Q. Is this really as harmful as you think?

A. Go to your parents house, your grandparents house etc and look at their Windows PC, look at the installed software in the past year, and try to use the device. Run some antivirus scans. There’s no way this implementation doesn’t end in tears — there’s a reason there’s a trillion dollar security industry, and that most problems revolve around malware and endpoints.

    • mctoasterson@reddthat.com
      link
      fedilink
      English
      arrow-up
      75
      ·
      5 months ago

      No major corp I’m aware of is excited about these changes. Legal especially would like there to be the minimum records retention required by law, and a months long AI searchable database of individual user actions on a PC is a nightmare scenario for them.

      • deltapi@lemmy.world
        link
        fedilink
        English
        arrow-up
        4
        ·
        5 months ago

        Forensic data recovery. How many 500GB drives ship to PCs that never use more than 20% of that?

      • hemko@lemmy.dbzer0.com
        link
        fedilink
        English
        arrow-up
        4
        ·
        5 months ago

        “By default” meaning it can be changed.

        Then someone in the company gets their device compromised, and security starts looking what happened on the device that time. “We’d have that data, but it was deleted yesterday because of the retention policy on recall” -answer from that new guy in IT dept. Security then reminds that the company policy requires minimum 30 days retention for all logging of security events.

  • simple@lemm.ee
    link
    fedilink
    English
    arrow-up
    141
    arrow-down
    5
    ·
    5 months ago

    They OCR the entire screen and store it in plaintext?! There is no way… I know it’s Microsoft we’re talking about, but are they really this stupid?

    • tal@lemmy.today
      link
      fedilink
      English
      arrow-up
      90
      arrow-down
      3
      ·
      edit-2
      5 months ago

      It’s encrypted; the author is pointing out that it has to be decrypted to be used, and then the data can be obtained.

      Security and privacy concerns aside, I saw someone commenting on the use case, asking who would ever want something like this.

      One problem I hadn’t appreciated for a long time was that some people apparently have real problems with dealing with the Windows UI in terms of file access. They don’t know where their data is being saved. This, in my opinion, is in significant part a Microsoft UI problem induced by various virtual interfaces being slapped on top of the filesystem (“Desktop”, “My Documents”, application save directories, etc) to try to patch over the issue that the filesystem layout was kinda organically-designed in a kind of cryptic way back in the day.

      But if you can remember a snippet of text in what you were working on, you can find that thing again even if you have no idea where you stored it. Like, it’s content-keyed file access.

      That’s not very useful to a techie. They know how to navigate their system’s filesystem, and even if they lose track of a particular thing, they know how to use the system’s filesystem search tools to search for filenames or content. They can search for recently-modified files. They know how to generally get ahold of stuff.

      But for the people who can’t do that, reducing their interface to a single search box might make file access more approachable.

      Now, let me reiterate that I think that a whole lot of this is Microsoft repeatedly patching over UI problems they created in the past rather than fixing them. And they’ve done this before over the decades with stuff other than document access. It’s hard to navigate the filesystem to find an installed program a la the MS-DOS era, so they stick stuff in a Start Menu to make it more accessible. That gets too crowded, installers start slapping shortcuts on the desktop. That gets too crowded, installers start adding system tray icons. That gets too crowded, the Start Menu becomes searchable. Each interface just becomes progressively less-usable and the solution each time is to stick a new interface in on top of the old one, which in turn contributes to the complexity of the system as a whole.

      But that doesn’t mean that they aren’t trying to address a real problem.

      I think that they’d do better with something like having a rapidly-accessible log of recently-accessed files (like, maybe have the filesystem maintain a time-based doubly-linked list of those) and be able to rapidly search the content of documents based on mod time so that recent stuff gets hit quickly, then trying to make their existing search tools more accessible. That doesn’t replicate data across the system and produce some of the problems here. It also permits for fully-searching content, rather than just the stuff that was on a screen when the Recall system grabbed a screenshot and OCRed it. Maybe they’ve done something like that in recent years; I’m many years out-of-date on Windows.

      I’d also add that I think that personal computer systems in general would benefit from giving users better control over where their data is replicated to. It’s kind of confusing…you’ve got swap (well, encrypted swap probably helps somewhat with this). Browser history. Any clipboard manager’s retention. Credentials stores. Application-saved copies of in-progress files. Various caches. If you use some kind of cloud-based storage, you’re pushing data out to other computers. Backups. Just a lot of state that can be replicated all over the place and is hard to go back and track down and remove. That’s even before stuff like issues with doing secure deletion on existing filesystems (which we had a conversation about the other day, everything from log-structured filesystems to wear-leveling on SSDs inducing data replication). If you want something definitely gone, be able to manage your data’s lifetime, something that I think that a lot of people – even non-techies – would like, you really have to have a lot of technical knowledge of the system’s internals as things stand today. This Recall thing is egregious, replicates data all over, but it’s far from the first feature that makes it harder for people to understand and control the lifetime of data on their computer.

