Microsoft needs to make Windows 11's Recall feature opt-in

[harlan4096]

As it stands right now, the new Recall AI feature of Windows 11 will be enabled by default when it launches officially later this year. While limited to PCs that sport the Copilot+ PCs label, it will capture the screen of those PCs in five second intervals from the get-go.

The AI will capture almost everything on the screen by default. The only exception is activity in private browsing sessions of several popular browsers. Users may block access to certain apps, but this needs to be done manually.

The captures are stored locally only according to Microsoft. Furthermore, they are protected when the user is not logged in. However, when the user is logged in, the data is accessible by system and administrator accounts.

This makes Recall data the most lucrative target on Windows systems. Here is why:

It captures every activity, except for private browsing activity by default. This may include:

• Financial documents, e.g., assets listed on a bank's website.
  
• All emails in dedicated email programs, apps or regular browsing sessions.
  
• All visited websites, except for those in private browsing modes.
  
• Anything done in Tor Browser.
  
• All activity on the computer, e.g., watched videos, opened documents, games played, webcam chats, messages, including self-destroying ones, emails, contacts, and more.
  
• Accounts on the Web and elsewhere.
  
• VPN activity.
  
• P2P activity.
  

The information is highly lucrative for malicious actors. It is also lucrative for others, including law enforcement, customs, foreign agents, employers, or even friends and family.

What Microsoft reveals about Recall during Setup



Currently, Windows 11 informs the user that Recall is enabled on the device. This happens during the out-of-box experience. The page does not include an option to disable Recall.

There is a checkbox to open the settings after setup completes, but it needs to be checked specifically. Many users will likely ignore it as they want to complete setup and start using the computer.

In any event, those who check the box are taken to Settings where they may configure Recall. This includes an option to turn off Recall completely.

While there is a chance that Microsoft will change the experience, for instance by adding an opt-out option during setup, nothing has been confirmed at this point. Even then, it is likely that many users will keep the feature turned on.
...

Continue Reading