News for hackers. Stuff that matters.
Re:Microsoft Will Switch Off Recall by Default After Securit... by axus on Friday June 07, 2024 @02:02PM (#40611181)
It's analogous to phone call metadata vs. the contents of the phone calls.
Re:Microsoft Will Switch Off Recall by Default After Securit... by giobox on Friday June 07, 2024 @03:46PM (#40612217)
Perhaps. A key difference though - history files can include the individual pages I requested from the same host. Right now I have like 50 entries for the various posts I read just from HackerNews, all as separate line items etc etc.

In the case of the phone, one simply sees recipient of call, duration etc, regardless of how much information was exchanged. The phone I'm calling is arguably analogous to the server I request a page from, in the metadata context.

I'd argue browser history is significantly richer in some regards due to this. It's not unheard of for user identifiers to appear in URL paths either - try visiting https://news.ycombinator.com/user?id=<HN user name>... In my Chrome, that's instantly in the history file with my username.

Re:Microsoft Will Switch Off Recall by Default After Securit... by 42lux on Friday June 07, 2024 @07:25PM (#40613932)
It won't save your passwords in clear text though.
Re:Microsoft Will Switch Off Recall by Default After Securit... by deafpolygon on Sunday June 09, 2024 @04:18AM (#40622840)
No but it can reveal all of your accounts if you have more than one.
Re:Microsoft Will Switch Off Recall by Default After Securit... by GordonS on Friday June 07, 2024 @03:35PM (#40612122)
Yes, it's a good way to put it. Though it's worse in some respects, since AI will add "context" to the "contents" too.
Re:Microsoft Will Switch Off Recall by Default After Securit... by stuartriffle on Saturday June 08, 2024 @11:34AM (#40618211)
The language spoken by participants during a phone call is also easily classified as “metadata” and could be defended as non-identifiable info with a straight face. So are the number of speakers on the call, the topics of conversation, the intensity of emotions displayed, voice stress levels, and the presence of certain keywords, if you squint a little. The lack of a literal call transcript does not matter much in terms of privacy.

I don’t know anything about this system, but the fact that screen shots are not ultimately stored on the user’s PC doesn’t mean anything if the content has already been classified and indexed. It will be fished.