Microsoft's AI Recall Feature May Not Even Hit Your PC, but Here's How to Disable It
Why are security experts concerned about the Recall feature in the new generation of PCs announced by Microsoft?
Security experts are concerned about the Recall feature in the new generation of PCs announced by Microsoft due to its potential to become a hackable security disaster. Recall is designed to track all activity on a Windows computer by taking a series of screenshots and storing them in a database, making it easier to find things later using natural language. While the feature runs locally and can function without an internet connection, security experts argue that it collects too much data, creating a single point of failure for sensitive information.
One white-hat hacker has already created a tool called TotalRecall that can extract sensitive data from the Recall feature. Security expert Kevin Beaumont, who tested the feature, believes that while it may appeal to some users, the security risks it poses could take down the entire Copilot Plus brand2. Barry Briggs, a former CTO at Microsoft's information technology unit, also expressed doubts about the feature's value for individual users and businesses, and questioned its security.
What is the Windows Recall feature and how is it integrated into Microsoft's Copilot artificial intelligence tool?
Windows Recall is a feature of Microsoft's Copilot artificial intelligence tool designed to enhance user productivity by tracking all activity on a Windows computer. Using AI, Recall captures data from all applications (unless excluded by the user) by taking a series of screenshots and storing these interactions in a database. It operates locally on the device and can function without an internet connection or even when the user is not logged into their Microsoft account.
The integration of Recall into Copilot allows users to retrieve past activities or information by performing a "Recall" action, which is like an AI-powered search. Recall presents a snapshot of that period, providing context of the memory. This feature is intended to make it easier for users to find things they have done on their computer, such as web pages visited, messages received, or work completed.
However, security experts have raised concerns about the feature, labeling it a potential hackable security disaster. They argue that the feature, which is set to be enabled by default on new Copilot Plus systems, could present a huge security risk and could potentially take down the entire Copilot Plus brand. Despite the concerns, Microsoft has pointed to a Windows support page with information on privacy and security aspects of Recall.
How does the Recall feature operate to track user activity on a Windows computer?
The Recall feature in Windows operates by taking snapshots of the user's screen every few seconds6. These snapshots capture everything that is happening on the screen, including activities in apps, communications in live meetings, and websites visited for research6. The feature uses AI to analyze and triage the content in these snapshots, allowing users to search for anything they have ever done on their computer using natural language3. This essentially gives Windows a photographic memory, enabling users to search for things just by describing them.
The snapshots are encrypted and saved on the user's PC's hard drive. By performing a Recall action, users can access a snapshot from a specific time period, providing context for the event or moment they are searching for. It also allows users to search through teleconference meetings they've participated in and videos watched using an AI-powered feature that transcribes and translates speech.
To use Recall, users need to have a Copilot+ branded PC with specific system specs: an NPU with 40+ TOPS, 16GB RAM, 256GB storage, and 8 logical processors. The feature is designed to run in the background and capture everything the user does on their computer, documenting and triaging everything it sees, no matter what apps or interfaces the user is looking at, and turning it all into memories that the user can search for at a later point.
It's important to note that while Recall offers a powerful search functionality, it also raises privacy concerns as it records and stores everything the user does on their computer. However, Microsoft emphasizes that the data collected by Recall is stored locally on the user's device and is not uploaded to the cloud or shared with Microsoft, ensuring a level of privacy for the user.