508
Microsoft is reworking Recall after researchers point out its security problems (arstechnica.com)
submitted 2 years ago by to c/technology@lemmy.world
90 comments fedilink hide all child comments
 

the company says that Recall will be opt-in by default, so users will need to decide to turn it on

you are viewing a single comment's thread
view the rest of the comments
[–] 31 points 2 years ago (3 children)

still dont understand why you would ever want to save screenshots of your desktop and also waste disk space

  • permalink
  • fedilink
  • source
  • hideshow 6 child comments
    •
  • [+] 11 points 2 years ago* (last edited 2 years ago) (2 children)
    [deleted]
  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] [S] 8 points 2 years ago (1 child)

    Yeah, it sounds like it might actually be a useful feature if it wasn't impossible to do it securely and in a privacy respecting way.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [+] 7 points 2 years ago* (last edited 2 years ago) (1 child)
    [deleted]
  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] [S] 7 points 2 years ago

    To be fair to Microsoft, this was a local model too and encrypted (through Bitlocker). I just feel like the only way you could possibly even try to secure it would be to lock the user out of the data with some kind of separate storage and processing because anything the user can do can be done by malware run by the user. Even then, DRM and how it gets cracked has shown us that nothing like that is truly secure against motivated attackers. Since restricting a user's access like that won't happen and might not even be sufficient, it's just way too risky.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 3 points 2 years ago

    I can definitely see the utility in the feature, it's just that it, conceptually, is such a security risk that it's simply not worth it, even ignoring the data harvesting/storage penalty.

    You enter a discussion and you need to refer to an article you know you've read but can't find? Now you can find it. You want a backpack and remember seeing one you liked but can't remember where you saw it? Ask it to show backpacks you looked at - great now you've tracked it down in seconds rather than spending half an hour.

    But yeah, the security and privacy implications of this are so bad that it's really not worth the tradeoff.

  • permalink
  • fedilink
  • source
  • parent