467
Microsoft addresses Windows Recall backlash, promises to fix security issues and make it opt-in
(www.windowscentral.com)
this post was submitted on 08 Jun 2024
467 points (96.2% liked)
Technology
59672 readers
2708 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Opt-in does not matter, if I message or email someone who has it on, my personal data has been collected without my knowledge or consent.
This shouldnt have been built in the first place, it's irresponsible
This raises an excellent point not considered. This goes for all texts as well if the other person uses the "your phone" app. Discord, matrix, signal, telegram etc are all compromised by this existing on a system.
Will my browser's "private mode" be respected or it is going to store every inappropriate thing I search?
Are password managers safe? How about bank security questions? How often are those actaully obfuscated. The last 4 digits of social security numbers are usually unobfuscated, which is also what a lot of intuitions (stupidly) use to verify your ID over the phone. What if I want to look at the PDF of my tax documents?
What if my HR manager has this enabled and starts viewing PDFs containing private information about employees, payroll data, finances and whatever else is sellable on the dark web.
How about govermnet data? Sure maybe the pentagon IT staff will completely block it, but what about local gov committee ABC that's collecting voter information?
That type of data is valuable enough that it will be targeted regardless of what protection MS attempts. Based on the fact they didnt bother encytping the data from the start, my faith is low.
The implications of this are insane.
That's true of any malware on your contact's computer or an unsecure server, though. That is not specific or novel to this feature.
(I'm not saying I like this feature, or think it's a good idea. I don't, and it's not)
So what you are saying is, is that it's malware. I agree.