      I don’t think that the software world has done a great job of letting people control that data lifetime. And I think that it’s something that a user should reasonably be able to expect out of their computer.

      • jjjalljs@ttrpg.network
        link
        fedilink
        English
        arrow-up
        39
        ·
        5 months ago

        There was an article going around a while ago that was arguing most users these days, including the youth we often stereotype as “digital natives” who “get computers”, don’t understand file systems. They might not even know they exist as a concept.

        Which makes sense if you’ve only ever really used modern UIs. You don’t have to know anything about files and folders. I bet a lot of people don’t even know they exist in any meaningful way.

        Most users are shockingly ignorant, and a lot of them are not really paying enough attention or interested enough to learn much.

        • Womble@lemmy.world
          link
          fedilink
          English
          arrow-up
          13
          ·
          5 months ago

          I remember reading an article a few years back about physics undergraduates who didnt know how to use a computers file system. They could learn, but these are smart likely at least fairly tech inclined kids and they didnt know how to navigate folders on a computer at 18.

        • Flying Squid@lemmy.world
          link
          fedilink
          English
          arrow-up
          4
          ·
          5 months ago

          My daughter certainly doesn’t have a good understanding of file systems even though I’ve been trying to teach it to her.

          • A Phlaming Phoenix@lemm.ee
            link
            fedilink
            English
            arrow-up
            5
            ·
            5 months ago

            We recently went through a nuke-n-pave on my kids desktops. I plugged in an external drive for them to do backups, and we walked through the process. This was in Fedora with pretty much default Gnome tools. They came away understanding the process and how to track it, but I think they still don’t really understand file organization.

            • Flying Squid@lemmy.world
              link
              fedilink
              English
              arrow-up
              6
              ·
              5 months ago

              These kids grew up with tablets and smartphones where they don’t even see the file system, so I’m not shocked.

        • Kushan@lemmy.world
          link
          fedilink
          English
          arrow-up
          3
          arrow-down
          5
          ·
          5 months ago

          I don’t think any of the UX problems you’re describing have been solved on any platform. If anything Windows is one of the better examples here, because I’ll be fucked if I can ever find a file on Android and don’t get me started with Linux.

        • FarceOfWill@infosec.pub
          link
          fedilink
          English
          arrow-up
          2
          ·
          5 months ago

          With recall you can search for a website you saw once, a link in a discord channel, an email all at once in one place.

      • sorter_plainview@lemmy.today
        link
        fedilink
        English
        arrow-up
        12
        ·
        5 months ago

        I completely agree with this. I work as a User Experience researcher and I have been noticing this for some time. I’m not a traditional UX person, but work more at the intersection of UX and Programming. I think the core problem when it comes to discussion about any software product is the people talking about it, kind of assuming everyone else functions the same.

        What you mentioned here as a techie, in simple terms is a person who uses or has to use the computer and file system everyday. They spend a huge amount of time with a computer and slowly they organise stuff. And most of the time they want more control over their stuff, and some of them end up in Linux based systems, and some find alternative ways.

        There are two other kinds of people. One is a person who uses the computer everyday but is completely limited to their enterprise software. Even though they spend countless hours on the computer, they really don’t end up using the OS most of the time. A huge part of the service industry belongs to this group. Most of the time they have a dedicated IT department who will take care of any issue.

        The third category is people who rarely use computers. Means they use it once or twice in a few days. Almost all the people with non-white collar jobs belong to this category. This category mainly uses phones to get daily stuff done.

        If you look at the customer base of Microsoft, it’s never been the first. Microsoft tried really hard with .NET in the Balmer era, and even created a strong base at that time, but I am of the opinion that a huge shift happened with wide adoption of the Internet. In some forum I recently saw someone saying, TypeScript gave Microsoft some recognition and kept them relevant. They made some good contributions also.

        So as I mentioned the customer base was always the second and third category. People in these categories focus only on getting stuff done. Bare minimum maintenance and get results by doing as little as possible. Most of them don’t really care about organising their files or even finding them. Many people just redownload stuff from email, message apps, or drives, whenever they need a file. Microsoft tried to address this by indexed search inside the OS, but it didn’t work out well because of the resource requirements and many bugs. For them a feature like Recall or Spotlight of Apple is really useful.

