50
submitted 5 hours ago* (last edited 4 hours ago) by arscynic@slrpnk.net to c/privacy@lemmy.ml

If one chats/mails with a person using Windows, despite using secure private protocols, every message will be stored by Microsoft's Windoze Recall. Either I'm missing something but this feature seems like the most grotesque breach in online privacy/security.

What are ways to avoid this except for using obfuscated text?

top 19 comments
sorted by: hot top controversial new old
[-] Kryptonidas@lemmy.wtf 7 points 40 minutes ago

If you tell something to someone else, assume it’s compromised.

[-] MalReynolds@slrpnk.net 3 points 30 minutes ago* (last edited 29 minutes ago)

Wow, valid issue.

Spitballing, potentially a secure app could run memory only, blah, blah, blah. Nope, you've given M$ your screen FFS, it's all over. If you care, move elsewhere, tell your friends...

As you point out, codes are an option, but it's not a slippery slope, it's a waterslide.

[-] GetOffMyLan@programming.dev 1 points 10 minutes ago

It can be turned off so it's up to the person you're messaging. Once you send something the person at the other end is in control of what happens to it.

[-] MentalEdge@sopuli.xyz 12 points 1 hour ago* (last edited 1 hour ago)

Don't forget that while they managed the PR better, apple "Intelligence" also has access to damn near everything on your devices.

[-] themoonisacheese@sh.itjust.works 1 points 37 minutes ago

If the content CNA be displayed, it can be parsed by recall.

The only way I can see to bypass it is to obtain DRM keys and display your content on a website only if widevine is active, like Netflix does. Surely it can't screenshot DRM protected content, but also this is Microsoft .

[-] pHr34kY@lemmy.world 56 points 3 hours ago

If it leaves your device, you cannot control it.

[-] Alexstarfire@lemmy.world 69 points 4 hours ago

Can't control what other people do so you might be out of luck.

[-] reddig33@lemmy.world 13 points 4 hours ago

So is there a way for businesses to disable this garbage feature through managed device settings or something? I’m guessing corporate legal departments aren’t going to be too thrilled with this feature.

[-] egonallanon@lemm.ee 4 points 3 hours ago

There's a CSP for disabling it on windows enterprise devices at least. Not sure if there's a way for pro and home machines.

[-] Tobberone@lemm.ee 1 points 26 minutes ago

There must be. Recall and info sec is mutually excluding by definition!

[-] BlastboomStrice@mander.xyz 17 points 4 hours ago

Ugh, I didnt think about that😬

[-] jaxiiruff@lemmy.zip 11 points 3 hours ago

Me neither! Microsoft needs to be taken to court over this because it is a serious breach of privacy to not only record the users but even random bystanders as well. Now I am convinced this is just a backdoor for the government hiding in plain sight. Fuck them.

[-] CosmicTurtle0@lemmy.dbzer0.com 1 points 51 minutes ago

Oh this 100% is the government backdoor that they've been begging for. "If you can innovate your way into it, you can innovate a way out of it."

That was in regards to Apple phones belonging to Boston bombers being encrypted and locked.

It's no surprise that behind closed doors, the government asked these companies to create backdoors for them to spy on people.

[-] hddsx@lemmy.ca 8 points 4 hours ago

To my knowledge, there isn’t. But you can ask the person to turn off recall. I’m going to be running 11 in a VM myself so /me shrugs

[-] galileopie@lemmy.ml 8 points 4 hours ago

The code for Recall is in the code for File Manger. Recall cannot be turned off if you want Windows to load and function.

[-] GetOffMyLan@programming.dev 1 points 7 minutes ago

There's literally an option to turn it off

[-] joeldebruijn@lemmy.ml 8 points 4 hours ago
[-] helpImTrappedOnline@lemmy.world 1 points 8 minutes ago* (last edited 6 minutes ago)

That's just the off button. But you can't remove it because they tied it to explorer as a depenacy. Off or not, explorer doesn't work with out recall.

Turning it off is a good step 1, but what's stopping some malicious software, such as every windows update, from turning it back on and selling our data for profit.

[-] Max_P@lemmy.max-p.me 2 points 4 hours ago

You can't, at that point you assume your correspondent is compromised. It's not just recall but also malware and credential stealers. Doesn't matter if recall is taking screenshots, if the messaging client itself is pwned via malware then they have full access to as much history as is available.

this post was submitted on 22 Oct 2024
50 points (96.3% liked)

Privacy

31649 readers
610 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

Chat rooms

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS