Technology

59287 readers

6348 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related content.
Be excellent to each another!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, to ask if your bot can be added please contact us.
Check for duplicates before posting, duplicates may be removed

Approved Bots

founded 1 year ago

MODERATORS

[email protected]

1017

Stealing everything you’ve ever typed or viewed on your own Windows PC is now possible with two lines of code — inside the Copilot+ Recall disaster. (doublepulsar.com)

submitted 5 months ago by [email protected] to c/[email protected]

221 comments fedilink hide all child comments

Q. Is this really as harmful as you think?

A. Go to your parents house, your grandparents house etc and look at their Windows PC, look at the installed software in the past year, and try to use the device. Run some antivirus scans. There’s no way this implementation doesn’t end in tears — there’s a reason there’s a trillion dollar security industry, and that most problems revolve around malware and endpoints.

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 80 points 5 months ago (2 children)

I get the security issues, sure, those are valid, but the privacy ones are even worse. Imagine a teenager trying to search information on being gay, or possible intrusive thoughts on their family computer, only for their super maga right wing parent to find it in the screenshots.

Or someone being abused at home and searching for support facilities, deleting history and being outed by recall.

Wait, how about credit card fraud as a result of EVERYONE who has access to this computer can read your cc data?

Or, my husband was looking at jewelry online yesterday and he hasn't told me, he must be cheating, right? Oh sorry, I forgot, our anniversary is next week... Hahahaha, don't be upset babe.

Best one ever though, imagine your search history, your porn watch history accessible to anyone with access to your computer? The fucking horrific existence of having an employer process this data at scale using fancy staff monitoring program 7, and run stats on the fact that you had a toilet break while working from home, and they want to know if it was a number 1, or a number 2 so they can work a mean time to shit metric into your KPA/scorecard.

Guys, whatever benefit you think this is. It's not worth it.

[–] [email protected] 15 points 5 months ago

Ultimately privacy is part of security so, if anything, everything you mentioned is just more reinforcements that this is a major security concern.

As someone that has been obsessed with tech since being a kid in the 90s I think the tech side of this is super cool and very exciting stuff. As a user, though, I only like this if I'm the one implementing and using it. I do not trust a mega corporation (or really any company) to "leave it locally on my computer and totally not use that data for other purposes". Right now it's supposed to be (as far as I last heard) only on your machine but we've seen EULAs and TOS' etc change many times over the years but especially over more recent years as data continues to be king and data like this is a literal bottomless diamond mine.

I know this isn't your point but it's just worries I have in addition to your points. And let's not even start about what this means for law enforcement abuse. No thanks, I'll wait for a FOSS equivalent that at least gives me and the community the opportunity to evaluate how it works.

[–] [email protected] 1 points 5 months ago* (last edited 5 months ago)

Not that it solves the problem, but since I'm not the King of M$ this is about all I can do: you could easily get around all that by turning off secure boot and booting into a persistant live-usb containing a linux distro of your choice (Tails for extra privacy/ease, if you can use Tor) to do all your secret agent computing needs. The host PC can't see shit of what happens on Tails.

Edit: lol you downvoted me because I can't singularly change an entire corporation's mind and instead offer workable solutions that you could make within the next 30 minutes to mitigate the problem until such time as your plan for Microsoft domination comes to fruition and you can change it back?

Ok I guess, "chump don't want no help, chump don't get no help. Jive ass fools ain't got no brains, anyhow."

-Barbara Billingsly