        The way Apple and even Android are going forward is in this direction. Restricting the user to the surface of the product and making things easy to find and use through aggregating applications. The Gallery app is a good example. Microsoft knew this a long back. ‘Pictures’, ‘Documents’ and all other folders were just an example. They never ‘enforced’ it. In earlier days people used to have separate drives for their documents because, Windows did get corrupted easily and when reinstalling only the ‘C:’ drive needs to be formatted. Only after Microsoft started selling pre-installed Windows through OEMs, they were able to change this trend.

        Windows is also pushing in this same direction. Limiting users to the surface, because the two categories I mentioned don’t really ‘maintain’ their system. Just like in the case of a car, some people like to maintain their own car, and many others let paid services to take care of it. But when it comes to ‘personal’ computers, with ‘personal’ files, a ‘paid’ service is not an option. So this lands on the shoulders of the OS companies as an opportunity. Whoever gives a better solution people will adopt it more.

        Microsoft is going to land in many contradictions soon, because of their early widespread adoption of AI. Their net zero global emission target is a straightforward example of this.

      • Cosmicomical@lemmy.world
        link
        fedilink
        English
        arrow-up
        9
        arrow-down
        1
        ·
        5 months ago

        As a species we have invented something called “indexes” that solve exactly that kind of problem. We actually have an entire field of science called information retrieval, that doesn’t require screenshotting your whole life to produce the same result.

      • rottingleaf@lemmy.zip
        link
        fedilink
        English
        arrow-up
        5
        ·
        5 months ago

        I don’t think that the software world has done a great job of letting people control that data lifetime. And I think that it’s something that a user should reasonably be able to expect out of their computer.

        That’s true.

        I once thought about this, that maybe it’s a good idea to use a tagged and maybe log-style filesystem, where 1) every directory name in file path becomes a tag for it, other than the user-added tags (which can be searched separately), 2) there are temporary and permanent files, where temporary ones are deleted once their lifetime passes or that plus once the space is required, while permanent ones are stored indefinitely, 3) with hardlink functionality transparently available to the user, from the GUI, 4) the GUI itself should drop the bullshit and return to DOS times in the sense of control - with this thing I describe it may well be that the casual user won’t feel as lost as they do now.

        Maybe (again, transparent and user-accessible) filesystem overlays for every application are a good idea too here, like with Docker, chroots, MacOS DMG images, etc.

        In addition to that indexing file contents may make sense too, like you said.

        Frankly there are so many good things one can do which haven’t been done, before just OCR`ing everything on the screen and storing it.

        About “why MS chose this” - because they consistently choose the dumbest and ugliest way to deal with any problem. The heaviest artillery available, to look relevant.

        Offtopic - the searchable start menu problem is what scares me off Gnome every time I try it. You just get that tablet-like one-level place with a search field and icons. A frigging lot of fscking icons for every dot-desktop file Gnome found. Then I panic and get back to FVWM.

    • WhatAmLemmy@lemmy.world
      link
      fedilink
      English
      arrow-up
      11
      arrow-down
      1
      ·
      5 months ago

      They’re a surveillance capitalism corp first and foremost. All other considerations, including security, are secondary.

  • deweydecibel@lemmy.world
    link
    fedilink
    English
    arrow-up
    116
    arrow-down
    3
    ·
    edit-2
    5 months ago

    Are Microsoft a big, evil company?

    A. No, that’s insanely reductive. They’re super smart people, and sometimes super smart people make mistakes. What matters is what they do with knowledge of mistakes.

    I have no doubt there are smart employees, but they don’t call the shots. Case in point.

    The dude set up a strawman argument, then didn’t even bother to burn it down properly.

    • Grangle1@lemm.ee
      link
      fedilink
      English
      arrow-up
      40
      ·
      5 months ago

      Being super smart and super evil are NOT mutually exclusive. Intelligence =|= morality.

        • Hobo@lemmy.world
          link
          fedilink
          English
          arrow-up
          7
          ·
          edit-2
          5 months ago

          Why reach for a fictional example when so many real world examples exist? Just curious because I think of Bezos, Musk, and to a lesser degree Gates as examples of smart people doing bad things. I mean there’s several very smart people that have done good things as well but those are harder to come by. Even people like Alfred Nobel created something he thought would save the lives of miners only for his invention to be used for war. Einstein also did a lot for the advancement of theoretical physics and his work was subsequently used as the foundation of the atomic bomb. It’s actually way harder to come up with a Tony Stark type smart “good guy” in the real world for me because reality is often far more grey.

          • AngryCommieKender@lemmy.world
            link
            fedilink
            English
            arrow-up
            9
            arrow-down
            2
            ·
            5 months ago

            I don’t think of Bezos, Musk, or Gates as exceptionally intelligent. They are lucky and influential, sure. Intelligent? Musk is automatically out just because of his Twitter feed. The other two haven’t shown themselves to be particularly intelligent, just ruthless and efficient when it comes to generating profit.

