pelaird pelaird

Windows 11 24H2 Controversial New "Recall" Feature

Windows 11 24H2 Controversial New "Recall" Feature

What's Your Opinion

"Recall" is a new feature of Windows 11 24H2 that records your PC usage by taking screenshots of your active windows every couple of seconds. This is supposed to allow you to use natural language-based searches to look through your past PC usage. It also includes visual search using AI to locate what you need from that huge library of screenshots.

Didn't Microsoft deprecate a feature called "Timeline" due to low usage numbers? "Recall" seems to be "Timeline" on steroids. Another version of "Cramming AI down our throats."

Microsoft seems to believe that we want access to our recent data. Forcing recent documents in the Windows 11 Start menu is another case.

There are definitely privacy concerns. MS says Recall data will reside locally on your PC, and they will not have access to your data. This is all well and good, but in a situation where someone gains access to your PC, either locally or remotely, this becomes a potential nightmare. I believe this is the reason BitLocker encryption is turned on by default in Windows 24H2 Home and Pro versions.

Then there is the impact on a users storage. Not only does "Recall" data use a huge amount of space on your local drive. You need at least 50 GB of free space for Recall. I'm curious what impact this has on SSD's. If data is being written to your SSD every few seconds, this will increase the TBW (Terabytes Written) exponentially, and in my opinion causing premature failure.

You have to have a Copilot + PC with a 40 TOPs NPU in order to run Recall, so I won't be able to use it even if wanted to, and believe me I don't.

I'm interested in hearing others opinions on this controversial new feature of Windows 11 24H2.

pelaird

56,299 views 55 replies
Reply #26 Top

Quoting DrJBHL, reply 25

Indeed. Invent a way to disable it and you'll be a hero.

Pretty sure you can turn it off. See the pic of the settings page in reply #18. I'm also guessing that the Pro version of Windows 11 will have a way to disable Recall in the Group Policy settings.

Reply #27 Top

Quoting pelaird, reply 24

Recent article on Windows "Recall" security issues:

Windows 11's new AI feature makes it way too easy to steal everything you viewed or typed

https://www.neowin.net/news/windows-11s-new-ai-feature-makes-it-way-too-easy-to-steal-everything-you-viewed-or-typed/

"...stealing everything you viewed or typed on your computer is now very easy."

IF anything, the marketing strategy of selling a NPU (cpu with ai compatibilities) is half baked. I have to agree that this does point to a security risk and overall is just a feature I would simply turn off and keep off.

Additionally, as I have said in the past, a cpu with NPU capabilities isnt even as good as an rtx gpu. As stated by tech radar, Basic AI" NPU-based machines are capable of up to 45 TOPs, through RTX, that can be expanded to 1,300+ TOPs (a 2,788% increase)

Software like Recall may be exclusive to NPU based cpu's in an attempt push hardware. Luckily it is a very skip-able feature.

+1 Loading…
Reply #28 Top

Quoting pelaird, reply 26

Pretty sure you can turn it off.

Just that simple, eh? Why don't I believe that, I wonder. Maybe because they went to all that trouble to create and program it? Maybe just adding an SSD which backs your system up incrementally  might be better.

Reply #29 Top

Quoting DrJBHL, reply 28

Maybe because they went to all that trouble to create and program it?

You know how Microsoft likes to try and push people into buying new hardware with Windows 11. They have used TPM 2.0, trivial cpu limits, and now NPU CPU's. "Recall" might not be a good idea, but it is the idea they came up with in order to make 24h2 work better with AI. They want you to buy a new pc because "Windows 11 will work better with an AI CPU"

Reply #30 Top

Quoting PhoenixRising1, reply 29

"Recall" might not be a good idea, but it is the idea they came up with in order to make 24h2 work better with AI. They want you to buy a new pc because "Windows 11 will work better with an AI CPU"

Not a good idea at all. At first whiff that should have been obvious...hence my suspicions re data stealing. As for new computers? As long as they sell their sluggish OS, they're happy...instead of making it worthwhile and snappy.

If they can make images that can be stored quickly...heck, develop that into secure, rapid backup disk images for people stored locally! Do some good for the older, less tech capable folks.

+1 Loading…
Reply #31 Top

from TECHSPOT 06/04/2024

Security researcher Kevin Beaumont says...

