyone
in reply to Kevin Beaumont

Right, and if you go to this article, there's a link on the sidebar to an article about a sex machine. Which is either really good or really bad, depending.
in reply to Kevin Beaumont

I'm just wondering when someone will release a tool that allows you to change or insert fake events into the database...
in reply to Kevin Beaumont

I hadn’t been aware until today of the external reaction to Recall. Holy shit. Tim Apple must be pleased.

Everything from media coverage to YouTube to TikTok is largely negative. All the comments are negative.

These videos have tens of millions of views and hundreds of thousands of comments.

I knew it would be bad but.. it’s worse. I’ve spent hours looking at the sentiment and.. well, they probably would have got better coverage from launching an NFT of pregnant Clippy.

Charlie Stross reshared this.

in reply to Kevin Beaumont

Honestly, I'd be totally into Pregnant Clippy. "It looks like you're writing a let---hang on, I gotta pee"
in reply to Kevin Beaumont

Your early contributions hopefully steered the debate in that direction 👍
in reply to David Penfold :verified:

@davep even the videos before I noticed it are negative. The people who went to the press events were largely negative. It’s not a surprise as Recall is very very much a Microsoft bubble feature, but it is heart warming to see so many people got the wider picture.
in reply to Kevin Beaumont

you should pipe all that data into a sentiment analysis tool to serve them their own medicine. Maybe if an AI says it's a terrible idea they'd listen
in reply to Kevin Beaumont

Does anyone know if there's a way to pre-emptively edit the registry or use group policy to disable Recall so that if they push it to Windows 11 generally it is automatically disabled? I am worried about it.
in reply to Kevin Beaumont

But Kevin, ZDNet says not to worry :chuckle: :wheeze:

zdnet.com/article/is-microsoft…

in reply to James_inthe_box

@james_inthe_box ah, the publication behind “3 million smart toothbrushes were just used in a DDoS attack.
Really”
in reply to Kevin Beaumont

Macrumors.com picked up your article along with many other places I’m sure.
in reply to Kevin Beaumont

an NFT of clippy pregnant would indeed have been a better investment, lol.
in reply to Kevin Beaumont

loved how that LTT video quickly went from "recall is really bad" to "when do we install linux?"
in reply to Kevin Beaumont

I'm sure someone suggested that Apple was doing the same thing on their platform soon too.

Unless I was remembering 9to5mac.com/2022/11/02/rewind-… ... ?

in reply to Kevin Beaumont

A friend of mine works in the loan/financial sector, ergo lots of sensitive data, and recently they had to switch to new PCs with W11.. I'm worried.
in reply to Kevin Beaumont

Would Apple have continued their OpenDirectory, They would be in a pretty awesome position now... 🙄

But macOS Server was sadly not a priority.... 🤷

in reply to Kevin Beaumont

"NFT of pregnant Clippy" is one of those mental images I'll never be able to shake, no matter how hard I try. Thanks.
in reply to Kevin Beaumont

@cstross I struggle to even understand the utility of the Recall feature, ignoring the privacy issues for a moment. I can't think of really any occasion when I would have found it useful. Given an incremental backup system like Apple's Time Machine, macOS's built-in document versioning feature, browser histories, etc. when would you even use Recall if you had it? It seems a lot of trouble, resources and AI bullshit for extremely niche use cases.
in reply to Killa Koala

@dshan I can see Recall being useful in VERY SPECIFIC situations—e.g. incrementally updating a non-erasable journal on a secure device like an EPOS terminal or an ATM, to ensure nobody's fucking with it, OR in a care facility to help users with advancing dementia (and no access to credit cards). For most people it'd be an unmitigated security disaster with no upsides, though.
in reply to Killa Koala

@dshan @cstross I had the same thought. My spouse disagrees, and says he can totally see the use for a tool that lets you find document x about topic y, that somebody sent you. (As product managers this does happen regularly.) But even he would not want to use it, because of the privacy nightmare this is.
in reply to Rebecca Cotton-Weinhold

@rlcw @dshan Tools for finding document X about subject Y that somebody sent you are ALREADY baked into your operating system, and have been for decades! (On macOS, it's Spotlight; Windows has an equivalent search facility. UNIX has had text searching via grep since the early 1970s.) This new thing isn't about search and retrieval, it’s a comprehensive log of everything you ever do on your computer. Which we normally call "spyware".
in reply to Charlie Stross

@cstross @dshan When people send us things they are not necessarily on the computer anymore, or in the browser, they can be in one of the 5 other tools used at work. This tool does get around this limitation - in a bad way. Don't get me wrong, we all agree it's not worth it, because it's a privacy nightmare, for you and people around you.
in reply to Charlie Stross

@cstross @rlcw @dshan similar to $HISTFILE - a powerful tool, but needs a lot of care to avoid having secrets stored in plaintext. For a corporate PC your web history and email inbox aren't private anyway.
in reply to smallgreencloud

@smallgreencloud @rlcw @dshan Yes, but now your sent-in-confidence emails and texts could be indexed in someone else's Recall db, and subject to discovery during litigation or searching by hackers.
in reply to Kevin Beaumont

A key element of Recall is Microsoft say only you can access your Recall, it is per user.

ArsTechnica enabled Recall on Windows 11 box and tested the claim. By logging in as another user they could access the database and screenshots.

arstechnica.com/ai/2024/06/win…

Charlie Stross reshared this.

in reply to Kevin Beaumont

If you want to know how Microsoft have got themselves into this giant mess with Recall, here’s what the documentation says between the lines:

you, the customer, are a simpleton who doesn’t want to be an AI genius yet. Have a caveman mode.

Charlie Stross reshared this.

in reply to Kevin Beaumont

oh my gosh the framing "until they're ready". That is not how consent works.
in reply to Kevin Beaumont

The general mood everywhere in "the industry" is that you're either using "AI" or just not ready for it (or at best: it's not ready for your use case) yet.
The "This is not, ever, a good use case for it" is completely beyond their mental capabilities to grasp as an idea.
in reply to Kevin Beaumont

Recall and Copilot+ is also coming to ASUS systems, including AMD, in a deal with Microsoft.

ASUS Announces Complete Portfolio of AI-Powered Copilot+ PCs asus.com/us/news/pnm9tg6qccql6…

Nvidia announced they are bringing Copilot+ and Recall to PCs, in a deal with Microsoft: theverge.com/2024/6/2/24169568…

in reply to Kevin Beaumont

EXTREMELY FUCKING RELATED:

youtube.com/watch?v=uYdtpU8FKO…

youtube.com/watch?v=I3DwhTc7Z4…

youtube.com/watch?v=7pMrssIrKc…

in reply to Kevin Beaumont

Three Copilot+ Recall questions that keep coming up.

Q. Can you alter the Recall history?

A. Yes. You can change the OCR database and change the screenshots as the logged in user or as software running as the local user. There is no audit log of changes.

Q. Are they snapshots, as Microsoft says, or screenshots?

A. They are just screenshots, jpegs.

Q. What is to stop apps on your machine accessing your Recall covertly?
A. Nothing. There is no audit log of access.

in reply to Kevin Beaumont

I wonder what’s their reward from this feature? Data for their AI?
in reply to Kevin Beaumont

Well, I think I see how they *could* use that as an excuse for saying, …

“Look, there's nothing stopping you from making/using 3rd party tools to eliminate any of the data you do not want in there. *So it's not our problem!*”

🙄

.