            As far as the other side of that coin, I tend to agree. Most of the really intelligent people that have existed have been pretty grey morally speaking.

            Hence why I went with fictional examples. At least with Lex Luthor, there’s very little grey area in his moral stances.

            • Hobo@lemmy.world
              link
              fedilink
              English
              arrow-up
              9
              arrow-down
              3
              ·
              edit-2
              5 months ago

              Gates is insanely intelligent, like demonstratably so. Musk and Bezos are also very highly intelligent people. Do they have terrible, awful, even downright despicable views? Absolutely. But don’t be fooled, all three of those people are incredibly smart with actual high IQs (not in the braggart, “I have a very high IQ.” sense either).

              Intelligence doesn’t translate to empathy or wisdom. Some of the least book smart people I’ve met have been profoundly wise at times, and some of those same people were incredibly empathetic. Unfortunately, I think all three of those people (Musk, Bezos, and Gates) are lacking in those traits, but saying they aren’t in fact measurably intelligent is only fooling yourself.

              I say this as someone who was raised by a measurably very highly intelligent person who could be, and was, a complete monster at times, and had some really twisted views on the world/other people. Lucky for me I didn’t inherit that innate Intelligence I guess!

              • neclimdul@lemmy.world
                link
                fedilink
                English
                arrow-up
                9
                arrow-down
                1
                ·
                5 months ago

                Is musk really intelligent? He’s not dumb but honestly seems like most of his success is from buying things and or getting smart people under him who are able to succeed despite his medlling. The ideas he forces through tend to be bad. Giga factory was largely a disaster and he had to relearn manufacturing. Giga casting? Dead. A lot of the super heavy stuff he’s directly influenced failed or are drawing out the timeline as the struggle to address. Cybertruck and semi…

                • g_the_b@lemmy.world
                  link
                  fedilink
                  English
                  arrow-up
                  6
                  arrow-down
                  1
                  ·
                  5 months ago

                  Musk and Jobs are/ were highly effective psychopaths. Not geniuses in an academic sense but incredibly shrewd and calculated.

                  Gates, Bezos, Zuck, Page and the likes are very intelligent and very confident. Like I wouldn’t be able to one up any of them in a debate, but I wouldn’t be afraid of them trying to destroy my life out of spite.

                • sugar_in_your_tea@sh.itjust.works
                  link
                  fedilink
                  English
                  arrow-up
                  4
                  ·
                  5 months ago

                  Hiring smart people and seeing market opportunities and executing on those opportunities absolutely are skills. It’s the same sort of skills Hitler had, where most of the genius lies around organising people around a common goal.

                  A lot of companies either get the smart people, time market opportunities perfectly, or execute perfectly on a clear vision, but very few do all three at the same time and tend to fail. The first (lots of smart people) run out of money, the second is the “too early” group and their ideas get taken by someone else, and the third spends their resources going in the wrong direction.

                  Elon Musk wasn’t successful because he knows a lot about electric cars or rockets, he was successful because he saw an opportunity, secured enough funding, hired the right people, and focused those people in the right direction.

                  You can be incredibly smart in one area and incredibly dumb in others. Elon is great at pitching an idea to get funding, and using that funding to hire the right people. He fails when he overrides those smart people.

              • Promethiel@lemmy.world
                link
                fedilink
                English
                arrow-up
                2
                arrow-down
                2
                ·
                5 months ago

                These totally normal human beings you sound like you deify…are you their psychiatrist, psychologist, therapist, counselor? Short of those professions or a former tutor who happened to treat all three…

                Well, interesting thing to devote anecdotal brain power to, I’ll tell you that.

                • Hobo@lemmy.world
                  link
                  fedilink
                  English
                  arrow-up
                  2
                  ·
                  edit-2
                  5 months ago

                  Yeah totally that’s why I said they were basically morally corrupt and used them as an example of smart people doing bad things… Maybe your judgement is a bit clouded?

        • LordCrom@lemmy.world
          link
          fedilink
          English
          arrow-up
          6
          arrow-down
          2
          ·
          5 months ago

          As we get older, I tend to agree with the supervillains.

          Lex Luther wants a weapon to counter this insanely strong, invulnerable Superman that can destroy the planet … I’m like: Yes we should

          Magneto considers mutants superior and if humans wage war, then mutants have the right to wage war back, and win. Survival of the fittest. If I was a mutant, I would be on Magnetos team.

          • sugar_in_your_tea@sh.itjust.works
            link
            fedilink
            English
            arrow-up
            6
            ·
            5 months ago

            Magneto wanted supremacy, not equality, and was willing to use genocide of non-mutants to get it. And Lex Luthor was a narcissist who was jealous of Superman’s power and popularity; he wasn’t acting for the benefit of humanity, he was acting in his own interests.