"Windows Recall stores its data in a wide-open SQLite plaintext database. While it is true that this is encrypted while logged out of Windows, this only protects it from someone physically stealing your computer, which Beaumont points out is not how hackers generally conduct their business. On the contrary, Recall is highly vulnerable to "InfoStealer trojans." Additionally, Recall does not censor or otherwise hide screenshots containing sensitive information or credentials that may appear on screen.

"Encryption at rest only helps if somebody comes to your house and physically steals your laptop – that isn't what criminal hackers do," said Beaumont. "For example, InfoStealer trojans, which automatically steal usernames and passwords, [have been] a major problem for well over a decade – now these can just be easily modified to support Recall.

"Furthermore, the unencrypted database files are simply stored in 'AppData' in a new 'CoreAIPlatform' folder. While this folder and the files it contains does require admin rights to access, Microsoft admits that most Windows users run as admins, so it's not really adequate security. Beaumont claims he accessed the files with only two lines of code that bypassed those protections."

"I'm not being hyperbolic when I say this is the dumbest cybersecurity move in a decade..."

Wow! I hope MS rethinks the "on by default" decision for Recall.

+1 Loading…
Reply #32 Top

It looks like Microsoft is going to expand their AI to rtx after all. So far copilot is first on the list to be updated to work with the 40 series of rtx cards. I am sure all other AI features such as "recall" will follow suit. Unfortunately, with Nvidia being Nvidia only the 40 series cards (or higher) will be supported as an AI compatible device for Microsofts AI features. The 20 and 30 series cards are AI capable but will not be supported.

Even so the rtx 40 series cards are vastly superior to NPU devices when handling AI and should be the go to option when considering an AI compatible device.

Reply #33 Top

Quoting pelaird, reply 31

"I'm not being hyperbolic when I say this is the dumbest cybersecurity move in a decade..."

Wow! I hope MS rethinks the "on by default" decision for Recall.

It does sound like if Microsoft goes through with Recall, a lot of work needs to still be done to safeguard privacy concerns. If it is on by default there needs to be a few sliders added at least the protects sensitive data such as passwords and cc info, ect.

Reply #34 Top

All that for a privacy nightmare. Pbbbt.

+1 Loading…
Reply #35 Top

I just don't understand why they want to make "ON" the default setting! I'm headed the Feedback Hub to upvote as many listings as possible.

EDIT: Surprisingly, there were mostly users wanting access to "Recall" without a Copilot+ PC. I guess we are the minority here.

+1 Loading…
Reply #36 Top

Quoting pelaird, reply 35

Surprisingly, there were mostly users wanting access to "Recall" without a Copilot+ PC. I guess we are the minority here.

This probably has more to do with the fact that people want to run AI features off of their gpu instead of a new AI cpu. It may come down to a matter of principle rather than on how good recall actually is. Also, this piece of feedback is probably what led Microsoft to allow rtx 40 series gpu's to run copilot+

Reply #37 Top

I did post a suggestion (below) to set the default for "Recall" to OFF. We'll see how many upvotes it gets in the next few weeks. I'll let you guys know.

Please make OFF the default setting for "Recall"

I just don't understand why ON is the default setting for "Recall." This is such a controversial addition to Windows 11, and there are way to many privacy concerns, especially for users who will never be aware that it is on.

+1 Loading…
Reply #38 Top

Quoting pelaird, reply 37

I did post a suggestion (below) to set the default for "Recall" to OFF. We'll see how many upvotes it gets in the next few weeks. I'll let you guys know.

Please make OFF the default setting for "Recall"

I just don't understand why ON is the default setting for "Recall." This is such a controversial addition to Windows 11, and there are way to many privacy concerns, especially for users who will never be aware that it is on.

"On" is default because they (MS) want the data, and most people couldn't be bothered to learn how to secure their brand new, "AI do my research, my art and my thinking for me" computer.

+1 Loading…
Reply #39 Top

It sounds like Microsoft has capitulated after all the criticism by security experts and made "Recall" an opt-in feature. They have also adopted new security measures. Recall data will remain encrypted on the local device until authenticated with Windows Hello.

Reply #40 Top

Just saw this at Windows Central:

https://www.windowscentral.com/software-apps/windows-11/microsoft-has-lost-trust-with-its-users-windows-recall-is-the-last-straw

and this:

https://www.windowscentral.com/software-apps/windows-11/microsoft-addresses-windows-recall-backlash-promises-to-fix-security-issues-and-make-it-opt-in

by using an "opt in", and by using default encryption (Windows Hello) on the snapshots and de-encrypting by user choice, apparently.