(But if sensitive data is in there for even a short time, it's a risk!)

in reply to Kevin Beaumont

@hacks4pancakes Q: Can I, as the user, just run a job every few hours to completely eradicate said screenshots?
in reply to [nate@social0 ~]$ :idle:

@gangrif @hacks4pancakes That's actually a really good idea. Just run a PowerShell script or something to delete the database and have it run every minute or so. Considering what Recall looks like right now, I doubt Microsoft has anything in place to prevent something like this.
in reply to Kevin Beaumont

@hacks4pancakes A long time ago, I saw a movie called "The Net", where multiple people's lives were ruined (including what was effectively an assassination) by surreptitious modification of digital records.

I think it's time to reboot The Net.

in reply to Kevin Beaumont

When this is being pushed to my work computer, I'm going to replace all screenshots will stills from spongebob the movie so it looks like I've been watching spongebob 24/7. Except they will know its tampered as Patrick Star will not appear without DRM protection.
in reply to Lesley Carhart :unverified:

@hacks4pancakes does this mean I can inject false info and false screenshots to make people see messages I want them to see in recall?
in reply to Kevin Beaumont

@hacks4pancakes injecting something illegal without the user knowing which could them be viewed later by authorities during an investigation could be a real problem. Or maybe what's more likely to happen.... adverts appearing in recall.
in reply to Kevin Beaumont

Can you make the snapshot directory nonwritable, or a link to the Windows equivalent of /dev/null?
in reply to Kevin Beaumont

If anybody is wondering what Microsoft's reaction to any of the Copilot+ Recall concerns are, they're continuing to decline comment to every media outlet.

I've seen comments MS staff have been given for enterprise customers, which are nonsense handwaving.

Product ships live on devices from Dell, Lenovo etc this month. x.com/zacbowden/status/1798221…

Questa voce è stata modificata (8 mesi fa)
in reply to Kevin Beaumont

I do hope they understand that this strategy does not work with governments. You know, organizations that, believe it or not, really do have more money and more attorneys than Microsoft.

I'm wondering if this is going to be an every-generation thing where MS has to get slapped down HARD by people with the sole monopoly on legitimate use of force, only to slowly forget the lesson over the next two decades.

Or they could spend a tiny amount on due dilligence, but that's boring.

in reply to Kevin Beaumont

the fact they're standing behind it so adamantly shows that there's some major value that they're extracting from Recall. I can't think of an answer aside from collecting the data.
in reply to Kevin Beaumont

One would think that companies are doing these awful things for some bad reason and do not expect to be punished for it.
in reply to Kevin Beaumont

I don't understand what you keep complaining about.

Guy clearly says "this is my computer, this is my Recall".

If you want to have *your* computer and *your* recall, you'll have to build it yourself. Leave the guy alone.

Questa voce è stata modificata (8 mesi fa)
in reply to Kevin Beaumont

@kcarruthers Wait, I assumed Recall was something that was a year or two down the line? It was that fucking stupid and ill thought through I assumed it had to be just a concept at most?

It's actually going live to public this month? WTAF?

That's even worse than AI LLM's going public as prematurely as they have.

How did MS's lawyers approve this? How did nobody realise just how horrible it is before the public reaction?

Questa voce è stata modificata (8 mesi fa)
in reply to Kevin Beaumont

did you catch Steve Gobson’s take on recall, after your wonderful breakdown, on this week’s episode of Security Now episode 977?

Apple link podcasts.apple.com/us/podcast/…

Grc’s website 16 kb downloadable page (not there yet though 🤷)

grc.com/securitynow.htm

in reply to Kevin Beaumont

Well, your supervisor at work will appreciate the possibility to easily look into what you did all day.

@tiraniddo

in reply to Kevin Beaumont

TotalRecall has been updated to exfiltrate Recall database and screenshots without needing admin rights: github.com/xaitax/TotalRecall
in reply to Kevin Beaumont

You can now remotely dump Recall data and screenshots over the internet from Linux etc. Changes in flight for parsing data too.

github.com/Pennyw0rth/NetExec/…

in reply to Kevin Beaumont

Maybe triggering.
this is like the concept of a shotgun house. Except for literally any level of privacy.
in reply to Kevin Beaumont

Microsoft thinks people are against Recall because they don't yet "get it" ... but people hate it because they DO understand.
in reply to Kevin Beaumont

Turns out speaking out works.

Microsoft are making significant changes to Recall, including making it specifically opt in, requiring Windows Hello face scanning to activate and use it, and actually encrypting the database.

There are obviously going to be devils in the details - potentially big ones.

Microsoft needs to commit to not trying to sneak users to enable it in the future, and it needs turning off by default in Group Policy and Intune for enterprise orgs.

theverge.com/2024/6/7/24173499…

Questa voce è stata modificata (8 mesi fa)
in reply to Kevin Beaumont

and then they can use the telemetry you can't completely turn off to see no one uses it and fire all the junior people who implemented it under directions from senior execs.
in reply to Kevin Beaumont

I mean, the trust is already lost and I really don't know what it would take for them to get it back.
in reply to Kevin Beaumont

Sounds like they finally ran this plan past legal, and after having to administer enough sedatives to drop a herd of elephants, the attorneys managed to stop screaming long enough to put put a basic list of Things That Must Happen.

FWIW, policy analysts cost about 1/10th what an attorney charges per-hour. That's actually a pretty standard FAFO tax, if you think about it.

in reply to Kevin Beaumont

Using the modern encrypted and attested VMs would be a massive step. I feel like that would require too much engineering effort for them to implement though.
in reply to Kevin Beaumont

This might be the only page in Windows setup where there’s no primary blue button for the user to mindlessly click. I don’t know if MS can say “off by default” when there’s no default.
in reply to Kevin Beaumont

Better than nothing but why not make it even more explicit, like "remember this" and "remember next 5 minutes" button at taskbar, require explicit action from person to use that? Or even broadly, why that Recall feature has been pushed into people mouth at first place? Anyway, I will move to Linux soon.
in reply to Kevin Beaumont

Obviously, I recommend you do not enable Recall, and you tell your family not to enable it too.

It’s still labelled Preview, and I’ll believe it is encrypted when I see it.

There are obviously serious governance and security failures at Microsoft around how this played out that need to be investigated, and suggests they are not serious about AI safety.

in reply to Kevin Beaumont

To still be useful encryption implies there will be a decryption key. One for the user and possibly the comeback for _NSAKEY 😀
in reply to Kevin Beaumont

Recall's gonna happen. Either accept that Big Brother has won, or use something else.

