this windows feature should make you VERY nervous
HTML-код
- Опубликовано: 26 сен 2024
- Microsoft Recall is a mistake. In this video I'll talk about what recall is, why it really shouldn't exist, and what people are saying about it.
What is recall?: support.micros...
Wired: www.wired.com/...
Ubuntu Tutorial: • Ubuntu Complete Beginn...
🏫 COURSES 🏫 Learn to code in C at lowlevel.academy
👕 MERCH 👕 Like the shirt? lowlevel.store
📰 NEWSLETTER 📰 Sign up for our newsletter at mailchi.mp/low...
🛒 GREAT BOOKS FOR THE LOWEST LEVEL🛒
Blue Fox: Arm Assembly Internals and Reverse Engineering: amzn.to/4394t87
Practical Reverse Engineering: x86, x64, ARM, Windows Kernel, Reversing Tools, and Obfuscation : amzn.to/3C1z4sk
Practical Malware Analysis: The Hands-On Guide to Dissecting Malicious Software : amzn.to/3C1daFy
The Ghidra Book: The Definitive Guide: amzn.to/3WC2Vkg
🔥🔥🔥 SOCIALS 🔥🔥🔥
Low Level Merch!: lowlevel.store/
Follow me on Twitter: / lowleveltweets
Follow me on Twitch: / lowlevellearning
Join me on Discord!: / discord
wanna learn assembly programming? check out lowlevel.academy and use code ARMASSEMBLY20 for 20% off lifetime access. or dont. im not a cop
Hey weird side questions. Can you run Linux of Snapdragon?
@@vokoaxecer The boot stack on Snapdragon X Elite supports standard UEFI-based boot. Linux boots up using devicetrees, and all standard bootloaders, including Grub and system-d boot, should just work out of the box.
@@vokoaxecer Well android is on top of linux the kernel, so yeah, but the biggest hurdle to running non-android os I'm pretty sure is writing all the drivers to interface with the hardware
Hi, did you know that Microsoft Defender trusts the local computer in the cloud virus scanner and you can debug it to make all system think any file is malicious and effectively destroy your software competitor? Me trying to avoid false positives because my product is a development software compiler product and the encryption works based on the hard drive serial number of the pc it is compiled on so on other computers it is impossible to decrypt malicious code on another PC for the free version. You have to pay for the full version to distrubute. yet here I am Windows Defender deleting all of my potential customer EXE as false positives. So instead of making a bug bounty request and trying to explain this to Microsoft I figured I would share this information since it ruined my life. Exploit it. I wasted a month with Microsoft CS and they just made it worst.
Well I finished the video after my last comment and I highly disagree we are in an AI bubble. I also cannot believe you think that after I actually learned from your channel.
I personally love how it's enabled by default on domain group policies, so large corporations will just have this liability auto-enabled.
AI or not, you should assume that work computer is always monitored and what they see will be used against you.
@@moofymoo sure, but like, employee gets spearfished, and bam, fully indexible archive of corporate secrets.
i mean, if the company is using windows server they deserve it
@@vilian9185 dude, even if you run Samba as your primary domain controller, the windows clients will still use their defaults set by Microsoft.
I mean running windows on computers of a big corporation is already a HUGE liability.
My question is: who even asked for this? I can't imagine recall even being very useful for anyone really. It's just straight up malware built into the OS.
You won't be surprised if I told you, a lot of features in a software is not something someone ask for, but are experiments on technologies.
I think this is super useful! Ill give you an example. I was on reddit this morning and in my feed i noticed a deal at verizon for the thunderbolt 4 apple cable being 65% off ($27 dollars). I accidentally refreshed the page and no matter what subreddit i searched i could not find it. I tried R/ Apple, /iPhone etc. if i had this recall feature i could have found it way easier
It's not even about who asked for what anymore. Who keeps asking for thinner and thinner phones? Who asked for genAI? Listen to any of the current tech warlords and all you hear is "we're doing this and it's inevitable."
AI. AI is the excuse to violate user's privacy, so AI models can learn distributely and have thousands over thousands of hours of training data for free. Google and Apple probably do it also with the phones, but on remote. This AI trend comes from mobiles using NPUs
The question is where do you prefer the screens to be stored? In your machine or out of it?
My bet is it's an attempt to frame an AI data training harvester as a product. To be fair, they need that kind of data to train competent AI assistants, but people isn't just going to give it, nor are dumb enough to actually pay for a device with such system on place... right?
Microsoft Recall is basically a built-in key logger waiting to be stolen
Way worse than key logger. Keylogger has only access to what you type. Recall has way more access.
@@aritakalo8011 I *assume* recall won't have access to typed passwords though, but other than that, yeah
@@user-sl6gn1ss8p It does, but only if you click "show password" in your browser. Basically, if it shows up on your screen and you haven't put that website/app in the exclude settings, it'll catch it. Passwords and credit cards included.
Now, you may know better and delete the screenshots, but your parents don't. You may also forget to do so, or forget to empty the trash bin, and your password (or credit cards) will be stored there for months.
God forbid Microsoft adds a "feature" for backing up those screenshots. Deleting stuff from Microsoft's cloud (OneDrive included) and making sure its deleted is no easy task.
@@user-sl6gn1ss8p It will. It OCR everything on the screen, so if you ever check you typed your password right, click the little eye to see it in your password manager to type it in on another device, or see it on-screen at any time for any reason, it will have it.
Recall only has very basic options for blocking what it records, and passwords isn't one of em.
