{"id":53081,"date":"2024-06-05T09:00:30","date_gmt":"2024-06-05T08:00:30","guid":{"rendered":"https:\/\/dataconomy.ru\/?p=53081"},"modified":"2024-06-05T09:00:30","modified_gmt":"2024-06-05T08:00:30","slug":"disable-microsofts-recall-ai-feature","status":"publish","type":"post","link":"https:\/\/dataconomy.ru\/2024\/06\/05\/disable-microsofts-recall-ai-feature\/","title":{"rendered":"Disable Microsoft\u2019s Recall AI feature or be ready to…"},"content":{"rendered":"

You might want to disable the Microsoft Recall AI feature when it’s ready, because of several significant cybersecurity concerns that have recently come to light. These issues could potentially compromise your data security.<\/p>\n

Microsoft has refuted allegations that Recall, a feature designed to enhance system-wide searches by remembering user activities on your PC, presents a privacy threat. However, two security researchers now assert that Recall significantly eases the process for hackers to access data from Windows 11 users.<\/p>\n

On Tuesday, cybersecurity expert Alexander Hagenah unveiled<\/a> a demo tool that illustrates how malware can effortlessly exploit the saved data within the Recall function.<\/strong><\/p>\n

“The database is unencrypted. It’s all plain text,” Hagenah emphasized in his discussion with Wired<\/a><\/em>, highlighting the vulnerability of how Recall stores information on a PC. “It’s a Trojan 2.0 really, built in.”<\/p>\n

\"Disable
Microsoft has yet to make Recall widely available to consumers; currently (Image credit<\/a>)<\/figcaption><\/figure>\n

Just a few days after Hagenah’s disclosure of his tool, named TotalRecall, another security researcher and ex-Microsoft employee, Kevin Beaumont, released a blog post<\/a> detailing supposed vulnerabilities in the Recall feature.<\/p>\n

Microsoft has yet to make Recall widely available to consumers; currently, it’s included in the preview release for Windows 11 version 24H2<\/strong>. This also provides early access to Recall for Windows PCs utilizing Arm processors, either directly or via a virtual machine.<\/p>\n

Upon testing the feature, Beaumont discovered that hackers or malware can easily access files saved by Recall, despite Microsoft’s assertion that it employs encryption. Beaumont noted that Recall saves information in a readily accessible database within the user’s AppData folder. Unexpectedly, the database stores this information in plaintext.<\/p>\n

\n

Microsoft told media outlets a hacker cannot exfiltrate Copilot+ Recall activity remotely.<\/p>\n

Reality: how do you think hackers will exfiltrate this plain text database of everything the user has ever viewed on their PC? Very easily, I have it automated.<\/p>\n

HT detective pic.twitter.com\/Njv2C9myxQ<\/a><\/p>\n

— Kevin Beaumont (@GossiTheDog) May 30, 2024<\/a><\/p><\/blockquote>\n