If you're one of the hapless slobs who can't use something else because your boss loves Big Brother, my condolences.

in reply to Kevin Beaumont

They’re not serious about *any* kind of safety or security TBH
in reply to Kevin Beaumont

you nailed it with "serious governance failures" and quoting by the way tha latest CISA report.

cisa.gov/sites/default/files/2…

in reply to Kevin Beaumont

this whole thing will remain a gold mine of data for everyone wanting to breach you... Storing this amount of data anywhere is a terrible idea on it's own, let alone the security Microsoft can offer.
Questa voce è stata modificata (8 mesi fa)
in reply to Kevin Beaumont

Microsoft President Brad Smith is going to be grilled by US gov next week. therecord.media/microsoft-reve…
in reply to Kevin Beaumont

notes on social media....but WHICH social media? Was it chad xitter or that rinky dink mastodon /s
Questa voce è stata modificata (8 mesi fa)
in reply to Kevin Beaumont

I should be transparent btw that I took Satya and Charlie’s commitment to security at face value too - I even published a blog on it backing that up - and I have concerns (it isn’t just me).

They’re now going to have to win trust back about winning trust back.

in reply to Kevin Beaumont

I know somebody at a retailer in Europe that is selling Copilot+ PCs. They’ve had fewer than a thousand preorders through to customers.

In relative terms, for them it’s about as successful as Suicide Squad Kill The Justice League.

in reply to Kevin Beaumont

I can't keep track of which of the batman-extended-universe games flopped at this point so I'm going to assume the sales numbers are bad.
in reply to Graham Sutherland / Polynomial

@gsuberland Suicide Squad Kill The Justice League was an absolutely massive flop, as they made a product customers didn’t ask for nor want. Which.. well…
in reply to Kevin Beaumont

which is super annoying to me.

They had the chance to finally sell a powerful #Windows laptop to compete with Apple on battery life and performance.

And what did they do? They made it all about the NPU, so now the only reason to buy it is a feature nobody wants or understands.

in reply to gigantos

@gigantos yep I agree. The devices actually look great but they managed to somehow score an own goal.
in reply to Kevin Beaumont

about the same here in norway from what I gathered.
Less than 1000 sold so far (no idea if this was across the chain, region or that store specifically)
in reply to Kevin Beaumont

I really want to know how they're going to square this new and improved concept with the fact that it's going to literally be used in abusive situations to get a better hold on the victims.

I realize this isn't a solvable problem, but the fact that it never even apparently showed up on their radar as a potential abuse is...upsetting to say the least.

in reply to Kevin Beaumont

Makes sense as Copilot is still not available in the European Economic Area, which is fine by me.
in reply to namlaz

@namlaz Copilot+ PCs are shipping in Europe. Also Microsoft 365 Copilot is available in EU.
in reply to namlaz

@namlaz so Copilot+ Recall isn’t Copilot (the branding sucks btw), and M365 Copilot is sold in EU. The European Comission and most of the EU regulators use M365, which is fun..
in reply to Kevin Beaumont

A reminder that a few weeks ago at RSA, Microsoft signed CISA's Secure By Design pledge... and then shipped an enabled by design keylogger that OCRs your screen constantly into AppData.

Edit: I should say that's less a reflection on Microsoft and more a reflection on CISA's Secure By Design pledge.. it's a good idea, but the scope is extremely limited.

Questa voce è stata modificata (8 mesi fa)
in reply to Kevin Beaumont

showing the problems of very big organizations. Different incentives within, top-down alignment finds practical limitations, conflicting criteria (like ‚be innovative‘ vs respect privacy etc). Sometimes they would have to give up one for another but that means some teams in the org are „cancelled“
in reply to Kevin Beaumont

if you ask people whether they’ll design their products to be secure, they’ll say “of course!”. And mean it! Until…. Investors or customers want that feature.
in reply to Kevin Beaumont

I think MS are a way off extracting themselves from Recall situation they've got themselves into.

This is just one YouTube comments section on a video since the not-enabled-by-default change - 500k views - but there's loads more, similar on TikTok.

I imagine it's going to continue through week and into next week when the laptops ship.

I have heard rumblings MS are discussing trying to take action against me over the whole thing, which a) good luck and b) would be pouring petrol on the flames.

in reply to Kevin Beaumont

Trying to push garbage down people's throats, coating the garbage in sugar when people call it garbage, and then getting upset when people still don't want to eat it.
in reply to Kevin Beaumont

Some backstory - it's being reported Microsoft developed Recall in secret to try to avoid scrutiny. windowscentral.com/software-ap…

I'm hearing that various MSFT people are furious about how this played out over the past few weeks, which IMHO represents a serious lack of introspection.

in reply to Kevin Beaumont

This one went a bit to the ends of extreme but I've heard this story several times before. MSFT has been too big to know and too profitable to care.
in reply to Kevin Beaumont

From that article "Had Apple announced a feature like Recall, there would have been much less backlash [...]", yet when Apple announced a much less aggressive feature (it only scanned files which were going to be sent to someone else, instead of everything you ever worked on that device), the backlash was severe enough that it forced them to drop that bad idea.
in reply to Kevin Beaumont

I felt the feature was a stupid one, just from the amount of disk space I didn't want it to take up with useless screenshots I wouldn't ever be asking it to reference.
But the security and privacy aspects should have made Microsoft cause some internal heads to roll.
in reply to Alun Jones

@ftp_alun I mean, keep in mind it was presented to the world on stage by the most senior people in the company 😂
in reply to Kevin Beaumont

That article isn't even good propaganda, I give it a C-.

But yeah, I suspect that this was kept secret from their policy and legal teams as well, because I'm going to assume that the people working on those teams are competent.

I also really, really, really want to know the gender makeup of the supersekrit skunkworks team that tested this. I mean, I feel confident in my hypothesis, but best to await confirmatory evidence.

in reply to Kevin Beaumont

all that people asked for, was that windows search doesn’t suck. And what we got was Recall.
in reply to Kevin Beaumont

Microsoft have paused the rollout of Windows 11 24H2 in preview channel, it was the version containing Recall. Microsoft have not explained why.

x.com/brandonleblanc/status/17…

I don't know if it was publicly known but it was possible to use Recall on more hardware via Mach2, before this was pulled.

in reply to Kevin Beaumont

To put this one into perspective, there's one broadcast TV network looking at Recall still, and an investigative journalist.

Plus I imagine @evacide, @wdormann etc would have something to say if MS tried holding anybody but themselves accountable for their own actions.

in reply to Kevin Beaumont

I have an image where when viewed on a Copilot+ Recall PC, a Windows process crashes as it tries to process the screenshot.

New email signature?

in reply to Kevin Beaumont

If anybody is wondering, with a Copilot+ PC, you can still programmatically access the Recall database as of today with a few commands. Launch is a few days away.
in reply to Kevin Beaumont

Microsoft’s President Brad Smith appears before US House Committee on Homeland Security tomorrow.

His testimony: homeland.house.gov/wp-content/…

In this bit he talks about Recall (not named), where he pats himself and Microsoft on the back for “a feature change” and job well done.

Given it has been a complete cybersecurity and privacy car crash - and as of today the changes (plural) they’re referring to haven’t even been implemented - it seems like Microsoft fails to grasp customer needs: safety.

Questa voce è stata modificata (8 mesi fa)
in reply to Kevin Beaumont

One other thing - Microsoft's written testimony to the US House says, quoting, bolded by MS:

"Before I say anything else, I think it’s especially important for me to say that Microsoft accepts responsibility for each and every one of the issues cited in the CSRB’s report. Without equivocation or hesitation. And without any sense of defensiveness."