Windows already has a keylogger in the form of its "inking & typing" 'feature' which is on by default.
I think the primary use case for Recall is employers spying on employees. It's the perfect enterprise tool for collecting context-aware metrics about what employees are doing on their work PC throughout a day. An AI can analyze all the Recall data, create reports and statistics, and then you can build a database on all the employees, compare and rank "performance metrics", etc. Dystopian workplace stuff.
I typically don't care about work stuff. If that's what they wan fine. Not really my business. It's not like I work for a baby killing factory. But when I go home, that's when we part ways. Work laptop stays at home.
Employers already do this without recall
That is illegal
Well seen! That’s most likely exactly what this is for. MS being MS, I wouldn’t be surprised that this kind of mindset is well ingrained in their products
hey look as long as you good for nothings in the office don't take all our jobs at the auto parts store when you get fired by your new OS
It's very strange and coincidental that every privacy invading feature seems to get "accidentally" re-enabled or the group policy mysteriously starts getting ignored with every major windows update.
kinda, but in a different way. It's not "strange" that this is happening. One look at the world "as a stage", and I can "see" exactly how the "game" is going to finish. And knowing (exactly) how every person (feels) and (acts) and (plans), is of primary concern. These little steps and absolutely expected. What is "strange". Is that I get to "know" these things are happening. The enemy will never "show it's hand". So, the "real" threat. Is NOT these little things that we can all easily "thwart". There is a "bigger" one. These little guys are the distraction. Always keep an eye on the left hand. I lost sight of it. Maybe one of you guys can "see". Help me out here.
@@vangildermichael1767 ????
@@MinosPrimeGaming Dude lost his left hand and then mind?
@@vangildermichael1767 Either you're on some great drugs, or you're having an existential crisis.
Corporate intent is largely mediated by weaponized incompetence. Most humans wouldn't be sociopathic enough to do this intentionally, but if something breaks no one in the company benefits from fixing it, so the overall effect is "the company" as a cohesive entity getting what it "wants". That being said, suits on top also tend to be sociopathic because no one else would be able to morally justify what shareholders demand, so we get things like EEE and predatory business models which mere incompetence couldn't create.
If I can't uninstall recall, I will be uninstalling windows.
I can give you a hint on what will happen and it isn't probably you uninstalling copilot. Give Linux Mint a try on an old laptop/PC or a VM. It's a really good OS and more users = more devs.
Go someplace where the OS treats you right 👍
I only use windows 10 so I’m planning on switching to Linux whenever they force an update
If it does come it will be near the end of windows 11 before windows 12 come out that will have recall integrated im pretty sure..
I second this, mint is amazing
Same, going to change to Linux mint preaty soon
Modern tech companies:
-What you got there Bob?
-Just this project i was messing with in my spare time.
-Looks like a neat idea, build it, we are shipping it tomorrow.
- But...but it's not ready to ship it's literally storing all this data in a regular SQLite file.
- Don't we require full disk encryption in recent Windows 11?
- Yeah, I guess... But that only helps when-
- "Fully encrypted database". It ships tomorrow. Good luck
@@kebien6020spot on
@@kebien6020 "Well you're salary and work from home anyways, so you were on the clock when you made that and it's ours now."
@@andrewhooper7603 "Sir I was on vacation and I was drunk while writing all this code"
@@Vicorcivius "Drinking on the job? We may have to get HR involved."
So MS wants me to use a chunk of my disk space and write to it every 3-5 seconds, just to store something I don’t want. And I thought Apple was bad. Nope not going to happen.
Imagine the TBW on a SSD drive. It's going to be insane.
and CPU time for the operation as well
What I worry about most is accidentally scrubbing through my recall timeline trying to show something to another person and suddenly a video of my last private browser session shows up💀
Sounds like you need to set up the exclusions so it doesn't screenshot during that time 😉
From what I remember, it won't capture private browser windows... As long as you're using Edge (and possibly Chrome).
@@the-answer-is-42 it's confirmed to work with every chromium browser
That's nothing.
My worry about this is they will screenshot a game chat and report me for saying things that became illegal later.
@@the-answer-is-42 Yeah, just like "Incognito mode" in Chrome was not supposed to collect user data. ;)
Together with the "Windows Defender" default setting of allowing it to send file "samples" to Microsoft, Recall basically allows for unrestricted extraction of all screenshotted userdata within the "confines" of Microsoft's EULA.
This is the final push. The only problem it solves is that it serves as a one stop shop for all your sensitive data which hackers can use
Hackers? No, cops. This is corporate military police surveillance society
It's not the hackers you need to be concerned with, it's governments.
Hackers? The government will use this against you. You will be guilty and they will manufacture the evidence to prove you guilty.
@@kevinsteinman8967 No kidding. I can already see every single government on the planet lining up and demanding that anything that trips certain flags gets forwarded to them 'for safety reasons'.
@@kevinsteinman8967 that doesn’t matter they have that info anyway
It really goes beyond just personal privacy. This feature basically makes Windows unusable for any type of enterprise environment. What if you deal with proprietary code, company bank accounts, network passwords, protected health information, pretty much any type of info that needs to be kept private. All that is completely up for grabs now just by one machine getting hacked.
It's local. Next.
@@I_Am_Your_Problem Microsoft troll
do those companies just install unconfigured windows, no Windows System Image Manager, no Auto Unattend profile? and even if they do install unconfigured windows dont they configure it after they insatalled it?
