🧵1/5

Monday: #Microsoft caves following outrage about the new #Recall feature's accusations of being spyware by making it "opt-in" on #Windows12. 🤔

Total Recall... táto téma zreje ako vino. Teda nie - zrie oveľa rýchlejšie.
Zhruba pred mesiacom sa Microsoft bil do pŕs, ako je pre nich bezpečnosť nadovšetko. Pred dvoma týždňami ohlásili obludný spyware, ktorý ale je "super zabezpečený", veď všetko ukladá a spracúva lokálne, navyše "ukladá šifrovane" - viac v mojom ostatnom blogu: herrman.sk/home/a-tento-poznat…

No a dnes, prichystajte si prekvapený výraz v tvári, ono je to naozaj tak zlé ako sme predpokladali: wired.com/story/total-recall-w…

#recall #blog #privacy #fail

Po tom, čo sa mi podarilo konečne zmigrovať blog z Drupalu, hovoril som si, že načim aj niečo napísať... Recall od Microsoftu ma konečne prinútil sa trochu rozhýbať:

herrman.sk/home/a-tento-poznat…

#microsoft #recall #privacy #sukromie #eff

Microsoft's Recall function is looking like a total security disaster.

doublepulsar.com/recall-steali…

#Microsoft #Recall #CyberSecurity

Stealing everything you’ve ever typed or viewed on your own Windows PC is now possible with two lines of code — inside the Copilot+ Recall disaster.

I wrote a piece recently about Copilot+ Recall, a new Microsoft Windows 11 feature which — in the words of Microsoft CEO Satya Nadella- takes “screenshots” of your PC constantly, and makes it into an…

^{Kevin Beaumont (DoublePulsar)}

With #Microsoft introducing #Recall which will screenshot your screen to monitor all activities on your device, this begs the question...

What #Linux distro will you be switching to?

Why does #Microsoft want to implement #Recall? It's not about *images*. It's about modelling what workers do on Windows, and then replacing them.

The most expensive part of a computer is the fallible feelings-filled unpredictable meat sack that operates it.

Google has YouTube, Google Photos, Maps, and a bucket load of search data, Google Analytics, advertising, as well as it's #GCP data (e.g. #STT transcriptions). And a bunch of data from Android services. From this data they can model speech, model videos and model advertising systems, and how humans respond to them.

But they can't model what people do on computers.

Amazon has Prime data, and a bucket load of compute. But no operating system data. They can build models based around e-commerce and advertising systems.

But they can't model what people do on computers.

Meta has *waves hands* enough analytics to model human behaviour in the Metaverse.

But they can't model what people do on computers.

Microsoft has GitHub.
Microsoft has LinkedIn.
Microsoft has SharePoint.
Microsoft has Teams.
Microsoft has Dynamics.
Microsoft has O365.
Microsoft has Windows telemetry data.

Microsoft can model what people do on (Windows) computers. Like fill out spreadsheets.Write emails. Synthesize web pages of research. Interact with colleagues on Teams. Create and edit documents.

Microsoft wants #MicrosoftRecall data so they can model what people *do* with operating systems.

Then replace them.

Imagine a CoPilot that doesn't just write buggy code. Imagine one that also does spreadsheets. That creates documents on SharePoint. That communicates with colleages on Teams. That has a customer pipeline on Dynamics.

That's what Recall is about - 360 degree surveillance of the worker, to model their functions, make them fungible, replicable - and replaceable.

Since Microsoft announced their latest spyware, sorry, #ReCall, People want to jump ship to #Linux so I'm gonna give the community some solid advice. The biggest hurtle new users will have to deal with is the community because, to be honest, they are extremely obnoxious FOSS Bros that can't stand newbies or Windows users or non technical people in general, but here's your chance! Here's a chance to really guide people, not badger them into picking Linux just because.

Don't tell a new person to Google the term. Give them a video, a book, a tutorial, something to help them along. Think it's hand holding? Tough luck.