Counterpoint: they publicly disputed the report in the media. theverge.com/2024/4/25/2413991…

Questa voce è stata modificata (8 mesi fa)
in reply to Kevin Beaumont

I should say that if Brad is asked about Recall tomorrow, the answers may raise some.. uh... eyebrows here.

I don't know what MS SLT have been told, but expect fun when the feature drops on consumer laptops in a few days.

As I mentioned in my blog, there is some more security hardening there on Copilot+ PCs (this was before MS put out their blog)... but it's still easily bypassable.

in reply to Kevin Beaumont

Nessus, a vulnerability scanning tool, detects Recall as an informational
Questa voce è stata modificata (8 mesi fa)
in reply to Kevin Beaumont

Microsoft’s Recall puts the Biden administration’s cyber credibility on the line

cyberscoop.com/microsoft-recal…

Interesting article. All through this, CISA and the DHS have declined to comment.

in reply to Kevin Beaumont

The Verge reports today that "Windows engineers are scrambling to get additional changes tested and ready for the release of Copilot+ PCs next week."

It also says "Recall was developed in secret at Microsoft, and it wasn’t even tested publicly with Windows Insiders."

I've also been told Microsoft security and privacy staff weren't provided Recall, as the feature wasn't made available broadly internally either.

theverge.com/2024/6/13/2417770…

in reply to Kevin Beaumont

Microsoft President Brad Smith just testified to the US House that Recall is a good example of Secure By Design, and that they have the time to get it right (it’s supposed to launch in 3 working days).
in reply to Kevin Beaumont

Brad Smith just said Recall was designed to be disabled by default. That is not true. Microsoft’s own documentation said it would be enabled by default - they only backtracked after outcry.

He has somehow got almost every detail about Recall wrong while testifying.

in reply to Kevin Beaumont

I've been back and rewatched the Recall footage at the US House hearing and I just don't get it, Brad Smith representing Microsoft basically did this about Recall's security.. he had no challenge from the Senators as they didn't know any details.
in reply to Kevin Beaumont

I’m being told Microsoft are prepping to fully recall Recall. Another announcement is being prepped for tomorrow afternoon saying the feature will not ship on Copilot+ devices at launch as it is not secure.
in reply to Kevin Beaumont

Obviously, I’ll wait to see the announcement but it sounds like they’ve finally realised they need to take the time and get the feature right (and frankly consider the target audience - most home users, it ain’t).

They should have announced this before or during the US House hearing.

in reply to Kevin Beaumont

Announcement is out. Good on Microsoft for finally reaching a sane conclusion.

- Recall won’t ship as a feature at launch on Copilot+ PCs any more.

- Won’t be available in Insider preview channel at launch, as it was pulled.

When it does appear in preview channels, privacy and security researchers need to keep a close eye on what Microsoft are doing with the feature.

Microsoft tried developing this feature in secret in a way which tried to avoid scrutiny. Thank you to everyone who stood up.

in reply to Kevin Beaumont

i hated microsoft with the heat of 1,000 suns BEFORE this so.....
in reply to Kevin Beaumont

Their InfoSec team is Super Pissed. *They* weren't informed.

Let me say again:
Linux people had to contain MicroSoft InfoSec* from killing Microsofties (last Thurs at the HackSpace meeting).

* InfoSec is InfoSec no matter who you work for. We didn't want our brothers and sisters to go to prison. This is The Way.

in reply to Kevin Beaumont

Protip: avoid the comment section under the article, didn't expect so much downplaying and ignorance
in reply to Kevin Beaumont

I can’t imagine how they got Legal to sign off on this, unless they *want* to give the EU another couple of hundred million in fines. I mean the theoretical maximum now is 12billion 🤷‍♀️
in reply to Crimea River

@bernardlyons it's not their risk, I suspect is the thinking - processing is done on your device, so you carry the risk.
in reply to Kevin Beaumont

IANAL, but they’re kidding, right? They’re expecting every user to do a DPIA? Or know how to disable it? Wtf?
in reply to Kevin Beaumont

I've always used Windows.

I have played with Ubuntu (really like DDE) and the second they retire Windows 10 and I have to have a Windows with recall, Windows is going in the bin and I'm full on Linux.

This was just insanely stupid.

in reply to Kevin Beaumont

New features that are not connected to security should be off by default. If users want it they will turn it on, if they don't then that says it all.
@0xThylacine
Questa voce è stata modificata (8 mesi fa)
in reply to Kevin Beaumont

this article uses a lot of absolutes to describe a Microsoft product.

“When Windows Recall is enabled, it places a permanent visual indicator icon on the Taskbar …This icon cannot be hidden or moved.”

“Your existing Windows 11 PC is not eligible to run Windows Recall and very likely never will be.”

I fully expect malware that surreptitiously enables Recall on any Windows 11 PC and exfiltrates data.

in reply to Kevin Beaumont

Who in their right mid would see Recall and 'That is a wonderful idea and nothing will ever go wrong with its deployment!'

Seriously. you couldn't have come up wit ha better honeypot for malware to harvest data with.

in reply to Kierkegaanks regretfully

he won't be, he's the CEO and the chairman at the same time for one thing, and he's led something like a 500% share price increase since he took over. Plus, he likely didn't decide everything along the way.

Nobody needs to be fired, just maybe don't try to ship stuff like this enabled by default in the future, where it's clearly risky.

Questa voce è stata modificata (8 mesi fa)
in reply to Kevin Beaumont

a man can dream. Nearly all enshittification of windows, office, and microsoft accounts are his doing. (I don’t work with Azure so I have no idea what’s going down there). He is the wizard of oz of pulling profit from users while abusing them.

But if this becomes a threshold moment, an infected wound where everything that’s shit about microsoft now turns people away, and keeps people away, valuation will freefall, Azure-AI or not.

Won’t happen, but I can dream

in reply to Kierkegaanks regretfully

@Kierkegaanks he definitely has a problem to manage now as they've just eroded customer so much over the past 5 years in search of inorganic growth.

I had a popup just now to change my search engine to Bing, where the options were basically 'change now' or 'change later'. It just all feels.. cheap and seedy.

in reply to Kevin Beaumont

The action should be a thanks for avoiding a bigger disaster later!
in reply to Kevin Beaumont

the only comment I disagree with is the "Hey, I don't remember what I was looking at".

I think everyone eventually has a senior moment and thinks of a similar solution, but within seconds we dismiss such an idea as idiotic madness... like Microsoft should have!

in reply to Kevin Beaumont

Hahahhahhahahahahahahahahaha.

*Inhaaaales*

HAHAHAHAHAHAHAHAHAHAHAHA!

Well, they Aren't suing you in Seattle (King County, WA) because we have Anti SLAPP. I'm reasonably certain you're not in East Texas (though they have a presence I'm sure) but you get that tossed for "Wrong Fucking Venue".

They made an aircraft with no fuselage and you pointed it out ... wah.

in reply to Kevin Beaumont

Doesnt matter they have contracts with US feds for cloud. Nobody can make them change. They are too big to hold accountable.