@@I_Am_Your_ProblemLOL, life isn’t that easy. It’s a huge liability in terms of cyber security. What if your local storage is somehow accessed remotely? No company that deals with private data wants a huuuge liability like this. Yet some people like you aren’t able to think a few steps ahead. This is basically a default trojan on steroids installed onto your pc. A hackers wet dream
I saw an entire thread of people defending this feature. It's completely insane to me that people have such high confidence in something they know so very little about. The Dunning-Kruger is real these days.
Defending a feature that hardly anyone wants too! The Delusion Is Strong with some people... Who don't seem to have the mental capacity, to see what's actually going on.
People who trust Big Governments and Cooperations, need their heads examined!
@@someguy2016 sadly it was real people. Including redditors.
it's also worth it to point out that even if you use Linux or macOS or whatever, anyone who you interact with that uses Windows with Recall enabled can compromise your data.
It just takes one oblivious admin at a gov agency or corporation handling your data
This is actually great point.
😶 ohhh fuck me I hadn't even considered that
that's concerning.
I can imagine that this might cause some trouble where two-party-consent is needed for recording communications. Or do these laws only apply to spoken word?
2024 is the year of total enshitification
Buckle up, because this will be the worst decade in the history of humanity. They said 2023 was the year of enshitification.
@@axel3689 Decade of diarrhoea!
@@jonaw.2153 Pretty much, yeah. And I thought the 2010's was bad...
@@crazyluigi6664 Early 2010's were awesome. Good innovation in technology. Nothing too enforcing. Good movies and TV shows. After 2016 though..(i wonder why it coincides with Facebook acquiring Instagram??)
Was planning on switching to Linux anyways so I guess this is our call for doing so. Anyone else here that's switching to linux for good?
It’s processed locally… for now
Also law enforcement is probably salivating at the thought of a backlog of all the computer’s actions that they could easily get access to with a warrant. Then there are hackers, spyware, nation states, etc…
Who says they will even need a warrant?
@@kevinsteinman8967 No warrant means they can't use it in court.
@dakota9821 Unfortunately thats not true. Its kinda like a random person giving evidence to the police that you did something, no warrant is required, especially if the data is Microsoft's on their servers.
@@jer1776 Warrant is not required to detain the person - anything beyond arest (or keeping locked in cell longer then few days) absolutly does require a warrant and actually allows you to sue the cops for not showing it to you (they are obligated to show you the warrant for search) or not having it, you can refuse them any search in your house without it (different story with cars you are driving or bags you carry).
In most jurisdictions all it takes is for a LEO to "suspect you of a crime" and write up a bit of fiction (the affidavit), then they seize all your electronics and go on a fishing expedition. Happens daily all over the "free world". Don't believe the platitudes about warrants being super specific - once they've got your box they'll scrutinize *everything* and can worry about little things like admissibility later...
I was already someone who wasn't going to Windows 11 even if they forced me, but now I'm DEFINITELY not because of this. Holy moly is this one of the worst ideas I have ever heard from any company of this size. I will be making sure every person in my family also will not be using Windows moving forward. Good job Microsoft, I think this is a high score of stupidity for the industry.
If you wanna learn Linux, Ubuntu is similar to MacOS. It's really functional for most people. Might take a few months to get used to but you won't go back. You can also eventually learn virtualization and just run Windows in Linux whenever you need it.
True, im super dums and can use Ubuntu. @@adamk.7177
I ripped the band aid off and moved my main machine to Linux. Hasn't been painless (and I'm not new to Linux) but MS announcing EOS for Windows 10 gave me the final nudge.
My main problem with Linux is zero hardware video acceleration in browsers. Its such basic feature and for the life of me I dont understand why its not working.
@@xentiment6581 I had to enable it, chromium based browsers at least you can do hardware acceleration.
I work as a cyber security consultant and this is the worst thing Microsoft could have done. I now need to tell all my clients to not use this and even potentially recommend them to use Linux because this is the biggest single point of failure I've ever seen. I'd almost call this worse than just regular human error in terms of security flaws. I don't see how the benefits outweigh the costs and risks. Even Macintosh, with their AI systems on the M series of chips don't have anything like enabled by default, even any AI stuff you need extra permission to use. This has completely thrown out all my advice on AI and just tell people to just avoid this.
Sitting in the bank today watching the lady updating my accounts and personal data ... and got to wondering about Recall running on such laptops ....
Been saying "I'll switch to Linux onw day" for years now, Microsoft really got me switch to Linux with this one
Linux has awesome spell check also....... Just kidding.
@@GoonyMclinux there is good spell check on limux, why is it sarcasm?
@@CrucialFlowResearch O dear lord.
@@CrucialFlowResearchsarcasn*
I would recommend Linux Mint to start. It's stable, and it's UI is very familiar to Windows users.
This is why I jumped to Fedora yesterday.
ONE OF US.
Same... kind of? I had to use Nobara since Fedora doesn't install on my Surface, stops at "_" at installation. It's still a Microsoft device so I'm probably spied regardless 😬
ONE OF US!
Hello there fellow Fedora user *tips hat*
Slowly shifting over myself as well, main problem being some games that I play that I cannot get running in Linux
I wonder how much money they've invested in this feature that will ultimately get destroyed in courts and disabled by most people the first time it captures something sensitive.
Most people will never even change the default wallpaper and will not even be aware of this "feature" and even if they are they assume it must be good or that it can't be turned off.