 

Reply #41 Top

Quoting DrJBHL, reply 40

Just saw this at Windows Central:

https://www.windowscentral.com/software-apps/windows-11/microsoft-has-lost-trust-with-its-users-windows-recall-is-the-last-straw

Good article. Leave it to Zac Bowden to provide a comprehensive story.

As I have said before, "Timeline" never was really accepted by the Windows 10 base. Why would Recall (Timeline on steroids) be any different.

+1 Loading…
Reply #42 Top

Quoting pelaird, reply 41


Quoting DrJBHL,

Just saw this at Windows Central:

https://www.windowscentral.com/software-apps/windows-11/microsoft-has-lost-trust-with-its-users-windows-recall-is-the-last-straw



Good article. Leave it to Zac Bowden to provide a comprehensive story.

As I have said before, "Timeline" never was really accepted by the Windows 10 base. Why would Recall (Timeline on steroids) be any different.

Precisely. People like to interact but they like their privacy.

Reply #43 Top

Needing 50GB of free space is a lot, and all those screenshots could wear out your SSD faster. And not everyone has the right hardware to use "Recall" anyway.
I'm not planning to use "Recall" myself. I've been using PCs for a long time and prefer to do things my way. If you're worried about privacy or other issues, you might want to check out bnh software for more details.

Reply #44 Top

Quoting Jacquicen, reply 43

Needing 50GB of free space is a lot, and all those screenshots could wear out your SSD faster.

Exactly!

Reply #45 Top

I just read that "Recall" may be an Optional Feature in Windows 11 - 24H2.

from Winaero - August 29, 2024

"Microsoft may allow uninstall the Recall feature with a couple of clicks. The appropriate option is now exposed in optional features of Windows 11 in Insider builds.

"Earlier, the Redmond firm promised to make Recall flexible and more secure. Now the company follows that plan. In addition to the ability to block Recall with group policies, Windows 11 now offers the uninstall option.

The new option is exposed in the Windows Features dialog (optionalfeatures.exe) that manages optional features of the OS. The checkbox is called "Recall". By removing the check mark the user can uninstall Recall.

"It is possible that the ability to remove Windows Recall appeared due to the requirements of the European Union."

This is a welcome change in Microsoft's position concerning Recall.

Reply #46 Top

Quoting pelaird, reply 45

This is a welcome change in Microsoft's position concerning Recall.

It also let's them sneak it in and have people try it...and collect that info. I hope it'll be easy to turn off and actually remain off without confusing menu choices with obfuscating language.

Reply #47 Top

Quoting DrJBHL, reply 46

It also let's them sneak it in and have people try it...and collect that info. I hope it'll be easy to turn off and actually remain off without confusing menu choices with obfuscating language.

Reply #48 Top

Quoting pelaird, reply 47


Quoting DrJBHL,

It also let's them sneak it in and have people try it...and collect that info. I hope it'll be easy to turn off and actually remain off without confusing menu choices with obfuscating language.




Hopefully "off" is just and truly that, pelaird.

Reply #49 Top

Just came across this. I bet the non-European versions mysteriously lack the ability to uninstall Recall...and because of that, I bet it'll be spying in the background.

https://www.xda-developers.com/microsoft-controversial-recall-feature-uninstallable/?utm_medium=newsletter&utm_campaign=XDA-202408300700&utm_source=XDA-NL&user=YW1uYjQ3QHlhaG9vLmNvbQ&lctg=55af43b1a98e4e16c65c101d084f97dcf5e86cb9b102d124aaa37b392ee8a903

That seems to be correct as Martin Brinkmann at gHacks confirms it here:

https://www.ghacks.net/2024/08/29/you-can-remove-recall-from-windows-if-you-do-not-want-it/?_m=3n%2e0038%2e2971%2ehj0ao01hy5%2e341t

Reply #50 Top

Quoting DrJBHL, reply 49

Just came across this. I bet the non-European versions mysteriously lack the ability to uninstall Recall...and because of that, I bet it'll be spying in the background.

https://www.xda-developers.com/microsoft-controversial-recall-feature-uninstallable/?utm_medium=newsletter&utm_campaign=XDA-202408300700&utm_source=XDA-NL&user=YW1uYjQ3QHlhaG9vLmNvbQ&lctg=55af43b1a98e4e16c65c101d084f97dcf5e86cb9b102d124aaa37b392ee8a903

Here's hoping that MS does the right thing! LOL