I guess we could all start using Apple PCs but naw?

in reply to Kevin Beaumont

The devil is the data collection and warehousing somewhere we have yet to find out.
in reply to Kevin Beaumont

Who trusts them? They're idiots. Any upgrade might turn it on. And everyone - not just Microsoft users - is impacted by it. None of this is cast in iron. They'll turn it on if the FBI asks them to. There will be hackers figuring out how to turn it on. It adds to the waste of CPU cycles by their bloated operating system. It's garbage, as is management at Microsoft. They thought people were stupid to add it in the first place. They still do.
in reply to Kevin Beaumont

While that might be a nice partial interim success, #MicroSoft
will certainly not stop sneaking on users - it s their business concept, and you dont need graphical snapshots to track a user. There s telemetry you cant turn off. Try run a #Windows PC without net connection (or blocking connections to the overlords), and you will know.

There is one way to turn it off: install Linux.

#Total #Recall

in reply to Kevin Beaumont

If I was strategic team at MS, I would have every possible statistic I could get on Linux adoption at the personal level.

I wouldn't know how to look into this, but I would bet a solid five internets that downloads of Ubuntu and other Linux desktops skyrocketed in the last week

Not necessarily installs, yet, but there's a pattern now set, where capitalists overstep a bit, and it triggers interest in alternatives (Hey Twi-umm, X, hey buddy...), and they will be aware of that too.

in reply to Kevin Beaumont

"Thanks for updating to Windows 11 Anniversary Edition [as if you had a choice]! Let's get your computer set up. Would you like to turn off 'disable the blocking of deactivating Windows Recall'?"
in reply to Kevin Beaumont

Can't imagine that crap ever being welcomed or enabled by corporates. I work for an FCA-regulated company, and privacy/security is paramount. If the techies can't turn that crap off, they'll start migrating from Win to Linux.
in reply to Kevin Beaumont

still:

beige.party/@slowbiex/11248664…

in reply to Kevin Beaumont

the fact that they didn't think about these measures from the start is already the big fat red Microsoft flag
in reply to Kevin Beaumont

I can still predicted some phishing attacks will mention that they got all your dirty secrets using Windows Recall and if you don't pay Bitcoin they will sent it to youe family, thanks Microsoft.
in reply to Kevin Beaumont

How can we be so sure?
We know that Google lied about the Chrome's private functions.

db

in reply to Kevin Beaumont

"Microsoft needs to commit to not trying to sneak users to enable it in the future"

Yeah no - they're going to 100% do it. It's their MO. Just like any public company will fuck you over.

More corporate lullabies to lull you into complacency. They are whole hog "AI" and this is what they will force on us in the end.

Linux or BSD and with the least corporate dominated distros I can find (that is still stable enough).

in reply to evacide

@evacide I’m not sure if that’s true, honestly, as the public reaction to the feature was overwhelmingly negative.

The other thing is I couldn’t speak to the privacy implications as I just didn’t know enough about that - so I’m glad you and others did.

Microsoft will have known the problems with this one and they just.. tried to do it anyway. It’s really worrying I think as it signifies a feeling of a blank cheque with AI.

in reply to Kevin Beaumont

@evacide I think that's absolutely the attitude. The starting shot of this technology was that they assumed a blank cheque for ignoring millions of people's copyright and/or licenses.
in reply to Kensan

@Kensan @evacide there is constant internal dissent at Microsoft, directed into Yammer. One problem here it didn’t stop it being rolled out at Build to the world’s press, by which point laptops were in boxes.

That’s not a healthy security or privacy culture. This was Microsoft execs queuing up to score own goals and high five themselves, at the expense of their own customers.

My bio on Twitter is literally “portable toilet cleaner” and I had to publicly unpick things with others.

in reply to Kevin Beaumont

@evacide That’s what I suspected… How this whole thing came about reflects on the company culture is what I find more disconcerting than the actual feature itself.

Thank you for your much needed cleaning services in great service of everyone!
mastodon.social/@Kensan/112565…

in reply to Kevin Beaumont

@Kensan @evacide Managers and investor types are infatuated with AI right now; it’s the only question that gets asked of any new product, service or feature proposal. I know nothing about MS but I can see how security/privacy concerns were overruled.
in reply to Kevin Beaumont

I wonder when enterprises are going to start reconsidering their relationships with Microsoft.
in reply to Kevin Beaumont

Can someone explain why anyone in their right mind would opt IN? Explain it like I'm five.
in reply to Kevin Beaumont

Still not helpful, they need to completely scrap the idea. This just gives black hats another angle of attack.

And I'm pretty sure we'll find out that FBI or whatever will be able to turn recall on remotely and completely trample on people's privacy.

Not Microsoft's first blunder doing this kind of thing.

in reply to Kevin Beaumont

More likely the entire porn industry went into lobbying overdrive.
in reply to Kevin Beaumont

This is ask for a penny, settle for a half penny strategy. Recall is still in there so they got the thing they wanted by promising it is only on if you turn it on. I mean, they wouldn't lie to us would they?
in reply to Kevin Beaumont

that is obviously not enough. Must be possible to entirely deinstall the feature - or not to install it in the first place
in reply to Kevin Beaumont

Reply auf einen Boost mit Kontext: Nein, ich glaube nicht, dass Microsoft nun total super ist und wir uns alle bedenkenlos Windows 11 holen sollen. Mein Vertrauen ist weg und bleibt weg.
Aber da ich die ganze Sache mitverfolge und regelmäßig dazu was teile, teile ich der Vollständigkeit halber auch diese Neuigkeiten. Microsoft rudert zumindest teilweise zurück, weil genug Leute geschimpft haben
in reply to Kevin Beaumont

And because they are useless morons they will enable it again next week without telling anyone. Trusting Microsoft to do anything but screw users or companies over is ... similarly moronic.
in reply to Kevin Beaumont

Apparently it already is true one day later? 🤷 soapbox.hackdefendr.com/@jeff/… But in the end, it matters not.


Yeah so we just confirmed via bleeding edge Windows 11 update that Recall will “accidentally” get (re)enabled during the update.

Roommate: “Yeah Linux Desktop is sounding better and better!”


Questa voce è stata modificata (8 mesi fa)
in reply to Kevin Beaumont

So months/years in development and we're asked to accept that mere days/weeks after it was announce Microsoft have re-engineered it to make it safer and more secure?

Or, and hear me out, did MS always intend this as the end-result but have made it more palatable by giving us the shittest possible implementation first? The ol' Ask for Lots, Settle for Less philosophy.

"Hurrah Microsoft have Listened!"

Have they fuck. Don't fall for this. We've been played.

in reply to Galactic Man

@R0B0_G0D oh there’s definitely some of that going on.

Some of the features they’re talking about were in the product before the blog - I haven’t got into that yet as said features don’t actually work properly, I don’t think they realise. The launch will be a car crash still. But at least it’s not on by default.

in reply to Kevin Beaumont

Encrypting the database, at rest? If anything can get ahold of unencrypted data from the database, its all fubar, no matter what they do.

But it is good that they are changing some things

in reply to Kevin Beaumont

They also need to make it possible not to install it at all.

Functionality which is installed but turned off is too easy to get accidentally or maliciously enabled, and non experts have no way of determining if that has happened. Same issue as always connected microphones. You don't make a software switch to fix that. You make a hard switch or a separate disconnectable component.

in reply to Kevin Beaumont

"Speaking out works"

I hate to be that guy but this is a known Microsoft playbook...