            Every good villain has mostly justifiable motivations, they just take it too far. Magneto would be justified if he sought equality, and Luthor would be justified if he developed but didn’t use the weapon until Superman did something evil.

            The only justifiable amount of force is just enough to neutralize an active threat, and no more.

  • DarkSurferZA@lemmy.world
    link
    fedilink
    English
    arrow-up
    73
    arrow-down
    1
    ·
    5 months ago

    I get the security issues, sure, those are valid, but the privacy ones are even worse. Imagine a teenager trying to search information on being gay, or possible intrusive thoughts on their family computer, only for their super maga right wing parent to find it in the screenshots.

    Or someone being abused at home and searching for support facilities, deleting history and being outed by recall.

    Wait, how about credit card fraud as a result of EVERYONE who has access to this computer can read your cc data?

    Or, my husband was looking at jewelry online yesterday and he hasn’t told me, he must be cheating, right? Oh sorry, I forgot, our anniversary is next week… Hahahaha, don’t be upset babe.

    Best one ever though, imagine your search history, your porn watch history accessible to anyone with access to your computer? The fucking horrific existence of having an employer process this data at scale using fancy staff monitoring program 7, and run stats on the fact that you had a toilet break while working from home, and they want to know if it was a number 1, or a number 2 so they can work a mean time to shit metric into your KPA/scorecard.

    Guys, whatever benefit you think this is. It’s not worth it.

    • uhN0id@programming.dev
      link
      fedilink
      English
      arrow-up
      13
      ·
      5 months ago

      Ultimately privacy is part of security so, if anything, everything you mentioned is just more reinforcements that this is a major security concern.

      As someone that has been obsessed with tech since being a kid in the 90s I think the tech side of this is super cool and very exciting stuff. As a user, though, I only like this if I’m the one implementing and using it. I do not trust a mega corporation (or really any company) to “leave it locally on my computer and totally not use that data for other purposes”. Right now it’s supposed to be (as far as I last heard) only on your machine but we’ve seen EULAs and TOS’ etc change many times over the years but especially over more recent years as data continues to be king and data like this is a literal bottomless diamond mine.

      I know this isn’t your point but it’s just worries I have in addition to your points. And let’s not even start about what this means for law enforcement abuse. No thanks, I’ll wait for a FOSS equivalent that at least gives me and the community the opportunity to evaluate how it works.

    • ArcaneSlime@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      7
      arrow-down
      6
      ·
      edit-2
      5 months ago

      Not that it solves the problem, but since I’m not the King of M$ this is about all I can do: you could easily get around all that by turning off secure boot and booting into a persistant live-usb containing a linux distro of your choice (Tails for extra privacy/ease, if you can use Tor) to do all your secret agent computing needs. The host PC can’t see shit of what happens on Tails.

      Edit: lol you downvoted me because I can’t singularly change an entire corporation’s mind and instead offer workable solutions that you could make within the next 30 minutes to mitigate the problem until such time as your plan for Microsoft domination comes to fruition and you can change it back?

      Ok I guess, “chump don’t want no help, chump don’t get no help. Jive ass fools ain’t got no brains, anyhow.”

      -Barbara Billingsly

  • suction@lemmy.world
    link
    fedilink
    English
    arrow-up
    50
    ·
    5 months ago

    Couldn’t you use a separator to make it one line of code? That way it’d be even more dangerous

    • sugar_in_your_tea@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      9
      ·
      5 months ago

      I did an interview where the candidate said that if it’s one line, it runs in constant time. And they were completely serious. And this was in the context of Python list comprehensions.

      They claimed this ran in constant time:

      new_list = [value for value in my_list]
      

      Whereas this ran in linear time:

      new_list = []
      for value in my_list:
          new_list.append(value)
      

      We asked clarifying questions, like what happens to the runtime if the list gets really large, and they doubled down.

      And this was for a senior Python dev position… No, they didn’t get the job.

      • suction@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        arrow-down
        1
        ·
        5 months ago

        Runs in constant time doesn’t ring a bell to be honest…do you mean instantly?

        • sugar_in_your_tea@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          1
          arrow-down
          1
          ·
          5 months ago

          No, constant time means it’ll take the same amount of time whether you have 10 items or 10,000.

          A list comprehension will take roughly the same amount of time as a for loop, it’s just syntactic sugar.

          • suction@lemmy.world
            link
            fedilink
            English
            arrow-up
            1
            ·
            5 months ago

            Thanks!

            Not sure why you needed to downvote my honest question, maybe the candidate dodged a bullet there, he he he.