Don't ask them to register to a forum and provide feedback. Offer to give feedback on their behalf.

As for any Disabled person in your life? Just don't recommend Linux yet at all. It's still not ready for non technical Disabled people. Just no! No!

I wrote, briefly, about that at this link, but really, I haven't even scratched the surface yet as to issues with Linux adoption for Disabled users. I run Linux on a VM. I Debloated my own windows, so I stick with that. Just listen to the Disabled community without telling them they don't know why Microsoft is shit. Listen, and then code based on their answers. tweesecake.social/@weirdwriter… #Microsoft

Folks who might be looking to move from Windows to Linux: another option, if it’s financially feasible for you and you don’t want to mess with installing Linux, is to sell your Windows machine and buy a Linux one.

Yep, they exist.

Folks like @starlabs in the UK, @tuxedocomputers in the EU, and @system76 in the US sell Linux machines that just work out of the box.

#windows #linux #recall

A Word of Advice if you
intend on using/trying Microsoft's newly announced Recall feature :

Be *extremely* careful with the data of others.

Recording your own data is one thing, but if you continuously use a feature that will record others on video conferences, chat conversations, and emails, without explicit consent, you could get in a lot of trouble.

Not only this can be extremely unethical (to say the least), but it could also expose you to serious legal consequences.

Remember:

1. Be careful: The use of this feature might not even be legal in some locations/situations/circumstances. If you use it, you should verify this first.

2. Consent should always be free, explicit, and revocable.

3. Once you collect the data of others, you become its guardian. You have a responsibility to secure it properly, for as long as you keep it. This is a heavy burden.

4. The easiest and safest course of action is to simply not collect this data in the first place.

In that sense, I highly recommend NOT using features such as Microsoft's Recall.

This is a data privacy disaster waiting to happen. For others, and for yourself.

#Privacy #Recall #Microsoft

arstechnica.com/gadgets/2024/0…

New Windows AI feature records everything you’ve done on your PC

Recall uses AI features "to take images of your active screen every few seconds."

^{Ars Technica}

The best ways to improve opsec against coercion are to:

• Limit what can be taken (reduce what’s stored on a device).
• Fake what you do have: use duress passwords or secondary devices.
• Last resort: use a hardware key that’s deliberately easy to lose or break, so there’s potentially no key to give up in a rubber-hose attack.

There’s overlap between the three. A duress password temporarily limits what’s stored on a device, and losing a decryption key is more or less the same as instantly wiping encrypted data to reduce what you have to offer. All come down to having less data to give when coerced into giving what you have. Operating systems should also obey this principle by storing as little offline data as possible, and providing duress safeguards for what must be stored.

Windows Recall captures an amount of offline telemetry comparable to parental-control apps often used to control human trafficking victims: the data encompass everything potential victims do on their machines, without any duress protections. Presenting such a feature as opt-out seems like it’s almost designed to hurt victims.

The decision-makers behind features like Recall, or invasive child-monitoring spyware, have likely never experienced this type of abuse. Or perhaps they are the abusive party at home.

Originally posted on seirdy.one: See original (POSSE). #Windows #Recall. Quoting a post by @evacide:
RE: hachyderm.io/@evacide/11248189…

Sex Traffickers Used America's Favorite Family Safety App To Control Victims

Life360’s CEO says he’s never heard of his parenting app being used by sex traffickers to monitor the location of their victims. But Forbes obtained evidence that the app and others like it have been used as digital “leashes.”

^{Thomas Brewster (Forbes)}

evacide

2024-05-22 00:24:59

"...a would-be hacker would need to gain physical access to your device, unlock it and sign in before they could access saved screenshots."

I've got some news for Microsoft about how domestic abuse works.

bbc.com/news/articles/cpwwqp6n…

Microsoft Copilot+ Recall feature 'privacy nightmare'

The ICO wants to know the safeguards around Recall, which can take screengrabs of your screen every few seconds.

^{Imran Rahman-Jones (BBC News)}