September 27th, 2024

Microsoft's more secure Windows Recall feature can also be uninstalled by users

Microsoft redesigned its AI-powered Recall feature to enhance security and privacy, making it opt-in, with full encryption, user authentication, and the ability to block specific apps before its October preview.

Read original articleLink Icon
Microsoft's more secure Windows Recall feature can also be uninstalled by users

Microsoft has redesigned its AI-powered Recall feature, focusing on enhanced security and privacy. Initially set to launch with Copilot Plus PCs in June, Recall faced scrutiny over its security measures, prompting Microsoft to make it an opt-in feature that users can uninstall. David Weston, Microsoft's VP of enterprise and OS security, emphasized the importance of user choice, stating that Recall will not be enabled by default. The feature now includes full encryption of its database, which stores screenshots, and utilizes Windows Hello for user authentication to prevent unauthorized access. Recall's sensitive processes are housed in a virtualization-based security enclave, ensuring that raw data is not accessible to the app layer. Microsoft has also implemented additional controls, allowing users to block specific apps and websites from being captured, as well as filter out sensitive information. The company has conducted extensive security reviews and plans to preview Recall with Windows Insiders in October before its official release. This overhaul aims to address security concerns and position Recall as a secure platform for sensitive data processing.

- Microsoft’s Recall feature is now an opt-in service that can be uninstalled by users.

- Enhanced security measures include full encryption and user authentication via Windows Hello.

- Recall processes are secured in a virtualization-based enclave to protect sensitive data.

- Users can block specific apps and websites from being captured by Recall.

- Microsoft plans to preview Recall with Windows Insiders in October before its official launch.

Link Icon 2 comments
By @hyperman1 - 7 months
The very fact that it exists will make companies enable it. Then workers will have to deal with it, because it will appear on management dashboards. So if the choice is between doing something productive, or making mouse movements that make the dashboard number go up, what will workers do?

I remember snow crash, where YT's mom has to decide how much time she spends appearing to read a document. (And no choice is correct.) Turns out the tech is here. It's reality now.

By @quyleanh - 7 months
I guess VBS enclave will be a new target for hackers in the future.