Conversation

Notices

1. Embed this notice
   Dan Goodin (dangoodin@infosec.exchange)'s status on Saturday, 12-Apr-2025 08:09:44 JST Dan Goodin

   Snapshotting and AI processing a screen every 3 seconds. What could possibly go wrong?

   https://arstechnica.com/security/2025/04/microsoft-is-putting-privacy-endangering-recall-back-into-windows-11/

   • Paul Cantrell repeated this.
   • Embed this notice
     Dan Goodin (dangoodin@infosec.exchange)'s status on Saturday, 12-Apr-2025 08:09:43 JST Dan Goodin

     in reply to

     People in comments keep saying, oh well, time to move to Linux, as if that somehow insulates them. They forget that even then every interaction their Linux box has with a Windows 11 installation will STILL be compiled into a database that can be abused.

     Paul Cantrell and Joe Ortiz repeated this.
   • Embed this notice
     Dan Goodin (dangoodin@infosec.exchange)'s status on Saturday, 12-Apr-2025 08:09:43 JST Dan Goodin

     in reply to

     So, send an email or DM that even passes through a Windows machine with Recall turned on and it's screenshotted, swept into OCR, processed by Copilot and stashed away in perpetuity. Recall reminds me a lot of the backdoor the FBI wanted Apple to build. The FBI said it would be safe because only the FBI would have access to it. Apple rightly pointed out that no, something that powerful would inevitably get hacked and abused in ways no one could control. Now, Microsoft is trying to say that the guardrails it has put on Recall will curb any unintended consequences and we're supposed to take that at face value?

   • Embed this notice
     Atanas (atanase@mastodon.social)'s status on Sunday, 13-Apr-2025 16:23:28 JST Atanas

     in reply to

     @dangoodin Like using Proton Mail to communicate with a Hotmail user.

   • Embed this notice
     Miakoda (hellomiakoda@pdx.social)'s status on Sunday, 13-Apr-2025 16:23:28 JST Miakoda

     in reply to

     • Atanas

     @AtanasE
     @dangoodin

     Email is inherently insecure. Hence why I don't bother with things like Proton. Instead, I avoid using email to communicate beyond what's forced on me - and I'm working to reduce that.

     If I want security and privacy, I use e2ee messaging, and when possible, in person.

   • Embed this notice
     Miakoda (hellomiakoda@pdx.social)'s status on Sunday, 13-Apr-2025 16:25:17 JST Miakoda

     in reply to

     • Justin

     @justin
     @dangoodin

     Good luck. Humans are stupid and will keep taking it up the ass from MS and claim "Linux is too hard" based on something they read years ago that was written in regards to installing and maintaining Linux in the early 2000s.

   • Embed this notice
     Justin (justin@toot.io)'s status on Sunday, 13-Apr-2025 16:25:19 JST Justin

     in reply to

     @dangoodin if everyone switches, problem solved.

   • Embed this notice
     Miakoda (hellomiakoda@pdx.social)'s status on Sunday, 13-Apr-2025 16:28:45 JST Miakoda

     in reply to

     • Justin

     @justin
     @dangoodin

     By the way, if any "#Linux is too hard" users are reading - I have a roommate who could barely tell you what the control key is for and "doesn't want to know anything about computers" whom I got using Linux Mint. Her requests I help her with her computer plumbeted dramatically after the switch and she has thanked me for getting her to use it because it's easy.
     No, she does not know what a terminal is, let alone what to type in it. She even runs the updates without issue.

   • Embed this notice
     Miakoda (hellomiakoda@pdx.social)'s status on Sunday, 13-Apr-2025 16:33:28 JST Miakoda

     in reply to

     • Justin

     @justin
     @dangoodin

     Tech support requests from this user since Linux Mint (I think it's been 2 years now):

     "Touchpad doesn't work" - hardware issue, solved with firmware update.

     "It won't update" - Issue caused by a issue during a network overhaul, unrelated to Linux Mint.

     "I can't install [App]" - ah, an actual Linux issue. User attempted to download and install a specific IM program, wrong version. Solved by showing user the "app store" (term I used to make it understandable for her).