Considering how half baked it seems, probably not much
The gambit is that even if they get legally shut down, they will have several trained models to extract information from. this is currently completely under the radar of lawmakers and will get a lot worse before it gets better.
@@sciencoking They'll just ignore the ruling until they find a judge willing to rule in their favour, like they always do.
I have my doubts. At most, the courts may order them to make opt-out easier and be more clear in their EULA, but not destroyed.
As another commenter pointed out: corporations are going to love this thing to spy on employees with. Heck, I'm sure they're already dreaming of ways to use it so they only have to pay employees for only the seconds they're actually doing work (something we got a hint of during the pandmic). "Sorry, but you hovered on the Start menu a total of 96 minutes this month, and we're going to have to dock that."
Either way, the corporations make the rules in our part of the world, and if they want this, they'll get it.
These clowns won't even let you search your own computer anymore without jumping through hoops, and I'm supposed to give them unfettered access to my complete history, that can be rifled through by anybody with a python script?
This is one of the few cases that being stored locally makes it more dangerous. You have to choose:
- Microsoft will watch you for sure.
- Any scriptkiddy wil watch you the instant you click the wrong link.
Also they managed to make blackmailware possible... as if ransonware was not enough.
can't wait for the first politician or business leader to have their recall/webcam feed splitscreen released.
is it really the future if we haven't seen Elon's O-face?
Clicking links doesn't lead to bad stuff most of the time, it would have to be some rare exploit for that.
Now what people tend to mean is "click link, download the sketchy thingi t lead you to and run it"
It may be local only for now, but I absolutely guarantee this is going to change in an update down the line the moment they feel like they can get away with it.
Or do the "It's an optional update first, you don't have to install it"-thing, only to then, about a year after secretly hide it in a version roll-up that you have to install...
Okay, so what ive learned:
1) make a folder on my desktop named Tax Information, but fill every document with ascii pictures of trollface
2) recall bad
or just make 1 document and user hard link to make multiple of it
I learned most people don't have their 1040 PDF anywhere on the PC. Relying on Windows search indexing not to find it doesn't count.
the solution to the problem that recall is supposed to solve was invented decades ago, it's called browser history
right? like the dude in the video talked about how nice it is to type "ferrari" to find the car video he was watching -- isnt that what ctrl+H is for??
LOL That's exactly what I said! 😂 And most of us disable / wipe that shit too!
This "feature" will create a HIPAA nightmare for a lot of folks.
a medical facility around here recently had to shut down bc of a ransomware attack, god knows how much personal data was sitting around in unencrypted spreadsheets. that wasnt bad enough for MS tho
Hospitals can just disable it. HIPAA only applies to data being managed by some company or third party. Being that usage for a user is for their own personal reasons, and that the data is not controlled by Microsoft, HIPAA wouldn't apply
Oh man, I hadn't Even considered this. You are right, HIPAA laws would severely complicate this. If it's determined that ANY part of this data is sent to Microsoft, it would have to be removed from any computers used in the medical industry. In fact, it would be safer to assume that Microsoft will be finding some way to access this data in one way or another, so we will NEed to find a way to disable it in order to maintain HIPAA compliance. The only way to truly comply with HIPAA is to Over comply.
@@XxZeldaxXXxLinkxX Does a hospital not manage or open medical records?
@@jonnyphenomenon are you a lawyer or a HIPAA expert? If not, why are you making things up about what HIPAA requires?
It’s not a stipulation of HIPAA that medical records can never be saved on a server other than one owned by authorized personnel.
Law Enforcement: We need a way to see what everyone is doing, now and in the past. Also, using AI to figure out risk groups and we can add extra monitoring on those groups.
Microsoft: We got you!
Hackers: I need a way to see what a users does, so we can target their important stuff so we can blackmail them! Also, if they bring up their password manager, we want to be able to see all their passwords without having to hack their password manager!
Microsoft: We got you!
Government: We need to see who's typing what and even if they don't send it we want that information! Allow us to put together a case against anyone that says anything about us. We want FULL control over every single person and keep their fear in check!
Microsoft: We got you!
Husband/Wife: I need a way to spy on my Husband/Wife!
Microsoft: We got you!
Parents: We need a way to spy on our kids!
Microsoft: We got you!
Kids: I need a way to spy on my parents!
Microsoft: We got you!
Every. Single. Person: We want to keep private things private!
Microsoft: Get Fucked.
I'm done I'm moving to Linux thanks to this, it's about time.
If Microsoft told me it was raining, I would go outside and check. Believe them? Oh please...
Weather report: "Thunderstorm, 15C"
Area i live in: "You mean 35C and fire risk area?"
Recall isn't a feature for Windows, it's an elaborate Linux advert
I advice you to say that to their faces
Its a trap.
@@FunAngelo2005 bring me to them, I will do it no problem.
@@naughtiousmaximus7853 I don't know where they are
Thanks for taking screenshots of all my logins Microsoft, I always forget them.
And credit card info, bank info, bills, etc.
All of this privacy hell, wasted NPU cycles and an ever increasing lump of data in your storage just for the mild convenience of occasionally being reminded of something you couldn't remember on your own or figure out with basic search.
I agree. The problem is that the whole thing is malicious from the start as Microsoft is force feeding this to the user instead having it be opt-in.
Microsoft does this all the time. No big tech would get backlashes like this if everything was opt-in.
Microsoft dropped a new "sudo" feature for the terminal, that's an actually good feature. The good features get to be opt-in, and the malicious ones get to be opt-out.
