Microsoft Recall should make you consider Linux
It was hard to miss the irony in Microsoft’s latest product announcement.
A new feature named “Recall” takes snapshots of whatever is on-screen on a #Windows 11 computer, every few seconds, and then stores it locally on-disk. Unfortunately it turns out that the analyzed data is stored in plaintext, leaving users’ private activity vulnerable to hackers. As security researcher Kevin Beaumont pointed out, “Stealing everything you’ve ever typed or viewed on your own Windows PC is now possible with two lines of code.”
And yet #Microsoft named it “Recall.” It’s an interesting choice, given the problems it’s likely to create...
https://creativegood.com/blog/24/recall-switch-to-linux.html
#why #spyware
It was hard to miss the irony in Microsoft’s latest product announcement.
A new feature named “Recall” takes snapshots of whatever is on-screen on a #Windows 11 computer, every few seconds, and then stores it locally on-disk. Unfortunately it turns out that the analyzed data is stored in plaintext, leaving users’ private activity vulnerable to hackers. As security researcher Kevin Beaumont pointed out, “Stealing everything you’ve ever typed or viewed on your own Windows PC is now possible with two lines of code.”
And yet #Microsoft named it “Recall.” It’s an interesting choice, given the problems it’s likely to create...
https://creativegood.com/blog/24/recall-switch-to-linux.html
#why #spyware
Everything you do with a #windows 11 computer is being recorded by microsoft
now a non #microsoft operative has found a way to extract this info
the result ? : info on everything you have been doing with a laptop is possible to be captured by a hacker
https://www.wired.com/story/total-recall-windows-recall-ai/
Dubbed TotalRecall the tool can pull all the information that Recall saves into its main database on a Windows laptop.
>"The database was easy prey," Hagenah says.
Since Microsoft revealed Recall in mid-May, security researchers have repeatedly compared it to spyware or stalkerware that can track everything you do on your device.
They were correct.
>"It's a Trojan 2.0 really, built in," Hagenah says, adding that he built TotalRecall only in order to show what is possible to capture peoples information. He is not going to do it himself but hopes Microsoft takes action after seeing this happen. So that people are safe.
Included in what the database captures are screenshots of whatever is on your desktop -- a potential gold mine for criminal hackers or domestic abusers who may physically access their victim's device. Images include captures of messages sent on encrypted messaging apps Signal and WhatsApp, and remain in the captures regardless of whether disappearing messages are turned on in the apps. There are records of websites visited and every bit of text displayed on the PC.
Once TotalRecall has been deployed, it will generate a summary about the data; it is also possible to search for specific terms in the database. Hagenah says an attacker could get a huge amount of information about their target, including insights into their emails, personal conversations, and any sensitive information that's captured by Recall.
Hagenah's work builds on findings from cybersecurity researcher Kevin Beaumont, who has detailed how much information Recall captures and how easy it can be to extract it.
https://github.com/xaitax/TotalRecall
#why #spyware #recall
now a non #microsoft operative has found a way to extract this info
the result ? : info on everything you have been doing with a laptop is possible to be captured by a hacker
https://www.wired.com/story/total-recall-windows-recall-ai/
Dubbed TotalRecall the tool can pull all the information that Recall saves into its main database on a Windows laptop.
>"The database was easy prey," Hagenah says.
Since Microsoft revealed Recall in mid-May, security researchers have repeatedly compared it to spyware or stalkerware that can track everything you do on your device.
They were correct.
>"It's a Trojan 2.0 really, built in," Hagenah says, adding that he built TotalRecall only in order to show what is possible to capture peoples information. He is not going to do it himself but hopes Microsoft takes action after seeing this happen. So that people are safe.
Included in what the database captures are screenshots of whatever is on your desktop -- a potential gold mine for criminal hackers or domestic abusers who may physically access their victim's device. Images include captures of messages sent on encrypted messaging apps Signal and WhatsApp, and remain in the captures regardless of whether disappearing messages are turned on in the apps. There are records of websites visited and every bit of text displayed on the PC.
Once TotalRecall has been deployed, it will generate a summary about the data; it is also possible to search for specific terms in the database. Hagenah says an attacker could get a huge amount of information about their target, including insights into their emails, personal conversations, and any sensitive information that's captured by Recall.
Hagenah's work builds on findings from cybersecurity researcher Kevin Beaumont, who has detailed how much information Recall captures and how easy it can be to extract it.
https://github.com/xaitax/TotalRecall
#why #spyware #recall
WIRED
This Hacker Tool Extracts All the Data Collected by Windows’ New Recall AI
Windows Recall takes a screenshot every five seconds. Cybersecurity researchers say the system is simple to abuse—and one ethical hacker has already built a tool to show how easy it really is.