1. Advertise something awful that people hate
2. People spread the hate online
3. Microsoft acts as a good guy and tones it down a little bit so people can say that they changed and they are the good guys even if the new way is still awful
4. In a couple of updates return to the original proposal silently

Works every time...

in reply to Gloopsies :fedora:

@gloopsies I don't think they're going to be able to return to the original intent for various reasons still in motion, Microsoft have set themselves on fire with this one on multiple fronts.
in reply to Kevin Beaumont

Don't be surprised when during the future update you get Recall enabled by default and data sent to Microsoft directly
in reply to Kevin Beaumont

What I’m anticipating are the scammers who infiltrate data INTO the Recall database, or claim to, then try to extort the user. “Hi, my bot infected your computer and now I see the nasty stuff you did at Recall timestamp yy:mm:dd hh:mm. Send me BTC and I’ll forget, else I tell your employer.” Or any number of extortion possibilities. Seems more and more like Recall was conceived by AI.
in reply to Kevin Beaumont

Copilot will watch you use a computer. It will learn how you use your computer. Then Microsoft will offer your company a license deal, replacing labor. That ignites a rebellion, and in the process we kill both Microsoft and Capitalism. We invent a better world to replace it. Because we finally saw what greed does to us and we don’t want to look at the reflection of that any longer.
in reply to Kevin Beaumont

Looks like they've embraced and extended enshittification, but are finding out the hard way that extinguishing it might bring down the company.
in reply to Kevin Beaumont

Don't worry, it will be fixed on Patch Tuesday. Besides, there's no chance that a malicious actor would be able to leverage this exploit. It's all cool.
in reply to Kevin Beaumont

I love the time line on this
1. MS: this is gonna be sooo great.
2. Everbody: Nah man, that's creepy GTFO
3. The hacker sceen: this gonna be great. We gonna rip this to shreds.
4. MS: no, no, this all super secure and private and local only. Trust me bro.
5. Hackers continue to rip into the thing like it's butter.
in reply to Kevin Beaumont

is it really established that this database won't be somehow better protected on official release?
Like having the complete engine running in another VM implying that from now on windows will run as a VM on a hypervisor.
For me that's the only way to have it at least a little protected.
Questa voce è stata modificata (8 mesi fa)
in reply to Kevin Beaumont

Someone is clearly getting confused when they hear the public are crying out for a recall.
in reply to Kevin Beaumont

hey thanks for continuing to post on this.

I saw on bighard's website that they're rolling this Copilot out to Win10 as well but it's not clear if Recall will be on there? Have you been able to find anything on that aspects of this? Thanks again!

support.microsoft.com/en-us/wi…

in reply to Kevin Beaumont

I've kept my Win10 SSD since I pivoted back to Linux after I retired. Seems a good time to reclaim that drive.
in reply to Kevin Beaumont

How much space does the whole thing waste? I get it that the SQL database with the texts is small - but what about the screenshots? If they are taken every 5 seconds, they probably waste an enormous amount of space...
in reply to VessOnSecurity

@bontchev it uses at least 50gb of space. On a 512GB SSD, the default storage allocation will be 75GB, and if you have a 1TB SSD, the default space allocation will be 150GB.
in reply to VessOnSecurity

@bontchev it's quite funny as it scales up too - so say with a 1tb drive, it's on by default and allocates 150gb - which is enough space for well over 6 months of screenshots. So, like, a lot of machines are going to have a lot of history.
in reply to Kevin Beaumont

ooh, ooh, I know how to protect the historical integrity of Recall's data store! With a distributed merkle tree, backed by NPU-based mining…
in reply to Kevin Beaumont

My favourite part about the whole thing is that it is apparently still not enough to provoke an xz-like "immediately stop using computers until further notice" advisory.
in reply to Kevin Beaumont

"Yes. You can change the OCR database and change the screenshots as the logged in user or as software running as the local user. There is no audit log of changes."

One of the very first tasks I had to do at Microsoft was implement an audit log for a service that was used by maybe 200 different people (or groups). It was considered important!

Good thing Windows isn't used by more than 200 people, or

in reply to Kevin Beaumont

@maswan snälla säg att hela det här debaclet går att använda för att puckla på ITS om UmUs Microsoftberoende. Det är väl ändå uppenbart att de inte går att lita på för fem öre åtminstone när det gäller dataskydd?
in reply to Kevin Beaumont

The kind of extreme fraud/gaslighting that could be perpetuated with altered Recall history terrifies me.
in reply to Kevin Beaumont

no audit of what is essentially a keylogger? It's like this thing was some half-baked 20% personal project that someone in a suit said "eh, ship it".
in reply to Kevin Beaumont

Even if there was an audit log, what would stop attackers from altering the log?
in reply to Kevin Beaumont

how much memory would all these screenshots and ocrs take up of say, 6 months use at 9 hours a day?
in reply to Kevin Beaumont

"FakeMemoryRecall is a handy Rust application that alters the Windows Recall history, inserting screenshots that show Tor Browser being used to access CP sites. Have fun & use responsibly!"
Questa voce è stata modificata (8 mesi fa)
in reply to Kevin Beaumont

Is this one of those policies that I, with a consumer-level version of the OS, do not have access to?
in reply to Kevin Beaumont

Vague as it is, it’s such patronizing language, which ultimately is so arrogant. That’s how cultists think.
in reply to Kevin Beaumont

I love how they thought that a "disable collection" setting should also unintuitively "delete all collected data". They really didn't think this through at all, did they?
in reply to Kevin Beaumont

ars piece has factually contradicting sentences:

* "... says admin access to the system isn’t required to read another user’s Recall database. "

* "Another user with an admin account can easily grab any other user’s Recall database and all the Recall screenshots by clicking through a simple UAC prompt. "

Next to each other.
I get they want clicks through sensationalism, but wtf, this needs correcting.

in reply to Kevin Beaumont

Holy crap how does it keep getting worse? I feel like next week someone's gonna be like "oh, by the way, it autouploads all the screenshots to your instagram"
in reply to Kevin Beaumont

As many others have said, isn't this how the permissions model in Windows works?
Of course admin/root can access any user's files by going through the proper process.
That part is no different from reading another user's browser cookies.
Moreover, other than secure enclave/TPM/etc, an adversary who has root/admin can break the security of any lower privileged application.
I still think Recall is a bad idea.
in reply to iam-py-test :unverified:

@iampytest1 that's great but don't tell me, tell Microsoft. They're insisting to customers it is encrypted per device and per user, and nobody but the user can access 'their' Recall.
in reply to Kevin Beaumont

so Microsoft ends up being the ones installing those screens with big brothers face in every single fucking room everywhere.
in reply to Kevin Beaumont

It should be noted that that UAC prompt is only easily dismissed if you have admin privileges. Otherwise, it's a hard “access denied” error.

It should also be noted that this is also how it works for other users' documents and such.

Questa voce è stata modificata (8 mesi fa)
in reply to Kevin Beaumont

how do you even mess that up, surely file permissions should handle that for you??
in reply to Kevin Beaumont

> I knew it would be bad but.. it’s worse

Because "someone" has added MS-shaming to his agėnda, but for what reasons remains unknown.

in reply to Kevin Beaumont

"well, they probably would have got better coverage from launching an NFT of pregnant Clippy" ...

That is both, such an amazingly awful analogy, while being likely true, that's it's truly frightening.

