7mo ago

Stealing everything you’ve ever typed or viewed on your own Windows PC is now possible with two lines of code — inside the Copilot+ Recall disaster.

Q. Is this really as harmful as you think?

A. Go to your parents house, your grandparents house etc and look at their Windows PC, look at the installed software in the past year, and try to use the device. Run some antivirus scans. There’s no way this implementation doesn’t end in tears — there’s a reason there’s a trillion dollar security industry, and that most problems revolve around malware and endpoints.

You're viewing a single thread.

219 comments

I cant believe they are including this in enterprise edition too.
They usually keep their dirty spyware out of the enterprise editions to avoid losing corporate clients who dont want their secrets easily pluckable.
- My hospital will be freaking the fuck out about this right… about…. Now.
- Maybe in the future it can be used by managers to keep an eye on what their underlings are doing at all times. I suggest calling the manager's remote version Microsoft Panopticon.
- Ask yourself what this feature is actually useful for. Ignore the concerns of privacy just what can this really do.
  Its not really needed for copilot, if it wanted to capture what you were doing it would directly update the internal model, no reason for the slide show of your action.
  No besides wasteing disk space this is for:
  Gaming youtubers to get a screen shot of something when they were not recording
  Some screen shots of history when searching not better than the file/website preview really
  Tracking and logging what the end user is doing so when audited by the manager/it they can use it as proof you are not doing it right/are inefficient /should ve fired
  By all means a company can disable this in policy im sure, but its for the enterprise not the end user. (and yes stored locally, but if you delete the laptop when they want to inspect it that likely is all the excuse they need)
  
  Benefit to my org is getting billers to look for untracked time, which would equate to some percentages of revenue increase in my opinion.
  Just need to balance it with security concerns..
  
  enable for roles with more locked down PCs and tasks the companies hope to automate, and disable on more core mission critical IT..

219 comments