            • sugar_in_your_tea@sh.itjust.works
              link
              fedilink
              English
              arrow-up
              1
              ·
              edit-2
              5 months ago

              I didn’t downvote.

              If this was a junior candidate or something, I may have let it slide. But this was a senior candidate, which means they are supposed to be a technical leader for the team. I can’t have someone in that role with such fundamental misunderstandings. There were more red flags than just that one, I also don’t fail people for one gaff (e.g. I just passed a senior that bombed the coding challenge, but it was obvious they were over-thinking it).

    • Dicska@lemmy.world
      link
      fedilink
      English
      arrow-up
      8
      arrow-down
      1
      ·
      5 months ago

      Are you… Are you saying EVERYTHING can be hacked with one line of code?

      • suction@lemmy.world
        link
        fedilink
        English
        arrow-up
        4
        arrow-down
        1
        ·
        edit-2
        5 months ago

        Ever since those Aliens brought us their ancient and mysterious line separator tech, we have all we need to do just that!

        • Dicska@lemmy.world
          link
          fedilink
          English
          arrow-up
          4
          ·
          5 months ago

          Independence day was indeed a great movie. Who would have thought they also use X86 architecture?

    • dustyData@lemmy.world
      link
      fedilink
      English
      arrow-up
      32
      arrow-down
      1
      ·
      5 months ago

      Not just enterprise. Some organizations handle extremely sensitive information of victims of crimes, survivors of wars, potential political targets, just to name a few. A feature taking a screenshot and registering all of that data is a nonstarter. MS will have to prove that the feature doesn’t run with certain gov clients, the privacy risk is way too high.

      • deweydecibel@lemmy.world
        link
        fedilink
        English
        arrow-up
        15
        arrow-down
        1
        ·
        edit-2
        5 months ago

        On the other end of the spectrum, the vast majority of home users have no idea how to disable this or that it’s even activated. There will be folders of Recall shit filling up everywhere, waiting for someone who knows it’s there to access it.

        If any of them access their work data on the Microsoft 365 web apps, it’s now sitting in that folder, and they will not know.

        This is honestly the biggest evidence yet of a need for some sort of regulation that certain privacy related things should not be allowed to be activated by default. They should always be opt-in, period.

    • jordanlund@lemmy.world
      link
      fedilink
      English
      arrow-up
      28
      arrow-down
      1
      ·
      edit-2
      5 months ago

      Enterprise will love it because it will allow them timestamped access to everything their employees are doing during the day.

      They will have it set up to alert on a various things…

      “So, Bob, you were playing Minesweeper from 9:45 to 9:53, was that a scheduled break for you?”

      “Jane, your screen showed no substantive changes from 1:03 to 4:15, you weren’t in a meeting, what were you doing?”

      • Someonelol@lemmy.dbzer0.com
        link
        fedilink
        English
        arrow-up
        15
        arrow-down
        1
        ·
        5 months ago

        The surveillance would be a double edged sword. If they were to be hacked, all sensitive information that was going through their PCs could be compromised.

        • jordanlund@lemmy.world
          link
          fedilink
          English
          arrow-up
          28
          arrow-down
          1
          ·
          5 months ago

          They will convince themselves it can’t be compromised. Never under-estimate the stupidity of middle management.

          • Flying Squid@lemmy.world
            link
            fedilink
            English
            arrow-up
            4
            arrow-down
            1
            ·
            5 months ago

            And no one was able to stop the White Star Line executives by saying, “maybe you shouldn’t be 100% sure the Titanic is unsinkable?”

    • BearOfaTime@lemm.ee
      link
      fedilink
      English
      arrow-up
      17
      arrow-down
      6
      ·
      5 months ago

      It won’t.

      All the crap from MS only affects ignorant home users. (I say that with no criticism - home users often lack significant expertise in this stuff).

      Corporate has an IT team dedicated to image building, based on requirements gathering, which is well documented and well tested before it’s deployed to even a small test group (usually us fellow IT geeks get to be Guinea pigs first).

      Once it’s been certified, then they’ll deploy to a second, larger group, test and verify.

      Wash, rinse, repeat.

      Plus they’ll probably start with new hires and anyone with a machine that is falling off lease/aging out. This gives them a little room, in that new hires don’t have any local data (no one should have much in the first place), and people with aging machines can hold onto the old machine for a couple weeks as a fallback, just in case.

      I’ve seen it several times, been part of deployment and upgrade teams.

      Additionally, they deploy policies to redirect any MS network services to their own internally hosted services - windows is designed to do this, there are specific policies for everything, such us Windows Update services, even the MS App Store. Because no company wants machines pulling random crap from outside the company (they probably even block the access at the network level - I would).

