Microsoft CEO Satya Nadella emphasizes importance of security and only making Recall available on secure-core PCs.
Microsoft's Recall feature stores everything screenshotted on a user's PC in an encrypted database.
Recall has faced backlash due to security concerns, with cybersecurity experts warning of potential vulnerabilities.
Users must opt-in to enable Recall and use Windows Hello authentication for access. Snapshots remain on-device and are not used to train AI models.
Microsoft's new feature Recall, which was intended to provide perfect AI-memory for devices, has faced backlash due to security concerns. The feature, which screenshots everything on a user's PC and stores the data in a database, has been criticized for its potential vulnerabilities. Microsoft had originally planned to turn Recall on by default but has since made it an opt-in feature and introduced new security measures.
Recall stores data in an encrypted search index database, but cybersecurity experts warn that hackers could still access sensitive information if they gain temporary access to a Recall-enabled device. The feature is part of Microsoft's Secure Future Initiative aimed at overhauling software security after major Azure cloud attacks.
Microsoft CEO Satya Nadella emphasized the importance of security, even if it means sacrificing new features or providing ongoing support for legacy systems. Recall will only be available on new Copilot Plus PCs designed to be secure-core PCs with advanced firmware safeguards and the Pluton security processor to protect against personal data theft from a PC.
Users must opt-in to enable Recall and use Windows Hello authentication for access. Snapshots remain on-device and are not used to train AI models. Recall uses on-device AI processing to find relevant activities, and users can block specific apps from being snapshotted or delete snapshots.
Microsoft has been criticized for spreading inaccurate information about Recall's security, such as claiming its history is encrypted when it is actually decrypted once a user logs into their computer. The company has promised to make further security improvements to the feature.
Microsoft’s new feature Recall, intended to refer to perfect AI-memory for devices, now has an unintended definition as a company admission of product defect or danger.
Microsoft announced changes making Recall an opt-in feature and introducing new security measures.
Cybersecurity experts warn that hackers can access sensitive data if they gain temporary access to a Recall-enabled device.
Accuracy
Recall was previously turned on by default in Copilot+ compatible versions of Windows.
Deception
(100%)
None Found At Time Of
Publication
Fallacies
(100%)
None Found At Time Of
Publication
Bias
(95%)
The author expresses concern and criticism towards Microsoft's Recall feature due to its potential security risks and privacy concerns. He quotes cybersecurity experts warning about the data being accessible to hackers if they gain temporary access to a user's device.
It all remains accessible to any hacker who so much as gains a temporary foothold on a user’s Recall-enabled device, giving them a long-term panopticon view of the victim’s digital life.
Many users will turn on Recall, he points out, partly due to Microsoft’s high-profile marketing of the feature.
Microsoft is making its Recall feature in Windows 11, which screenshots everything on a user’s PC, an opt-in feature.
Recall stores data in a database that could have been vulnerable to malware authors extracting the database and its contents, but Microsoft has now encrypted the search index database.
Recall is part of Microsoft’s new Secure Future Initiative (SFI) aimed at overhauling software security after major Azure cloud attacks.
Microsoft CEO Satya Nadella emphasized that security should be the top priority, even if it means sacrificing new features or providing ongoing support for legacy systems.
Recall will only be available on new Copilot Plus PCs designed to be secure-core PCs with advanced firmware safeguards and the Pluton security processor to protect against personal data theft from a PC.
Accuracy
Recall collects screenshots every five seconds for AI analysis, which is stored locally on the user’s machine.
Snapshots remain on-device and are not used to train AI models.
Deception
(100%)
None Found At Time Of
Publication
Fallacies
(95%)
The author makes several statements that could be considered appeals to authority. He mentions the concerns raised by privacy advocates and security experts without providing any evidence or context for these concerns. However, he also reports Microsoft's response to these concerns and the steps they are taking to address them, which can be seen as a legitimate appeal to authority in this context. The author also uses inflammatory rhetoric when describing Recall as a 'disaster' for cybersecurity without providing any evidence or explanation for this characterization. However, he later reports that several tools have appeared that can extract the Recall database and its contents, which does provide some evidence to support his concern about the security of the feature. Overall, there are some instances of appeals to authority and inflammatory rhetoric in the article, but they do not significantly detract from the accuracy or fairness of the reporting.
]privacy advocates and security experts have been warning that Recall could be a 'disaster' for cybersecurity without changes.[
Recall uses local AI models to screenshot mostly everything you see or do on your computer and then give you the ability to search and retrieve anything in seconds. [...] Microsoft developed the Recall feature under its new Secure Future Initiative (SFI) that the company has put in place to overhaul its software security after major Azure cloud attacks.
