by Jason Snell
Microsoft’s Recall feature is a security ‘disaster’
Tom Warren at the Verge has a nice summary of the security problems inherent in the new Windows feature Recall, which records everything you do (what could go wrong?) and is apparently quite hackable:
Microsoft may well find itself needing to rework Recall, or recall it, if you like. There are clearly some obvious holes in the way data is stored here that need to be addressed, and making this an opt-out experience has privacy campaigners concerned. Recall’s launch comes just weeks after Microsoft CEO Satya Nadella called on employees to make security Microsoft’s “top priority,” even if that means prioritizing it over new features.
For the amazingly ugly details, you can read Kevin Beaumont’s Medium post, which explains how having an easily cracked plain-text transcript of pretty much every screen on your PC, downloadable in seconds, is probably a bad idea.