      • TexMexBazooka@lemm.ee
        link
        fedilink
        English
        arrow-up
        17
        arrow-down
        1
        ·
        5 months ago

        Everything you’re describing is how it should be done. Realistically it isn’t done properly, all the time, and that’s why breaches happen.

    • ripcord@lemmy.world
      link
      fedilink
      English
      arrow-up
      3
      ·
      5 months ago

      This will fly for corporations wanting to use it themselves against their employees.

  • Churbleyimyam@lemm.ee
    link
    fedilink
    English
    arrow-up
    31
    ·
    5 months ago

    Even supposing I didn’t care about the security implications of this, why on earth would I want this functionality? I can barely keep up with all my activities in the present moment, let alone the past. It’s like a morbid and pathological unification of nostalgia and hoarding.

  • A_Random_Idiot@lemmy.world
    link
    fedilink
    English
    arrow-up
    26
    ·
    edit-2
    5 months ago

    I cant believe they are including this in enterprise edition too.

    They usually keep their dirty spyware out of the enterprise editions to avoid losing corporate clients who dont want their secrets easily pluckable.

    • ಠ_ಠ@infosec.pub
      link
      fedilink
      English
      arrow-up
      10
      ·
      5 months ago

      Maybe in the future it can be used by managers to keep an eye on what their underlings are doing at all times. I suggest calling the manager’s remote version Microsoft Panopticon.

    • EzTerry@lemmy.zip
      link
      fedilink
      English
      arrow-up
      5
      arrow-down
      1
      ·
      edit-2
      5 months ago

      Ask yourself what this feature is actually useful for. Ignore the concerns of privacy just what can this really do.

      Its not really needed for copilot, if it wanted to capture what you were doing it would directly update the internal model, no reason for the slide show of your action.

      No besides wasteing disk space this is for:

      1. Gaming youtubers to get a screen shot of something when they were not recording
      2. Some screen shots of history when searching not better than the file/website preview really
      3. Tracking and logging what the end user is doing so when audited by the manager/it they can use it as proof you are not doing it right/are inefficient /should ve fired

      By all means a company can disable this in policy im sure, but its for the enterprise not the end user. (and yes stored locally, but if you delete the laptop when they want to inspect it that likely is all the excuse they need)

      • tidaL@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        ·
        5 months ago

        Benefit to my org is getting billers to look for untracked time, which would equate to some percentages of revenue increase in my opinion.

        Just need to balance it with security concerns…

        • EzTerry@lemmy.zip
          link
          fedilink
          English
          arrow-up
          1
          ·
          5 months ago

          enable for roles with more locked down PCs and tasks the companies hope to automate, and disable on more core mission critical IT…

  • DirkMcCallahan@lemmy.world
    link
    fedilink
    English
    arrow-up
    22
    ·
    5 months ago

    The full article is well worth reading. It’s good to find a lucid, logical deconstruction of why, precisely, this will be a complete disaster.

  • TheTimeKnife@lemmy.world
    link
    fedilink
    English
    arrow-up
    17
    ·
    edit-2
    5 months ago

    We should have let the government actually break up microsofts monopoly long ago. Now they will abuse it to force millions of Americans to use their spyware.

  • retrospectology@lemmy.world
    link
    fedilink
    English
    arrow-up
    7
    arrow-down
    1
    ·
    edit-2
    5 months ago

    Does anyone yet know how to break stuff like Copilot?

    I don’t have Win11, but I also never really trust that MS won’t surreptiously push this kind of thing in the background to legacy systems, and I don’t trust UI toggles within Windows to actually do anything.

    Do we know if there are services or files that Co-pilot needs to function?

    • CileTheSane@lemmy.ca
      link
      fedilink
      English
      arrow-up
      4
      ·
      5 months ago

      Do we know if there are services or files that Co-pilot needs to function?

      Co-pilot requires windows. I’m going to try Linux Mint and see how that goes.

  • RoyalEngineering@lemmy.world
    link
    fedilink
    English
    arrow-up
    3
    arrow-down
    7
    ·
    edit-2
    5 months ago

    I keep hearing all the rabble rousing about this from a security perspective, but is there not an incognito mode to the Recall capability?

    • A_Random_Idiot@lemmy.world
      link
      fedilink
      English
      arrow-up
      5
      arrow-down
      2
      ·
      5 months ago

      There cant be.

      It literally screenshots what you’re doing every few seconds, and builds a plain text database of any and all text it captures.

      Incognito mode is not having it installed.