Also, thatmental image has be reaching for brain bleach...thanks for that.

in reply to Kevin Beaumont

if it is not off by default for all enterprise users they are grossly negligent
in reply to Tom Dewar

@tomdewar it’s on by default for enterprise regardless, the GPO templates and intune settings are already out
in reply to Kevin Beaumont

when Android uses on-device storage with AI computing (eg., Now Playing) Google says it doesn't need to have anything appear on your PrivacyDashboard ... or even display the MIC indicator any more 😬

* something-something private compute core, and "privacy-preserving analytics"

in reply to Kevin Beaumont

and that the opt out choice will be designed using dark patterns to make it almost never chosen
in reply to Kevin Beaumont

Isn't it Great how Microsoft *solved* All The Problems the community has listed, in a few days, before it ships.

So all that has been secured, unit tested, QAd, and packaged in One Week.

Windows Users: I have a beach front time-share in Wyoming you just may be interested in.

in reply to Kevin Beaumont

Aren't users admin by default on Windows? My son is, despite our family group using Family Safety.
in reply to Kevin Beaumont

Some real "it's quite unlikely you'll ever encounter someone using email to send spam" energy right here. Bruh.
in reply to Kevin Beaumont

Not to be a mindless conspiracist, but this debacle can hardly be accidental.
What are the chances that this was a siloed development for increasing the MS market where interest in AI and repressive authoritarianism go hand in hand, ie the Gulf states? Clearly it was kept secret from the security teams etc, but got all the way through to RTM.
in reply to Kevin Beaumont

Off topic, but as a casual user of Windows (pretty much exclusively for games) is there a current best tool for removing/blocking all the existing telemetry?

It's been a while since I did the research and I'm getting the "let's set up your computer [ad preferences]" popups again.

I'd be interested if anyone in thread has recommendations

in reply to Kevin Beaumont

Can you ask Recall if, and when, what kind of pr0n the person has been watching?

I guess yes. Browsers have tabs that don't remember the history for that purpose.

in reply to Kevin Beaumont

it's the first time I can genuinely say that I'd rather switch OS for the first time in my life, rather than buy anything that includes this steaming pile. Absolutely embarrassing for Microsoft to vandalise their own brand like this.
in reply to Kevin Beaumont

Yet, as soon the copilot pc ships i retail shops there will be people lining up to buy these latest pcs, with no idea of the issues.
in reply to Kevin Beaumont

What are the (so far) considered countermeasures to Recall?

e.g. if you have an addon showing a 1x1 drm in all browser pages (wildvine demo or similar) does Recall still record the entire browser page (for “not-Edge” browsers)?

e.g. if you deliberately mangle the sqlite database file does recall stop adding to it?

I am curious what countermeasures are already considered by others.

in reply to Kevin Beaumont

Oh, and just wait for them to roll out the CSAM detection that even Apple had to walk back as an add-on…
in reply to Kevin Beaumont

I mean it's a new HIPAA violation every like 8.5 milliseconds.
You literally can't do this. It's literally illegal.
Questa voce è stata modificata (8 mesi fa)
in reply to Kevin Beaumont

They are absolutely crashing the Windows brand. I'd already been planning that my next computer was going to be Linux just to save a little money, but now it's just not even a question. Linux isn't just cheaper and easier to install, now it's the only OS I trust not to record private intimate discussions, much less PHI.
in reply to Kevin Beaumont

I've been surprised to see Paul Thurrott consistently dismissing the #Recall security outcry as fake news: thurrott.com/windows/windows-1…

After I left Twitter, I hadn't seen much from Paul anymore. Now that's he was in my Threads, it seemed like he'd gone the MAGA way with what he writes.

Oh well. Unfollow & thanks for all the years of funny #Microsoft keynote shitposts.👋

in reply to Kevin Beaumont

Nice discussion in this thread, but I just wanted to say those are some great screenshots: nice cropping, great quotes in the visible subs and dense with information.
With alt text this would've been 10/10
in reply to Kevin Beaumont

Did PCI-DSS already rule that it is no longer allowed to enter card numbers into Microsoft Windows? 😅
in reply to Kevin Beaumont

You'd need remote access as the user, in order to change policy or edit the Registry, right?
in reply to Kevin Beaumont

ugh describe remotely? You mean as a remote administrator, eg it's a corporate / school device?

This is going very well

in reply to Kevin Beaumont

Gonna be a laugh riot* when bad actors figure out that you can also remotely plant evidence in Recall that someone did something they didn't, eg view CSAM.

*it will not, as this will further erode public trust in anything and only help awful people, even low-tech CSAM traders who will have plausible deniability

in reply to Kevin Beaumont

found any system files you can delete to make it crash instead? Particularly any that won't crash anything else?
in reply to Kevin Beaumont

Is this actually running now on Windows machines? How does one know?
in reply to Kevin Beaumont

Are you aware of this news from EU law enforcement? The timing is remarkable

heise.de/en/news/Encryption-Po…

in reply to Kevin Beaumont

Stunning. Who would have guessed that this would be exactly as half baked as it sounded from the beginning?
in reply to Kevin Beaumont

I really wonder what is going on right now inside the cyber risk divisions of insurance compagnies. At first I guessed they would impose disabling Recall for all cyber insurance policies, but it seems it is not enough. If they decide not to cover incident using Recall in any way, their policies will become mostly useless; if they don't, they will be either too expensive or ruin them. I don't see a good way this can end, and we don't need insurance companies go burst right now.
in reply to Kevin Beaumont

so basically, if I ever write an EDR for Windows, I just have to check for syscalls trying to open this file and then slap the calling process?
in reply to Kevin Beaumont

PLEASE use #AltText when posting things like this! Folk with visual impairments are JUST as vulnerable to information theft as the rest of us!

[Image in the post above shows incontrovertibly that Microsoft's new 'recall' feature makes passwords available to hackers]

in reply to Kevin Beaumont

@awakecoding clearly the answer is to replace all passwords with a random number of asterisks....
in reply to Kevin Beaumont

With Recall I'm unsure how to handle suppliers remoting in to provide support.

We can't control whether Recall is enabled on *their* PC.

We'd need a remote control app which specifically won't proceed if Recall is enabled on the viewer's side.

in reply to Kevin Beaumont

I have no knowledge of $COUNTRYs regulations for stealing data. But this seems like one could argue under certain circumstances that MS was complicit in such acts if they occur and can be traced to this feature. And in the most clandestine way.

Also, the line 'Windows is a personal experience.' took me some time to comprehend.
I'd very much disagree.
Completely off topic here but that statement confused me.

in reply to Kevin Beaumont

is doublepulsar.com your blog? can you use the user preferred color scheme instead of just hardcoding white on black?

some ppl have SERIOUS struggles reading white on black, and that includes me, sadly

in reply to Kevin Beaumont

@riskybusiness

What is the aim of Microsoft there. This looks a bad idea from every angle.
Nobody would like this feature activated.

