News Microsoft Recall screenshots credit cards and Social Security numbers, even with the "sensitive information" filter enabled

[Admin]

Despite promising to filter personal data out, Recall still captures it.

Microsoft Recall screenshots credit cards and Social Security numbers, even with the "sensitive information" filter enabled : Read more

 

[ezst036]

A feature nobody wanted anyways, and were furious about it initially that it had to be canned for a period.

But Microsoft continues to have a terrible abusive relationship with its customers. It's what Microsoft wants, not what the customer wants.

 

[hotaru251]

again this type of "tracking" should literally be illegal to even WANT to implement.

There is no benefit in storing that info on a digital device. If there is even chance it could get recorded should be immediate reason to block it from being used further.

 

[JamesJones44]

Not surprising that an ML model has difficulty detecting sensitive areas based on capturing a random image. IMO for this to work correctly MS needs apps to populate some kind of metadata that they can associate with an image and location. That way the ML model can use hints in the metadata to understand that an area of the image contains a sensitive field based on the specified HTML tag for example. Without that, this will always be difficult to be accurate with sensitive field detection.

 

[palladin9479]

A feature nobody wanted anyways, and were furious about it initially that it had to be canned for a period.

But Microsoft continues to have a terrible abusive relationship with its customers. It's what Microsoft wants, not what the customer wants.

End users aren't the customers for this "Feature", government agencies are. This is just another way for Microsoft to get paid to spy for various governments.

 

[DS426]

...
But Microsoft continues to have a terrible abusive relationship with its customers. It's what Microsoft wants, not what the customer wants.

This ^. "Abusive" is actually kind of astute thinking IMO as indeed many "need" or at least rely on Windows and M365 in various ways and appreciate the good aspects (esp. those not found in the Linux or Mac camps), yet MS will give and take as they please with minimal regard to how that changes the quality of life of affected customers.

The effort that went into developing Recall could have been used elsewhere for much better use -- opportunity cost.

 

[yahrightthere]

A: Switch to Linux.
B: I see a class action in MS future.

 

[hotaru251]

This is just another way for Microsoft to get paid to spy for various governments.

like cortana (in early days of WIN10) & rest of their data scalping...users will block block it.

 

[8086]

A feature nobody wanted anyways, and were furious about it initially that it had to be canned for a period.

But Microsoft continues to have a terrible abusive relationship with its customers. It's what Microsoft wants, not what the customer wants.

Windows 7 was the last time MS ever did anything we wanted and then they took it away from us and every single day now, linux is just looking that much better.

 

[palladin9479]

like cortana (in early days of WIN10) & rest of their data scalping...users will block block it.

Knowledgeable users can and will, those are a minority. The majority of users purchase their computers through OEMs with the OS preinstalled and all these settings left on default, which is maximum collection. Few of those OEM users will then bother with disabling these "features", especially if someone is selling it as somehow beneficial. The result is that government agencies will have access to user screenshots for a large part of the population.

 

[derekullo]

Microsoft's AI is so advanced that it recognized that you were trying to trick it with fake information!

 

[logainofhades]

The people that thought this would be a great feature, should be fired immediately.

 

[Giroro]

Don't worry, Microsoft pinky-swears that the only thing they're going to do with all this screen, voice, and camera data they steal from you is to exploit it for profit. No big deal.
And I guess they're legally required to keep 2 years of data backups and share it with every government or law enforcement agency who wants it.
And I've heard there's large groups of employees who can manually sift through it, at will.
And they send/sell it to 3rd party companies for the purposes of data mining and training AI.

But other than that your data is pretty much super private, so there's no need to worry. I mean if you can't trust a monopolistic for-profit corporation with the power to ruin your life, then who can you trust, you know?
Besides, Microsoft almost never changes their privacy policy more than once a month, so all that juicy data meat will stay safe for at least dozens of days.

ALLEGEDY.

 

[Giroro]

The people that thought this would be a great feature, should be fired immediately.

Christopher Young can't be fired, at least not in the way us normal humans use that word.

 

[USAFRet]

Dear Microsoft,

For every person that thinks this is a good idea, and wants it in their system, there are 10,000 people who do not.
Either opt in or opt out....we do not want it at all.

Signed,
Rational Humans

 

[apiltch]

Microsoft's AI is so advanced that it recognized that you were trying to trick it with fake information!

I thought about this and, after seeing some comments to this effect, I went back and tested with my actual credit card number. The same thing happened.

 

[PiersPlowman]

I know this is often written, but if Recall is or becomes mandatory, then Windows comes off my machine.

 

[bikemanI7]

Will make sure disabled if ever comes to X86 AMD or Intel Desktops

For now very happy with Windows 11, meets all my daily needs for Productive tasks, Gaming, music listening, video watching.

 

[ohio_buckeye]

Those modified windows 11 isos are sounding better…

 

[micheal_15]

Tested. It records data from barclaycard.co.uk AND HSBC.co.uk. Happily snarfs up the user reference/card number when logging in, then grabs account balances, transactions and pending bills. It also eats lists of Payees you have set up (so scammers will know who to pretend to be! - i.e. if you have a payment setup as Simon Smith, they know to pretend to be him and tell you "I've changed bank accounts, please update" etc.....)

 

[das_stig]

So basically Microsoft have openly admitted it is still learning and therefore not fit for production and that the user is again the QA tester, this thing should be banned by Governments as direct threat. Imagine if your bank gets emptied of thousands and it gets traced back to a malware on your pc that read Recall and the bank refused your refund claim as non-fault, will Microsoft pay, I very much doubt it.

 

[Math Geek]

i am amused that despite all of this, most still use windows. i stopped at win 7 and never looked back. only run win 10 in a vm for the few games that won't run on linux.

every time they add another "feature" like this, the uproar is only matched by the same folks coming here complaining they have not got this update yet and asking how to get it RIGHT NOW. LOL

i will never use another windows version for anything beyond a game again. and as soon as win 10 goes totally dark, i'll just do without even that usage. no other MS product is even on my radar.

but hey keep complaining and threatening to go to linux. been working so far.......

 

[rgd1101]

Any business that deal with credit card/ssn also need to turn it off.
and what about health info? or GDPR, how do you purge if user ask for it

 

[stuff and nonesense]

Well, having repurposed my pre upgrade parts in a Linux box I think I’ll be purchasing on line using that computer (3900x, 3070, gigabyte B550 elite ax v2).

Step by step Linux is being used more here, the only thing I can’t seem to do is get a Soundblaster Z to output analogue audio. Steam sorts out most games, Libre Office covers the Office aspect, Gimp does imaging, video I have to look into.

Step by step by step….

 

[ColdBrewJunkie]

I'm interested in recall. I'd like to use a Copilot PC at first knowing I've enabled this feature and mindful of the data collection. I would still find it very valuable to have everything I do of a non-secure nature be searchable, and just like web encryption made that more secure, this will be use-ably secure also. If I could exclude an application that it's monitoring, make that a browser, and do all my banking / private stuff there, that would be good enough.

When the tech demo came out, it was an unfinished product not meant to be examined yet and wasn't going to be released without file/disk encryption and more extensive security controls. The security researchers "got a hold" of Recall in spring without a Copilot+ PC and everything that was supposed to be with the product. This is like pulling a car off the assembly line and saying "See, it doesn't have door locks! Your going to be f-ed!". Great, thanks for that informative research.