      • RoyalEngineering@lemmy.world
        link
        fedilink
        English
        arrow-up
        2
        arrow-down
        8
        ·
        5 months ago

        Hmm that didn’t sound right so I had to look it up. Microsoft says there’s a way to pause the recall snapshot functionality for a set amount of time, like an incognito mode:

        Pause or resume snapshots To pause recall, select the Recall icon in the system tray then Pause until tomorrow.  Snapshots will be paused until they automatically resume at 12:00 AM. When snapshots are paused, the Recall system tray icon has a slash through it so you can easily tell if snapshots are enabled. To manually resume snapshots, select the Recall icon in the system tray and then select Resume snapshots.

        https://support.microsoft.com/en-us/windows/retrace-your-steps-with-recall-aa03f8a0-a78b-4b3e-b0a1-2eb8ac48701c

        I don’t understand why there’s so much FUD around this product…

        • ltxrtquq@lemmy.ml
          link
          fedilink
          English
          arrow-up
          10
          arrow-down
          1
          ·
          5 months ago

          You don’t understand why there’s so much fear, uncertainty, and doubt about an on-by-default program that records everything you do? Are you being serious right now?

          • lemonmelon@lemmy.world
            link
            fedilink
            English
            arrow-up
            3
            arrow-down
            1
            ·
            5 months ago

            I find it hard to take seriously anyone who throws the term FUD around with no sense of irony.

          • RoyalEngineering@lemmy.world
            link
            fedilink
            English
            arrow-up
            2
            arrow-down
            2
            ·
            edit-2
            5 months ago

            Yeah not to be obtuse here, but I think the fear is over sensationalized. I haven’t seen it in person, but it seems like this is a totally new product that is similar to idea of browser history, but adds in some modern features. I would like to check it out.

            on-by-default

            That’s not correct. Based on the documentation, Windows Setup has an option to enable/disable the feature on first boot.

            The documentation also says it doesn’t capture incognito windows and I mentioned in my other comment that you can turn it off temporarily and permanently. It doesn’t run all the time no matter what, like some of the comments have suggested.

            Here’s a screenshot of the config page with a simple toggle to turn off:

            • ltxrtquq@lemmy.ml
              link
              fedilink
              English
              arrow-up
              2
              ·
              edit-2
              5 months ago

              Windows 11’s Recall feature is on by default on Copilot+ PCs

              Disabling the AI snapshotter requires a trip into Settings for ordinary users

              Over the weekend, The Verge’s Tom Warren posted (on twitter) screenshots showing Microsoft’s latest Out-of-Box Experience (OOBE), in which the Recall feature can’t be turned off unless the user opens Settings after completing setup.

              Now, it’s possible things have changed in the last few days, but I wouldn’t really expect them to based on the last time I used windows. I also didn’t know this before I tried looking it up, so I’ll admit I’m a little biased against microsoft.

              But the real question is, what documentation are you looking at where you’re pulling all this information from? Can you provide a link?

  • TalesOfTrees@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    13
    arrow-down
    72
    ·
    5 months ago

    As reasonable the concerns are… it seems like there’s quite a bit of fearmongering over software and hardware that haven’t even really gotten into the mainstream yet.

    • exanime@lemmy.today
      link
      fedilink
      English
      arrow-up
      45
      arrow-down
      3
      ·
      edit-2
      5 months ago

      Agreed that there is a bit of exgaerated dread… but honestly this has all the hallmarks of a monkey knife fight in an elevator, it’s hard to imagine how this won’t end in disaster

    • Spuddlesv2@lemmy.ca
      link
      fedilink
      English
      arrow-up
      24
      arrow-down
      1
      ·
      5 months ago

      Do you think it would be a better idea to wait until it’s installed and active on every Windows computer before we start a discussion on how bad Copilot is?

      • Blaster M@lemmy.world
        link
        fedilink
        English
        arrow-up
        4
        arrow-down
        14
        ·
        5 months ago

        Only computers that can run it… are pretty much none of the computers running 11 today. The CPU needs to have an NPU, as the AI functionality is run locally on the PC.

        • Spuddlesv2@lemmy.ca
          link
          fedilink
          English
          arrow-up
          11
          ·
          5 months ago

          Go look at all the Windows PCs announced in the last few months and you will see they have NPUs. So again, why would we wait until it is too late to try to stop this nonsense?

          Also the “AI” may run locally but it saves the info into an easily accessible and readable SQLite database in the users AppData. It will be trivial for malicious actors to access.

    • Someonelol@lemmy.dbzer0.com
      link
      fedilink
      English
      arrow-up
      12
      arrow-down
      1
      ·
      5 months ago

      I heard this same argument from people all the time. Until it affects you in a meaningful way to change your mind, it’ll be too late.

    • vext01@lemmy.sdf.org
      link
      fedilink
      English
      arrow-up
      7
      ·
      5 months ago

      The writing style is a bit weird, but I think the concerns are valid. That sqlite file is a treasure trove for hackers/scammers.