It will be opt-in. They just announced it
@@darthwalsh1 for now... I doubt microsoft won't change it to opt out or "accidentally" turn it on in a later update, like they've always done
I like how you only have to look at it for a literal second before "wait that seems insanely insecure" becomes incredibly obvious.
I've said this on several videos about recall. This is a HIPAA violation for anyone in the medical field. As you pointed out, there is a way to get information in plain text. That means there is unencrypted medical data stored on these computers if they are used in any type of medical setting. This data can be captured and circulated without the patients consent, and could be a huge liability for anyone accessing these records. It is especially problematic for those working in telehealth.
How is any company that requires data security going to be able to use Windows after something like Recall is added?
Even without recall, windows 11 itself is already a piece of spyware. Tried it once in a VM and I was already determined that when windows 10 reaches EOL, I would switch to linux. Now I am on a linux OS with windows VMs. Things work like a charm.
Bought a new laptop recently that came with windows 11, I wanted to make sure everything worked before uninstalling the piece of trash and installing Arch so I thought I'd go through the setup (without internet ofc), it made me sit there for almost 1 whole hour to get everything going, it tried forcing cortana and a bunch of other sketchy stuff and was a pain just to get to the desktop so I could check and run a few things. Just the setup made my skin crawl, I really don't get why anyone would actually use it.
Btw, just out of curiosity, why do you still use windows on a VM? I mostly play games on my PCs and other than Adobe stuff and Riot/Epic's "games" everything else pretty much runs perfectly.
I installed Win11 on a new PC. It felt so trashy and cheap I wiped the drive and installed Win10. My next OS will be Linux unless I can use Win10 indefinitely. Already running Linux on my Laptop.
@@Dwyriel
I have been using VMs to implement strict isolation rules before switching to a linux host OS (e.g. I don't just browse random sites on my host OS even with privilege separation accounts). Also sometimes things just don't work on wine (e.g. certain games, MS office, etc).
@@mu11668B I understand. Mostly asking because ever since I switched to linux 2 years ago, I've found an alternative to pretty much everything I used on windows, even stuff that offers compatibility with MS stuff (Like openoffice) and the few games that I know do not work on Linux are very specific games that I wouldn't not play even on windows (stuff with kernel level spyware, etc)
@@Dwyriel Cortana? You mean BonziBuddy 2.0, right?
the number of times i can think of a time i’ve had the problem that recall is designed to solve is maybe 5
5 is a lot, lol
The only time I could have used something like Recall was when I was trying lots of different algorithms in a program to find the fastest one ... then discovering that one of my earliest unsaved ones was the best. This was quickly solved by pressing CTRL-Z for about 20 seconds, copying the relavant section of the code, then pressing CTRL-Y until all redone, then pasting the best version into the most recent version of the program.
Now count the times you didn't want anyone to see what is happening on your screen.
The most puzzling thing is that someone at Microsoft actually thought this was a good idea.
Any shred of belief I still had left in Microsoft’s ability to make good decisions was just thrown out with the privacy bathwater.
Once you install windows on your computer, it is no longer your computer
Microsoft Windows Red Star Edition 😂😂
* soviet anthem starts playing *
our computer it js
fr
There is also no guarantee that Recall will stay only on your computer. Down the road Microsoft may decide to "offload" some of the processing on their servers for whatever technical reason - data there will be stored "securely" of course.
MS CEO: "*at marketing* AI hella expensive! Make some money of this thing!"
MS Marketing: "*at engineers* Go find use cases for this AI thingy-ma-bob!!"
MS Engineers: "*screws the world*"
The same with the "local account always remaining a possibility to use" -> Microsoft making it exceptionally clear they do not like people having a local account with every new rollup version of Windows 10.
The same thing with the certificate hell that might allow Microsoft to start pulling local storage certificates to force you to use OneDrive cloud storage and Microsoft claiming it didn't have this ability, and then in testing-mode messed up an update and revoked the Windows Hello certificate and it showed that even if only by mistake, they very much have the capibilty.
It is insane how much trust people put in a company that upon releasing Windows 10 showed that they could get away with a payed spyware package.
Yes, I leave out the situation of companies practically having no ability to switch due to software, but still.
I could see this because a lot of users won't be upgrading the CPU or GPU to handle this. It be part of there Microsoft 365 or something
and of course, it will only be opt-in. .. until 25H2 when it just so happens that it might indeed very accidentally quietly and just as a silly "beta fearuee nor intended for release" turn on after updating without consent 🤷♂️
who could blame them c'mon
Not to mention that the history will also most likely contain extremely sensitive information which needed to be typed into some form or website. Be it either payment information, bank codes, usernames, keys, maybe even passwords. Even just clicking the little "show password" icon on any website would be the most dangerous thing to do in this case.
In some countries, you need to request permission to capture private meetings. With recall installed, you are actually breaking the law 😅
In the US, too. A lot of states have what's called "single party consent," but that only applies to meetings where you are an actual participant. For some reason, I don't think an OS or an AI agent qualifies as a "participant" in the eyes of the law. "Reasonable expectation of privacy" _definitely_ *does* apply, though -- especially given the marketing surrounding this.
@@mage3690well no, but if the user has recall installed and they're doing it via a computer with recall, that means they're consenting theoretically. The trouble is, they're not, since it's on by default.
@@Sandromatic oh yeah, forgot about the implied consent since there's nominally an off button and a EULA. Buggers, another lawsuit foiled by those meddling corporations!