Microsoft CEO Satya Nadella even called on employees to make security Microsoft’s ‘top priority’ recently, even if that means prioritizing it over new features.
Microsoft's new AI-powered feature, Recall, has been criticized by cybersecurity experts for its numerous security flaws.
Recall saves a history of almost all user actions on their computer, including passwords and sensitive financial details.
The feature also saves deleted data and organizes it in a way that could benefit hackers.
Microsoft has been spreading inaccurate information about Recall’s security, such as claiming its history is encrypted when it is actually decrypted once a user logs into their computer.
Accuracy
, Microsoft saves a history of almost all user actions on their computer, including passwords and sensitive financial details.
, The feature also saves deleted data and organizes it in a way that could benefit hackers.
, Microsoft has been spreading inaccurate information about Recall’s security, such as claiming its history is encrypted when it is actually decrypted once a user logs into their computer.
Deception
(50%)
The article is highly sensationalized and misleading in its portrayal of Microsoft's Recall feature. It implies that the feature is a major security risk without providing any peer-reviewed studies to support these claims. The author also omits important details such as Microsoft's statement that passwords and other sensitive information are not exempt from Recall's history database, which makes the article misleading.
There are security issues littered throughout the feature and the way its implemented.
Fallacies
(15%)
The author makes an appeal to authority fallacy by quoting cybersecurity expert Kevin Beaumont's description of Microsoft's Recall feature as a 'disaster'. The author also uses inflammatory rhetoric by describing the feature as 'littered with security issues' and 'riddled with security flaws'.
Microsoft’s new Copilot+ AI-powered computer history saving feature, Recall, was already being likened to one of the many fictional dystopian tech products found in episodes of Black Mirror on the very day it was announced last month.
Cybersecurity expert Kevin Beaumont, who formerly worked at Microsoft as a Senior Threat Intelligence Analyst, in a new hands-on review of Recall, declares the product a ‘disaster.’
Recall saves nearly everything. There are some exceptions. However, Google Chrome history when in private mode is saved.
Microsoft is wrong about Recall’s security.
Bias
(0%)
The author expresses a negative opinion towards Microsoft's Recall feature and labels it as a 'disaster'. He quotes cybersecurity expert Kevin Beaumont who also uses the term 'disaster' to describe the feature. The author mentions numerous security issues with the feature, including saving sensitive data like passwords and financial details, saved deleted data, and lack of encryption for logged-in users.
Microsoft has been spreading inaccurate information about Recall’s security. In fact, you don’t even need to be an admin to read the database.
Microsoft’s Recall is apparently riddled with security flaws that make a user’s entire computer history, including passwords and other sensitive information, openly available to bad actors.
Recall saves nearly everything. Full text passwords, financial details, and other sensitive data are also saved. Recall also saves deleted data.
Microsoft is implementing new measures to prevent security loopholes for Windows Recall. This includes adding Windows Hello as an extra security layer when enabling Windows Recall.
The company plans to make Windows Recall an opt-in experience, meaning it won’t be enabled by default on Copilot PCs. Users will be prompted to enable or disable it during Windows Setup.
Microsoft is also making further security improvements to Windows Recall. It will now require Windows Hello (via facial recognition and/or fingerprint) to be set up on the system and require the user to be present in front of the screen to access Recall data.
Accuracy
Microsoft is implementing new measures to prevent security loopholes for Windows Recall.
Recall collects screenshots every five seconds for AI analysis, which is stored locally on the user’s machine.
Snapshots remain on-device and are not used to train AI models.
Deception
(100%)
None Found At Time Of
Publication
Fallacies
(95%)
The author provides clear and concise information about Microsoft's response to concerns regarding Windows Recall. There are no explicit fallacies found in the article. However, there is an appeal to authority when the author mentions that Microsoft is making security improvements and adding layers of data protection.
Microsoft says it will make Windows Recall an opt-in experience.
Windows Hello enrollment is required to enable Recall.
proof of presence is also required to view your timeline and search in Recall.
:no_upscale():format(webp)/cdn.vox-cdn.com/uploads/chorus_asset/file/25475603/recall.gif)
:format(webp)/cdn.vox-cdn.com/uploads/chorus_asset/file/25481834/Hello_1920_1024x581.png)
:format(webp)/cdn.vox-cdn.com/uploads/chorus_asset/file/25481827/OOBEAsset_1920_1024x649.png)
/cdn.vox-cdn.com/uploads/chorus_asset/file/25481481/windowsrecall.jpg)
