this post was submitted on 10 Oct 2024
1100 points (97.8% liked)

Technology

58593 readers
3886 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS
 

TLDR:
Windows 11 v24H2 and beyond will have Recall installed on every system. Attempting to remove Recall will now break some file explorer features such as tabs.

YT Video (5min)

Invidious Link

Original Github Issue

you are viewing a single comment's thread
view the rest of the comments
[–] cmeu@lemmy.dbzer0.com 36 points 1 day ago (3 children)

So.. how does this exist in corporate environments where PCI DSS is necessary? Is the government also going to have to deal with fallout from this?

I wonder if there will ever be a point where legislation dictates features from an os vendor.. we lost control of our hardware when they started forcing updates. I'm sure someone will hack a DLL or something to allow explorer to run but kill this component... But should we really need to hack our systems to protect ourselves from spying?

Inb4 Linux - I ran Slackware in the early 90s, and my server still runs a deb based distro.. but when I want to play Forza, I'm pretty limited with my choices, etc.

[–] JackbyDev@programming.dev 24 points 1 day ago* (last edited 1 day ago) (1 children)

Microsoft: We're going to arbitrarily require TPM and SecureBoot and say that makes Windows 11 more secure even though that's a feature of your motherboard, not our operating system.

Also Microsoft: In Windows 11 the file explorer program depends on a program that periodically sends us screenshots of your screen.

So secure!

[–] 01189998819991197253@infosec.pub 1 points 2 hours ago (1 children)

Security <> privacy. And this is where they slice the difference. Although, they're not secure, either lol

[–] JackbyDev@programming.dev 2 points 1 hour ago

Sending random screenshots somewhere is not secure at all lmao. That's a hacker's wet dream.

[–] disguised_doge@kbin.earth 8 points 1 day ago (1 children)

From my understanding, you can prevent Recall from running just fine, you only can't remove it.

[–] T00l_shed@lemmy.world 10 points 22 hours ago

OS level malware. I suspect it will be turned on in an update a few years down the road. And then MS will be caught, say "whoops my bad!" And pay a 100 million dollar fine after their new valuation on the stock market of 5 trillion dollars.

[–] ThePrivacyPolicy@lemmy.ca 12 points 1 day ago (1 children)

I've been wondering this too. Will there be a way for company policy admins to somehow remove this fully? I work in an industry that deals with very sensitive and private information - no way in hell this would ever even remotely be allowed or pass any audits. Even just existing but being disabled could be problematic.

But big companies aside, how will this impact small companies who have no real in house IT? The potential for it to be capturing and storing stuff like, as you say anything required by PCI compliance, could turn into a nightmare. We also know this will inevitably be hacked or used by spyware somehow, someday, too no matter how secure they say it may be. So now a bad actor can recall an entire day work and data capture from a worker?

Wondering the same here. I work in an extremely regulated industry as well. We have MS as a strategic partner but haven't even deployed win 11 yet.
That said we have a deal to use co-pilot and also chatGPT. Both in a unique version that is compliant with company policies. Co-pilot integration into teams is not quite recall level but similar, think video transcripts, meeting and chat summaries, etc. I have no clue how this works practically but I assume there are some strict contracts regarding training data and data usage in place.