Imagine the security risk just taking this to a local shop with this enabled
Actually Adobe saw Microsoft Recall and had a massive "hold my beer" moment this week. They managed to outcreep MS by a country mile.
I'm sure they have asked "what could possibly go wrong" question somewhere along the development process, but I'm equally sure the answers were given only by microsoft's internal yes-men under time pressure
The security issues asside, I think recall is bad for the user because it pushes them to be unorganized and find stuff with recall when they need to instead of organizi themselves so that they know where they can find things
That's how computing should be, you just made one of the best arguments for having this feature.
@@TheReferrer72 "thats how computing should be" is not an argument.
@@ojsl Modern humans have to organise & retain way too much information. Computers should be able to organise for you everything you do on it. Recall is one step towards having agents.
That good enough for you?
This would just take useless amounts of storage, what a useless feature smh
I've been saying that about SEARCH since they introduced it.
I exercise discipline in my filesystem so it serves no purpose on my computers except to waste processor cycles and disk bandwidth.
Triple-L, hear me now - don't you dare change the thumbnail, it's perfect 😂
Here's an additional reason to care... any of your personal information that you ever send to someone else (family member, doctor, etc.) can be stored by Recall on a machine you have no control over, no matter how much you lock things down on your own systems.
My main reason for caring about AI is for accessibility because I’m legally blind and a realtime seeing AI would be life changing for me. But I don’t want michaelsoft breathing over my shoulder just for this type of functionality
Wow that is such a tradeoff. Microsoft wants no more than to force accessibility tech users to get there data sold. 👎👎
Microsoft already can't find folder or files when given their exact name in the search bar. Why do we think this will work any better?
Lol true
For me recall is really useless. Even copilot is useless to me.
I try to use copilot on occasion as an adapting search engine, but it's only useful like 40% of the time I use it.
@@awesomedavid2012 copilot thinks pregnant women should smoke 2-3 cigs a day.
Stop using that overhyped garbo.
@@dakota9821 Just like gemini is Pro-MAP
@@nostromza3433 i remember when gemini said you should add some nontoxic elmer's glue to your pizza to help the cheese stick to it. mmmmmm, glue....
The future is going to be like Cyberpunk 2077, tech corporations saving everything in cloudservers and spying on eachother, while making friendly customer commercial videos in their stores with slogans like "your privacy matters" , to enable your privacy, you need to go through 500 submenu's until you found that 1-click option, only to find out it still doesn't fully enables it because the closed sourced encrypted telemetry is still there in the background, running like a keylogger.
It's amazing how many people are talking about this with all sorts of examples without anyone addressing one of the biggest elephants in the room..
So I'll just say it: I don't want a record existing on my computer which is also used by other people in my household that details when I was looking at what kind of porn and how long I was watching it for.
Thats embarrassing but not necessarily devastating. If a hacker or thief manages to get your bank information though.... game over
@@centripetal6157some people's porn habits are embarrassing enough that there'd certainly be those that would pay significant blackmail for it not to be disclosed. You don't need access to their banking info if you can make them send you all the money themselves.
Could potentially be devastating if the person who finds out, is your boss or your wife!!!
This is why I feel that this is a Big Government initiative! To crack down on "immoral" behaviour within society... Like p*rn!
@@centripetal6157 It will be if you are in a religious household. (Even though I could make a really long case countering basically every Christian argument against possession/usage of pornography to level that actually makes our culture look insane by comparison, but I digress).
I thought this feature was only for ARM based windows laptops?
for now yeah it's only enabled on snapdragon
I'm curious about how Microsoft okayed recall by default given that minors likely use computers. We hold the privacy of minors to a much greater standard than adults, so a feature like this enables by default is going to affect any minor using Windows.
Evil companies doing evil things for money, as always.
1. Microsoft Recall takes a screenshot of your viewing of family photos.
2. Microsoft Recall makes a false positive of obscene content.
3. Microsoft Recall sends this warning message to Microsoft.
4. Microsoft bricks your account.
5. 8 years later, you get your account back after $10m in court fees.
and 20 years in prison.
People might see this and retreat into liberal brainrot, thinking this wouldn't happen.
Google already snitched on a man over medical photos of his son's genitals that were intended for the doctor. Their algorithms identified it as CSAM. This is especially concerning as AI is often hit or miss about properly interpreting age.
just like that one story of the father who had to take a photo of their child during the pandemic to send to their pediatrician, since everything was basically shut down, and google flagged him as a criminal.... big corpo's have their users shackled, what a decade.
@@insomnium369 I already posted a message about that (hence why I got notified of this reply), funny how I can't see it any more. hmmmmmmm
I want to store less, not more, Microsoft.
I'm still mad that I'm forced to have OneDrive on my computer. As far as I'm concerned the only secure place to store my data is on a drive that I physically own and can hold in my hands(and take a sledgehammer to if needed). Especially with the whole debacle of google using people's google drive files to train their AI(speaking of, hey google, how's things doing with Goku? He reading the temperature of your chicken for ya still?)
I moved to Linux last fall just because of these types of things MS is doing.
Happy to hear it! We need a 3rd OS family and Linux gets better every year by leaps and bounds!
Images are stored locally FOR NOW.
it gets worse imagine those scammers making your grandma to actually do the recall and gather that financial data.
This is crazy. Imagine a CIA agent or contractor with security clearance using a computer that has this. This is insane and a huge risk to not just for privacy but in general
Important to mention that today they have announced some changes to it in response to the backlash.