So why???

in reply to Antonio Páez 🇲🇽🇨🇦

@paezha @WizardBear Tech journalism wasn't always stenography: but Craigslist and then Google's advertising business killed the business model the magazines depended on, so the owners cut back the spending on editorial overheads until all they could afford to do was cut and paste press releases instead of actual journalism. (I got out of computer journalism in 2006; the writing was already on the wall.)
in reply to Kevin Beaumont

AI will be remembered by historians as "the thing that generated memes". 🤠
in reply to Kevin Beaumont

My personal guess as to why they're doing it is not to help their users. Windows 11 makes its money by showing ads, which can be targeted by data-mining user activity. I honestly think that the entire "it can help you do X" thing is an excuse to sell targeted ads.
in reply to Kevin Beaumont

Also hardware makers pushing for more new features in Windows that mean you need new hardware for it to run on, so they can profit form the upgrade sales.
in reply to Kevin Beaumont

So … I'm easily gleeful to hate on recall for a host of reasons.

But – I really like the idea, as a feature, in principle. Or at least, something pretty adjacent.

I want to be able to look back through what I've done and I want to be able to search through that. I love even the dumb page history in Safari and I wish it worked better helping me find fuzzily from page content.

I love knowing the music I've heard recently.

I'd love much more of this.

But there seems to have been so little thought to safety put in the Recall.

And while "yeah – wang an AI in there" makes it kind of work from screen grabs, I feel like a real solution that had some semantic understanding of my history could be far more powerful.

I'm happy with my, properly secured personal machine, to keep intimate history of what I've done with it and help me search that. I'd have a system wide and very apparent incognito mode as necessary. But a feature like that needs _a_lot_ of care.

in reply to Kevin Beaumont

I literally almost spit my coffee out.

I can't find a hole in your logic...I'm Trying, just...can't.

in reply to Kevin Beaumont

Are you using the GPU or is it CPU only? And was this hard to do?
in reply to Kevin Beaumont

Have you tried a DRM’d Office document in it yet? Curious to see what happens
in reply to Kevin Beaumont

Counterpoint: MS Recall can be very helpful if you accidentally delete your SSH private key :blobfoxwink: infosec.exchange/@malwarejake/…
in reply to Kevin Beaumont

I mean you have to admire how they Totally fuck users, but still kiss Hollywood's ass.

It would be stunningly amazing, if it weren't clinically psychotic that RIAA and MPAA concerns are more valuable than, you know, Users.

in reply to Kevin Beaumont

Knowing what we do about Copilot+Recall, I cannot imagine any competent CIO allowing it on the corporate premises.
in reply to Kevin Beaumont

Yeah, I suppose there are a lot of ignorant people in Carpetland, but I could explain this to a five year old - you could, too. Once they get the gist of what MSFT is doing, they will shriek like little girls.
Questa voce è stata modificata (8 mesi fa)
in reply to Kevin Beaumont

I was about to share a great blog post about this topic, only to realize that you wrote it 😜
in reply to Kevin Beaumont

To be fair, SQLLite's code of conduct is Shite on a Bun and not worth the power to write the bits.
in reply to Kevin Beaumont

Does it do anything beyond OCR? Does it do object recognition or things to try and assess what the user is doing?
in reply to Kevin Lyda

@lyda yes, it does object recognition of images on the screen, and it records user activity, eg minimised window blah blah
in reply to Kevin Beaumont

so, ... your image analysis technology and your NPU HW are now so efficient that you don't even notice the power impact of doing this continuously in the background, and this is the only use case you could come up with?

Which means, I suppose, this is something they always wanted to do but was prevented because sending those images to the cloud for processing is clearly much worse.

Perhaps, when their privacy/security teams told them that it was a bad idea to process user screenshot images in the cloud, designers of these features assumed it would be OK to do it locally. And when they overcame this largest objection, other concerns must have seemed ... fine, in comparison.

Security/privacy teams are rarely in a position to kill off entire features, so this was most likely some kind of a compromise.

On a related note, a lesson I had to learn the hard way is to not push hard on the biggest security/privacy issue to the exclusion of others. If/when it somehow gets resolved, you look like you are trying to make excuses when you bring up the remaining concerns "but ... but ... domestic abuse".

in reply to Kevin Beaumont

*BAM* Immediately Opt-Out for BUSINESS ACCOUNTS.

WHY Aren't The Corporate Lawyers Lined The Fuck Up in 56th St. with Belt Sanders?!?
I usually occupy a "Director of IT" role and I would be dragging my company's legal team with pitchforks and plasma cutters to Redmond (if I didn't live here and it wasn't a short walk and I actually worked for someone else that I oddly allowed to have Windows machines on my network).

in reply to Kevin Beaumont

this all broke just as I was about to upgrade an end user’s computer who is living and working with neurological complications and something to help her with basic computer operation would have been fantastic .
When she gets in a bad place she either goes down 20 blind alleys, gets mad and pto’s out, or calls me.
And the calls end up being an hour minimum as her comprehension either clicks in or not .
A constant coach would have been great for her
in reply to Kevin Beaumont

In addition to security concerns, do you know if there are any study in term of cost of energy driven by Recall ?

Just imagine the ecological price of 1.4Giga (billion )computer burning, let say 10watt for recall...
And it will be active during activity. Let say 3000h per day per computer.

14 GigaWatt worldwide × 3kh ... 52 GWh...
This is an ecological nightmare.

in reply to Kevin Beaumont

it’s like they got a focus group of cybercriminals together when making this
in reply to Jon Greig

@jgreig
@hacks4pancakes

Speaking from my compliance aspect, this comprehensively fails PCI and GDPR immediately and the SOC2 controls list ain't looking so good either.

in reply to Kevin Beaumont

The irony of Microsoft CEO saying "This is my computer, this is my Recall"
in reply to Kevin Beaumont

A general comment on corporate nature--they will abuse this info (even if by some fluke it doesn't leak like a sieve). It's only a matter of time. It's in their nature to abuse any collection of personal data. Any corporation that doesn't loses profit.

The OCR thing isn't new, of course--years ago I searched my Google Drive for "fish" and the first hit it found was a photo I took on my phone, not tagged or renamed, of a shop sign "WEIRD FISH".

in reply to Kevin Beaumont

unbelievable that they did this before shipping a good clipboard buffer. Almost everything Recall is supposed to do would work just as well, if not better, if it only collected data from the clipboard, with blocklists for apps like password managers.
in reply to Kevin Beaumont

Maybe there's more going on behind the scenes, but other than the OCR, what part of this has anything to do with "AI?" Or is that Microsoft's way of trying to put an already questionable color of lipstick that its shareholders like on a really ugly and dangerous pig?
in reply to Grant Gulovsen

@gulovsen it has some natural query language and image classification stuff.. but it’s not really AI in my opinion, it doesn’t need an NPU chip.
in reply to Kevin Beaumont

How does Recall treat Citrix Workspace sessions? (I mean, I'm using my private computer to log into my works desktop)

I'm sure my employer would be very happy to learn that it's recorded on my private machine when I access client data.

in reply to Kevin Beaumont

OMG - I expected it, but still I'm shocked. If I assume negligence, I can be fined up to 250000 CHF - just by having client data on my screen.
Somehow I'm hesitating seeing this as a desirable feature.

Why can't they just make an improved version of searching in/with the browser history ... argh...

Questo sito utilizza cookie per riconosce gli utenti loggati e quelli che tornano a visitare. Proseguendo la navigazione su questo sito, accetti l'utilizzo di questi cookie.