this post was submitted on 23 Aug 2024
444 points (98.5% liked)

Technology

59715 readers
6025 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago
MODERATORS
L3s
[email protected]
[email protected]
L4s
enu
444
Microsoft will try the data-scraping Windows Recall feature again in October | Initial Recall preview was lambasted for obvious privacy and security failures (arstechnica.com)
submitted 3 months ago by ForgottenFlux to c/technology
71 comments fedilink hide all child comments
 

Microsoft will begin sending a revised version of its controversial Recall feature to Windows Insider PCs beginning in October, according to an update published today to the company's original blog post about the Recall controversy. The company didn't elaborate further on specific changes it's making to Recall beyond what it already announced in June.

For those unfamiliar, Recall is a Windows service that runs in the background on compatible PCs, continuously taking screenshots of user activity, scanning those screenshots with optical character recognition (OCR), and saving the OCR text and the screenshots to a giant searchable database on your PC. The goal, according to Microsoft, is to help users retrace their steps and dig up information about things they had used their PCs to find or do in the past.

The problem was that other users on the same PC, or attackers with physical or remote access to your PC, could easily access, view, and export those screenshots and the OCR database since none of the information was encrypted at rest or protected in any substantive way.

Among the changes Microsoft has said it will make: The database will be encrypted at rest and will require authentication (and periodic reauthentication) with Windows Hello before users will be allowed to access it. The feature will also be off by default, whereas the original plan was to turn it on by default and make users go into Settings to turn it off.

top 50 comments
sorted by: hot top controversial new old
[–] AceBonobo 100 points 3 months ago (3 children)

They always keep trying again until we forget about it and it sticks forever

[–] [email protected] 37 points 3 months ago

I saw a comment back when they announced they were "canceling" it, saying the same thing. It seems they were right. Microsoft will do anything to get their grubby hands on as much user data as possible; of course they're not going to give up that easily.

[–] [email protected] 29 points 3 months ago

Remember how Microsoft went to court way back in the day over monopolistic practices? Yeah whatever happened to that...

[–] [email protected] 10 points 3 months ago

That's the strategy, yes

[–] Defaced 53 points 3 months ago

For those who want to escape this bullshit, Linux welcomed you with open arms and gives you control of your PC. Microsoft doesn't respect you, ditch them and move to something that will.

[–] [email protected] 49 points 3 months ago (2 children)

Microsoft should permanently recall the Recall feature.

[–] [email protected] 8 points 3 months ago

The headlines write themselves.

load more comments (1 replies)
[–] [email protected] 39 points 3 months ago

None of these companies invent things for the user anymore. It's all tracking.

[–] [email protected] 35 points 3 months ago* (last edited 3 months ago) (1 children)

Guys guys, I think you're exaggerating a bit with this feature.

I mean, what's so bad in it to be hated like this?

Whatever is so wrong in giving a company known for their awful privacy respect and incredibly high data collection they do on the computes a history of literally everything you do on your pc, key presses included?

It's encrypted! They surely won't be able to do anything with it, right?

...

Right???

Edit: typo

load more comments (1 replies)
[–] peopleproblems 23 points 3 months ago (1 children)

So do they like plan to do something with the massive amount of hospitals using Windows?

Like it seems to me that scraping PHI might be a bad idea

[–] [email protected] 17 points 3 months ago

Yes. They plan that all the HIPAA lawsuits they’ll fight off will cost less than all the money they’ll make from selling everyone’s private data

[–] [email protected] 17 points 3 months ago (11 children)

The solution: https://www.debian.org/

[–] [email protected] 22 points 3 months ago (1 children)

Mint is always an option too.

[–] feddylemmy 4 points 3 months ago (1 children)

Mint is my go to suggestion for new people switching over.

[–] [email protected] 4 points 3 months ago

Absolutely. I don't use it myself, but it's where I started and it's what I suggest.

load more comments (10 replies)
[–] [email protected] 16 points 3 months ago

I'm a fan of powerful assistive solutions, but I'm not comfortable with something closed source and proprietary running this intimately.

[–] [email protected] 15 points 3 months ago (3 children)

In case anyone has to use Windows for certain things like I do,

HERE is a link that will provide ways to turn off Windows bullshit until you can either move over to Linux full time, or at least make your Windows partition slightly better.

[–] peopleproblems 3 points 3 months ago

Dude nice

load more comments (2 replies)
[–] reddig33 13 points 3 months ago

It’s like Microsoft doesn’t want people to upgrade to Windows 11.

[–] homesweethomeMrL 10 points 3 months ago

You will be assimilated.

[–] [email protected] 7 points 3 months ago

No matter what, and at the cost of absolutely everything else, the line must go up. In no way, shape, or form does anything else matter. The line. Must. Go. Up.

[–] [email protected] 6 points 3 months ago (1 children)

I already have the registry entries added to disable that shit completely

O&O ShutUp10++ is a very good tool

[–] Wooki 6 points 3 months ago (1 children)

Linux Mint is better. No hacking necessary. It does what you want exactly as you set it.

[–] [email protected] 3 points 3 months ago (9 children)

I'm well aware of how awesome linux is.

But there's too many things I use that won't work on linux

load more comments (9 replies)
[–] [email protected] 6 points 3 months ago

Can't get me this time! Between last time and this time, I successfully removed Windows from all PCs in my life.

[–] werefreeatlast 3 points 3 months ago

Less voicy people will be left actually running windows.

[–] [email protected] 2 points 3 months ago* (last edited 3 months ago) (2 children)

I'll start by saying my username is quite true, but, they're gonna have to send the data back to microsoft, so couldn't someone block the ports they use?

[–] emax_gomax 11 points 3 months ago (1 children)

Ports? Hah, they'll send it straight through https if they want. To the base Microsoft domain so you can't block without basically disconnecting your install. Objectively that's what any security conscious user should do.

[–] [email protected] 4 points 3 months ago (1 children)

fair enough, just thought I'd ask smarter people.

[–] [email protected] 4 points 3 months ago

Besides it might spoil the relationship with your local NSA agent.

[–] JustARaccoon 2 points 3 months ago

No they won't (or at least they shouldn't), it's meant to be local

[–] [email protected] 2 points 3 months ago

They should call it total recall and get Arnold Schwarzenegger to promote it.

load more comments
view more: next ›