- It'll be opt-in, you will need to turn it on during the OOBE.
- Windows Hello auth required to view the recall timeline.
- The search index database is encrypted, with 'just in time' decryption.
So... better at least, and we'll have to see when these updates are available if they are enough of an improvement.
opt-in for now...
1) opt-in for now
2) windows hello can be bypassed
3) what about the images? are they encrypted as well?
But do you trust them wrt this feature? Trust them at all?
I think a lot of people would have less of a problem with this if it wasn't Microsoft of all people with the power of Recall.
I highly doubt if people would be ok with Google doing this as well.
Apple defenders on the other hand will defend any bad business practices the company forces upon its userbase.
nah it would be this bad regardless. its a nightmare concept that just happens to belong to microsoft right now
I cannot imagine anyone trusting any computer company with a feature like this. ( except for the people who are stupid enough to defend this feature as implemented by Microsoft! )
Linux will benefit but let’s not discount Apple pushing Macs as the safe stable solutions to businesses.
This "feature" would just take useless amounts of storage, who the hell asked for this
Q: Who asked for this?
A: You can see them when you're driving
glowies man
The NSA is thrilled. It goes well with the existing back doors MS gave them. O the crimes they will find - or invent.
Cyber criminals will love this more this the cops ever would tbh
If Microsoft's intentions weren't malicious they wouldn't have lied about Recall being a fix for Windows Search
A fix for Windows Search that requires 25GB+ of workspace ... that's believable Microsoft BLOAT!
I wonder how gaming on Linux is these days, that's all I really use windows for.
NixOS is probably the most interesting Linux environment I'm considering
Vast majority of single player and co op games run fine. Issue is mostly with multiplayer games, which explicitly ban linux, even though linux can run the game just fine.
Pretty much the only games that don't work are ones that are actively anti-Linux, and most MMO games (due to rootkit anti-cheat). I've been able to get everything else working fine.
Gaming is good in general, but i notice that some proton games (mainly unreal engine) have extra CPU overhead.
I am also on Nvidia, but even Nvidia has been super stable and easy lately. The next driver update is supposed to fix all the remaining major NVIDIA bugs on modern Linux desktops
I’ve pretty much completely switched to my Steam Deck for playing video games. Granted, I don’t play many competitive multiplayer games, but most of the stuff that I do play runs just fine on either the pre-shipped version of Proton or Proton GE.
It's surprisingly pretty good nowadays
Microsoft basically developed an API for hackers.
Satya has his Vista Moment.
Am I missing something or what? I watched the Microsoft presentation and they said "available only for Computers" because of the fact that that technology need a specialized processor (that is now present on this new Copilot+ computers), so it will not be available for normal users with a "normal" computers. But every video on internet talks about Recall like you can have it in the next windows update. Am I wrong?
That is quite important to understand because there is no reason to switch to linux if this will not affect 99% of Windows users.
Then, I am always skeptical about "this is the year of linux desktop" because I heard that a lot in the past years and nothing really changed...
Last thing: at 8:21 you said "it puts more people at risk than the ones that actually helps", and... it is kinda strange as sentence: you are right when talking about wide information leak if hacked, but on the utility point of view that is totally but not useless.
I think that this will be a wanted feature more than a "must to disable" one... but we don't have data yet, so maybe we should avoid speculation created on nothing.
I have the same sentiment as you, I find it odd every major voice is glancing over this detail. Sure MS might roll such a “feature” out to everyone and this deserves criticism, but we shouldn’t omit this detail.
NPU is already there in gpu. So if you update windows, there will be recall.
@@pyaehtetaung No, that is not true for 2 reasons:
1) Not all GPUs have also NPU, and surely not the majority; this means that if you want to run the model you need to use the "normal" GPU hardware, that in some cases can still handle this load, but you must have a good dedicated graphic cars (or the feature will be too slow and unusable). Probably, integrated GPUs in a lot of laptops cannot handle this load.
2) During the presentation Microsoft said that the model is, not only optimized, but MADE FOR that NPU. I know that the model can ideally still run also in other processors, but this is not the intention by Microsoft.
Remember that this is not a light weight feature, without that dedicated NPU it will heavily impact the performance and the power consumption of your computer.
@@pyaehtetaung A GPU can perform NPU related activities but it is not a snapdragon system, which is the only supported platform for copilot+ right now. Am I missing something here?
Having a computer like this, but offline only - might be neat. It is when your computer is online, this becomes a gigantic nightmare. I just lost 1 point of my social credit score didn't I? I won't be able to buy pickels from walmart today, dang.
Even if it were only offline... My memory works just fine!!! And with a little initiative and organisation... One can easily set themselves up to ensure that they can easily track important stuff on their computer.
As for that ONE time, when I watched that obscure video about a couple of girls... And a cup... Do I REALLY need to recall that!?
No... This is Dangerous! And the more I think about it... The more I smell a rat! I.e. "They" want to keep tabs on US!!! And our... Activities...
I watched the Microsoft announcement... I was completely stunned at how they presented this as an amazing feature.
A month later I've switched my desktop from Windows to Linux... the privacy concerns have been a long time issue with telemetry data, ads being added to the OS, etc
Gave me the kick to switch my pc to fully Linux.
They need to fire the ceo, that idiot is clueless
And go private, all big investors are idiots and don't care about the product or the customer.
@@hopelessdecoyDING DING DING! The right answer!
Talking about a serious security risk like it’s a feature, bunch of clowns
Unfortunately the only people who can fire a CEO are people who are at least as bad the CEO. Sadly, other methods may have to be resorted to.
Just went to the privacy settings on my windows installation just to find out Microsoft has added a lot more toggle that are enabled by default and allows them to collect data. Also some toggles had been re-enabled. Love these videos that remind me to check my settings 😀
Liar.
I fully switched over to Linux when Windows 11 was announced. But even though I'm not affected, I am really concerned for what this will do to the world in general. This absolutely screams surveillance state. Like wow the police are going to go crazy for this. And I don't want to see the sorts of laws that start to get drafted once people think this is normal.
Perfect. Both the points about the target audience for the feature not being able to give informed consent and MS's poor track record with settings persisting through updates were exactly right.
Bonus points for the example about a hacker breaking into your Recall data to check if you're into MTG. Bro, you run a youtube channel about assembly code and cyber security. I think they know. 😆
Jurassic Park was so brilliantly way ahead of its time: "Your scientists were so preoccupied with whether they could, they didn't stop to think whether they should."
There are certain movies and TV shows that should be required watching before becoming a software or hardware engineer or scientist.
So much porn is going to be recorded and saved for people and their families to see.
The only thing surprising to me is how much MS is pushing the envelope on admitting they have backdoors. They just call it a feature and see how we react to see what more they can get away with. Nice!
computer cooling fan goes vrooom meanwhile this thing is running...
Just swapped out to Linux , and I’m a 20 year veteran working with Microsoft products in IT high-level administration.
Microsoft is a criminal organization at this point harvesting data at any chance they get.
Guess I'll finally get down to transitioning to Linux. Wonder if I should buy computer components prior to this Copilot+ PC generation, or if I can just skip the chips with AI enablement and not have to worry about spyware baked into my hardware components
I don't think you need to be afraid of the chip itself.
That said, AMD is moving towards open source firmware for their CPUs. (OpenSIL). So that's a good bet imo
@@daniel29263 pretty new to this level of stuff. Open source firmware sounds swell, but I can foresee a lot of issues if defects make it through. Can't you brick your CPU with a bad firmware installation?
I was looking forward to the 890M Graphics since I don't do much gaming. Unsure what I'd use the AI part of their APU for right off the bat. Definitely wouldn't be using Win 11. I'd like to stay away from Copilot+ PCs
Imagine having a password manager and windows is just taking screenshots of your passwords...
I am one of the people that switched to Linux (Zorin) because of recall, and I may see some my family do the same as well since they are concerned with privacy too
I got my wife's mom on Linux Mint and she's been doing fine!
I'm so glad I switched to Linux years ago and never looked back. My Ubuntu computer (Framework btw let's gooo) truly feels like my own computer. I can do whatever I want with it. Change all the sounds, customize the look in any way, install anything as long as it's compatible with my OS, and uninstall literally every piece of software including the parts that make the OS functional if I so choose. One of the best parts about my laptop too is that the company I bought it from actually reinforces to me that this is MY computer, NOT Framework's computer. I own it. It's just so refreshing to not have to fight against something I own and to have a computer that always does exactly what I tell it.
This is basically keylogging at an extreme level. No thanks MS.
I remember when Windows Restore was released and it too was a mess. Most of us were disabling it immediately on install. Different reasons but...
Restore sucked and still is hot trash but it didn't store unsecured screenshots of your bank accounts and passwords lol
Also back then Microsoft didn't want to own everything you are and sell it to the highest bidder.
I setup a dual boot because of this, only touching windows for gaming
That's perfectly fine! That's how I lived in the past six years. :)
Though I play games very rarely. I'm not a gamer.
It’s like tech thinks they can just do anything and there are no consequences. I will simply just not own a computer if it comes down to it. The answer to recall is better file management and bookmarks.
Even the blacklist for screenshots is revealing sensitive information about sites your visit. Why are we constantly having to share EVERYTHING with private businesses?
Not just security but how much storage is this taking up?
Yuge.
Windows went from ethically concerning to "I literally do not feel safe doing my online banking on this OS".....
Exactly.
Currently in the middle of making a backup to a few drives I got and transfer from windows 10 to linux mint. Today or tomorrow is proberly my last days on windows. Mint boot device is ready and some choice videos is favorited for reference for setup.
Let me know how it goes! I'm also moving to Mint later this year.
@@k3salieri The move was succesful, except for a small detail...
I couldn't get Mint to work with my wide curved monitor. It was glitchy a.f. so I choose Kubuntu instead. It had stock support for the monitor and everything went smoothly. (Honestly I like the Plasma UI over Gnome anyway.)
Only issues were for mounting my NAS correctly via SMB and some file sharing, no large issues detected. Aside from getting used to using the system, it's really straight forward. The vast majority of the features is where you'd expect them to be and if that doesn't work it has a global search system just like Windows has. Honestly I'd say I made a significant improvement over Windows 10.
Recall is a massive wet dream for both overbearing employers and cybercriminals alike. A convenient little database sitting on your computer that tells the story of literally every single thing you do on your computer? That's not going to be disastrous at all. Windows literally has keylogging software built in, and enabled by default for both home users and corporate users. There has never been a better argument for switching to a Linux-based desktop OS. I'll be doing so once Windows 10 goes EoL.
People switching to Linux are in for a surprise because the Linux distribution providers spent the last 10 years making Linux desktop worse instead of making improvements and preparing for this moment
Depends on which ones
I do not agree. Linux today is much better that 10 years ago and is ready for prime time, no doubt about it.